Privacy Policy
Last Updated: October 5, 2026
1. Introduction
Pace ("we," "our," or "us"), operated by Purple Bluebonnets Labs LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Service").
2. Information We Collect
We collect information you provide directly, information created when you use Pace, and information you choose to connect through partners. This may include:
- Contact information (name, email address, phone number)
- Account, authentication, and wallet identifiers, including Privy user identifiers and wallet addresses
- Waitlist, quiz, onboarding, feedback, and support information you choose to submit
- Connected-account information, transaction history, balances, categories, recurring charges, bills, income inputs, savings goals, and manual transactions when you choose to connect accounts or enter data
- Bob messages, AI prompts, receipt images, shared images, voice/audio input, and related context you choose to send for explanations or transaction cleanup
- Subscription and purchase status, including RevenueCat product, entitlement, restore, renewal, cancellation, refund, and billing state
- Optional location information when you grant permission for localized grocery, gas, or Bob context
- Usage data, device data, push tokens, notification interactions, diagnostics, performance data, and product analytics
- Communication and notification preferences
3. Third-Party Services
We use service providers and partners to operate Pace. Depending on which features you use, these may include:
- Plaid: For secure account connection and transaction data access.
- Privy: For authentication, session management, and embedded wallet infrastructure.
- RevenueCat: For subscription products, entitlements, purchase state, and restore support.
- PostHog: For product analytics and improving user experience.
- GlitchTip / Sentry-compatible tooling: For error and crash reporting with scrubbed diagnostic context. We self-host GlitchTip on Contabo servers in France.
- OpenAI and Gemini: For AI-powered Bob explanations, receipt interpretation, and transaction cleanup.
- Vercel: For website and API hosting and performance infrastructure.
- Neon: For hosting our primary database.
- Expo / EAS: For building, updating, and operating our mobile application and notifications.
- Electric / PowerSync: For sync and local-first read models.
- Cloudflare R2 or similar object storage: For storing receipt or shared images when needed.
- Helius, Bridge, Coinbase, and Reflect: For wallet, partner, webhook, or integration flows when those features are enabled.
- Apple and Google: For app distribution, in-app purchases, subscriptions, and platform services.
4. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Calculate spending estimates, categorize transactions, and explain changes through Bob
- Detect bills, recurring charges, spending leaks, and weekly-number changes
- Process subscriptions, restores, entitlement checks, refunds, and support requests
- Scan receipts, process shared images or voice input, and help add or clean up transactions when you ask Bob to do so
- Send push notifications, reminders, and low-weekly-number nudges when enabled
- Send waitlist, onboarding, product, and support communications
- Send technical notices, updates, and security alerts
- Respond to your comments and questions
- Measure product performance, diagnose errors, prevent abuse, and improve Pace
5. Analytics, AI, and Advertising
We use analytics and error reporting to understand feature usage, reliability, and launch performance. We design these systems to avoid sending raw transaction details, receipts, wallet private keys, Bob message text, or full financial context into analytics events.
Bob uses AI providers to generate explanations and assist with transaction cleanup. AI responses are informational and may be incomplete or incorrect, so you should review suggested changes before relying on them.
We do not sell your personal information, and we do not use raw financial transaction details for third-party advertising targeting.
6. Connected Assistants
You can let an AI assistant you choose, such as Meta's Muse, ChatGPT, or Claude, read your Pace data by creating an API key in the app (Account > Connected assistants). An assistant using your key can read your weekly number, bills, and spending, and can log a purchase when you ask it to. It never receives bank credentials, account numbers, or bank-level transaction data.
Keys are shown once, stored only as one-way hashes, and you can revoke one at any time, which ends that assistant's access immediately. Once an assistant receives data, its own privacy policy governs how it handles that data. Purchases logged through an assistant are categorized by our AI providers the same way as purchases you enter in the app.
7. Data Retention and Deletion
We keep your personal information for as long as your account is active, which may be longer than 12 months, so Pace can show your history and trends. You can delete any individual purchase you logged at any time in the app.
When you delete your account, we revoke your bank connections and remove your user-facing data right away, and the rest of your personal information is permanently removed within about 5 minutes. We keep only an anonymized record of the deletion, plus limited records we are legally required to keep.
8. Where Your Data Is Stored
We store and process your data in the United States. The one exception is error reports, which go to our self-hosted error monitoring in France and can include a user ID and the request path that failed. All data is encrypted in transit with TLS.
9. Requests From Governments and Third Parties
We disclose personal information only when compelled by valid legal process. We review each request, narrow it to what the law requires, and notify the affected user unless we are legally prohibited from doing so.
10. Your Rights & CCPA
Depending on your location, you may have certain rights regarding your personal information, including the right to access, delete, or correct your data.
You can delete your Pace account in the app or request deletion support through our account deletion page.
California Consumer Privacy Act (CCPA): California residents have the right to request information about our collection and use of their personal information over the past 12 months, and the right to opt-out of the "sale" of their personal information (though we do not sell your personal data).
11. Security
We implement industry-standard security measures designed to protect your information from unauthorized access, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at: