The shortest privacy policy you'll read this year.

Pace runs on your Mac. Your voice, your screen, your meeting audio, and everything Pace writes about them are processed and stored locally. I don't operate servers that receive your data, because there aren't any in the loop.

What the Pace app collects

Nothing. The native app has no account, email collection, analytics SDK, telemetry, or crash reporter phoning home. The in-app privacy dashboard reads a local audit log and shows "0 bytes sent off this Mac" — that number is computed, not asserted.

Public website analytics

Pages on heypace.app use Microsoft Clarity for visits, session interaction, and heatmaps; Watchtower measures aggregate routes and performance; and App Health records page visits and the website's explicitly named button events. App Health uses a first-party persistent anonymous browser ID for up to 90 days, records cleaned page paths, the referring site hostname, bounded campaign tags, and coarse country, device, and browser categories. It does not receive button text, form contents, or app data. The website has no Pace account or in-app voice, screen, meeting, or journal data. The native app loads none of these website analytics services and sends no telemetry.

The exceptions, stated plainly

• Auto-update: the app checks a GitHub-hosted appcast for new versions (standard Sparkle). That request carries no personal data.
• Optional cloud tiers: if you explicitly configure a bring-your-own-key API tier or the CLI bridge, those turns go to the provider you chose, under that provider's privacy policy. The menu-bar capsule tints amber whenever this happens, and meeting transcripts are pinned local and never use these tiers.
• File downloads you ask for: the download tool fetches a URL you named into ~/Downloads. It sends nothing.

Meeting recordings

Stored as ordinary WAV files under ~/Library/Application Support/Pace/meetings/, pruned automatically per your retention setting, deletable in Finder. They never leave the machine.

Questions: email me. I can't see your data, so I can't export or delete it for you — it's already yours.