Open web app

Legal

Clearly set out, plainly explained.

This page contains the imprint, terms of use, privacy policy and the text of your consent for mypacing 2.0 – for the website, the web app and the apps for iPhone and Android. The German version is legally binding; this English version is provided for your convenience.

As of: 2 October 2026Version v2.1

Imprint

Information pursuant to Section 5 of the German Digital Services Act (DDG)

Provider

SIGAtech Softwareentwicklung
Owner: Siegfried Gaier (sole proprietorship)
Mathildenstraße 11
44793 Bochum
Germany

D-U-N-S-Nummer: 317354278

Contact

Email: hallo@mypacing.app or hallo@sigatech.de
Contact form: sigatech.de/kontakt

The contact form runs on sigatech.de. It therefore also works if the mypacing.app domain or its mail server is unavailable.

Business details

As a small business owner under Section 19 of the German VAT Act (UStG), no VAT is charged or shown. There is no VAT identification number under Section 27a of the German VAT Act, and no entry in a commercial or association register. mypacing is free of charge.

Responsible for content under Section 18(2) MStV

Siegfried Gaier, Mathildenstr. 11, 44793 Bochum, Germany

Trademarks

“mypacing” is a trademark application filed with the German Patent and Trade Mark Office (file no. 302026242304.3). Apple, iPhone, Apple Watch, Apple Health and App Store are trademarks of Apple Inc. Android, Google Play and Health Connect are trademarks of Google LLC. Other product and company names mentioned – for example Garmin, Fitbit, Samsung, Oura, Withings, Whoop and ResMed – are trademarks or registered trademarks of their respective owners and appear here only to describe which devices mypacing works with. There is no affiliation or partnership with these companies.

Consumer dispute resolution

We are neither obliged nor willing to take part in dispute resolution proceedings before a consumer arbitration board. Just write to us – we are happy to find a solution.

Content and links

We create the content of these pages with care. The operators of external pages we link to are responsible for their content; no legal violations were apparent when the links were set. If we become aware of a violation, we remove the link.

Terms of use

As of: 2 October 2026 · version v2.1

§ 1 Scope

These terms of use apply to the use of mypacing – the website mypacing.app, the web app at mypacing.app/app/ and the apps for iPhone and Android (together “mypacing”). The provider is SIGAtech Softwareentwicklung, owner Siegfried Gaier (sole proprietorship), Mathildenstraße 11, 44793 Bochum, Germany (“we”). Deviating terms only apply if we expressly agree to them.

§ 2 What mypacing is

mypacing is an everyday companion that helps you pace exertion and recovery consciously. The app shows values you share from Apple Health (iPhone) or Health Connect (Android) – such as steps, heart rate, resting heart rate, heart rate variability and sleep – together with your own entries: check-in, day plan with energy points, notes and activities. It compares your values only with your own history (“usual range”), shows relationships as observations together with the number of days behind them, and offers a breathing pacer (“rest moment”), a break timer and reminders. A demo with made-up values works without an account.

We keep developing mypacing. There is no entitlement to specific features; we only remove essential features for good reason and announce this in good time.

§ 3 Not a medical device

mypacing is intended for personal reflection and everyday planning. mypacing is not a medical device within the meaning of Regulation (EU) 2017/745. The app is not intended to detect, monitor, predict, treat or alleviate diseases; it does not provide diagnoses and gives no treatment or therapy recommendations. It does not replace medical advice, examination or treatment.

The values come from consumer devices (for example smartwatches and fitness trackers). Their accuracy is limited and not comparable with that of medical measuring devices. Do not make health decisions on the basis of mypacing alone. mypacing is not an emergency system and does not monitor you; in case of acute symptoms, call your local emergency number (112 in the EU).

§ 4 Account

You need an account for your own values and entries. You can create it with an email address and password or sign in with Apple or Google. mypacing may be used from the age of 18. Please provide truthful information, keep your login details secret and let us know if you suspect misuse of your account. An account is personal and not transferable.

§ 5 Costs

mypacing is free of charge. There are no ads and no in-app purchases. Should we ever offer paid services, this will only happen under a separate, express agreement with you.

§ 6 Your data and content

Your values, entries and notes belong to you. You only grant us the rights we need to operate mypacing for you. How we handle your data is governed by the privacy policy and your consent. You can export your data in the app at any time.

§ 7 Fair use

Use mypacing only for yourself and only with data you are entitled to use. In particular, the following are not permitted: attacks on our systems, circumventing security measures, automated bulk requests, reselling the service and content that infringes the rights of others.

§ 8 Availability

We make every effort to keep mypacing reliably available but cannot promise uninterrupted availability. Maintenance, updates and disruptions beyond our control may occur. Entries you make while offline are kept by the app and transferred as soon as a connection is available again.

§ 9 App Store, Google Play and direct download

If you download the app from the App Store or Google Play, the terms of the respective store also apply (for the App Store, Apple’s standard licensed application end user licence agreement). Apple and Google are not parties to these terms and are not responsible for mypacing, its content or support. We also offer the Android app as a file for direct download at mypacing.app/android.html, where we state its version and checksum.

§ 10 Term, termination and deletion

Use runs for an indefinite period. You can terminate at any time without notice by deleting your account in the app (Me → Delete account) or by writing to us. We can terminate with four weeks’ notice by email, for example if we discontinue mypacing; for good cause – for example serious breaches of § 7 – also without notice. Before we terminate, you can export your data.

§ 11 Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health and under the German Product Liability Act. In the case of simple negligence, we are only liable for breaches of essential obligations whose fulfilment makes the proper use of mypacing possible in the first place and on whose compliance you may regularly rely; in this case liability is limited to the foreseeable damage typical for this type of use. Otherwise, liability is excluded.

§ 12 Changes to these terms

If we change these terms of use, the privacy policy or the consent, we increase the version number and show you the new version in the app before you continue. The changes only apply to you once you agree to them. If you do not agree, you can delete your account or export your data beforehand.

§ 13 Final provisions

The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, the mandatory protective provisions of the country in which you have your habitual residence remain unaffected. Should any provision be invalid, the remaining provisions remain valid.

Privacy policy

As of: 2 October 2026 · version v2.1 · under the General Data Protection Regulation (GDPR)

The key points. Your data is stored encrypted on servers in Germany. We only process health data with your explicit consent. There are no ads, no tracking, no analytics cookies and no sale of data. You can export and delete your data yourself in the app.

1. Who is responsible?

The controller is SIGAtech Softwareentwicklung, owner Siegfried Gaier (sole proprietorship), Mathildenstraße 11, 44793 Bochum, Germany, email hallo@mypacing.app. No data protection officer has been appointed, because no employees are involved in processing personal data (Section 38(1) BDSG) and the conditions of Art. 37 GDPR are not met. Because mypacing processes health data, we review this regularly. You can reach us at the address above with any privacy question.

2. Visiting the website

When you open mypacing.app, our web server processes technically necessary information: IP address, time, requested address, status code, amount of data transferred, the previously visited page and details of your browser and operating system. This is necessary to deliver the site and to detect attacks (Art. 6(1)(f) GDPR). These server logs are rotated daily and deleted after 14 days at the latest.

The website uses no analytics or advertising cookies, no tracking and no embedded third-party content; we serve fonts ourselves. Your language choice (DE/EN) is remembered in your browser’s local storage. This is strictly necessary for the function you asked for (Section 25(2) no. 2 TDDDG) and does not leave your device. The demo on the home page runs entirely in your browser with made-up values.

3. Account

For an account we process your email address, first name, date of birth and password. We need your date of birth because mypacing may be used from the age of 18; for the shared analysis (no. 5), only an age band is derived from it. We store email address, name and date of birth encrypted, and the password only as a non-reversible hash. The legal basis is the performance of the contract of use (Art. 6(1)(b) GDPR).

Signing in with Apple or Google: If you choose this option, we receive your email address from the provider (with Apple, a relay address if you wish) and possibly your name; we verify the sign-in token with the provider (Apple Inc. or Google Ireland Ltd./Google LLC). For each signed-in device we store a session key, the platform and a random installation identifier so that you can see and sign out your devices in the app. We keep the IP address of sign-ins and failed attempts for 90 days to detect misuse (Art. 6(1)(f) GDPR); to limit repeated attempts we also use a peppered checksum of the IP address from which the address cannot be recovered.

4. Your daily data and health data

Heart rate, sleep and how you feel are health data (Art. 9(1) GDPR). We only process them with your explicit consent (Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR).

From Apple Health or Health Connect

Only if you allow it in your operating system – separately for each data type – the Android app from version 2.0.3 reads steps, resting heart rate, heart rate variability and sleep (duration and stages) from Health Connect. You see these values in your daily picture and trends alongside your entries, compared with your own previous values. Optional access to past data lets you import your existing history up to ten years back; without it, only accessible recent records are read. The iPhone app can additionally read distance, active energy, floors climbed, heart rate, respiratory rate and oxygen saturation from Apple Health. Extended Android versions can also read these additional data types from Health Connect if you grant each one separately. Under Me → Data sources → Review permissions you can choose them. The system dialog shows which data types your installed version requests. Additional daily values appear in Trends as charts, tables and period comparisons, without medical assessment. Earlier app versions could transfer additional values; existing entries remain available. The app only reads. The single exception: after a completed rest moment it can record that session as mindful minutes in Apple Health or Health Connect. On Android, write permission is requested only when you explicitly choose to save. You can change individual permissions at any time in your device settings; the app then stops reading those data types.

On your device, the values are condensed into daily values (for example steps per day, resting heart rate per day, sleep per night); what reaches us are these daily values, not the individual data points. The app that recorded a sleep or HRV value is reduced on your device to a rough source class (for example Apple, Garmin, mixed); we do not transfer device or package identifiers.

Your own entries

Check-in (how you feel, how you slept, mental load, rest during the day), day plan with energy points and breaks, daily notes, activities with duration and effort, and rest moments.

What for

So that mypacing can show you your values, compare them with your own history, calculate weekly reviews and patterns and save your day plan – on all your devices. The analysis is statistics on your own values; there is no automated decision with legal effect (Art. 22 GDPR), and we do not use artificial intelligence for it.

5. Shared analysis (mypacingLAB)

Part of your consent is that your daily values flow, pseudonymised, into a shared internal analysis: under a random research identifier instead of your name, email or account number, and only with an age band instead of your date of birth. For HRV we also store the rough source class, because different devices calculate HRV differently.

Narrowly limited purpose: The shared analysis serves exclusively three questions – exertion and recovery (how activity, exertion and breaks relate to recovery), sleep, and resting heart rate and heart rate variability over the day – and only to make the presentations and analyses in mypacing clearer and more accurate. Results are only formed at group level. We do not run studies, do not pass data on to research institutions or other third parties, and do not use the data to train AI models.

Contributions made under an earlier version of the consent (up to v1.14) remain in the pool and continue to be analysed only for the purpose stated in that version.

Why both are linked – and what withdrawal does: The shared analysis is combined with your personal analysis in one consent; we do not currently offer taking part in only one of the two. You can withdraw your consent at any time with effect for the future: by deleting your account in the app (Me → Delete account) or by writing to us informally – we will then delete your account. From then on, no new values flow into the pool. Contributions already made remain without any link to you, because the assignment disappears with the account. If you want them removed as well, please tell us before the deletion (hallo@mypacing.app).

6. Web app and apps on your device

The web app stores in your browser (local storage) your session key, your settings (language, appearance, reminder), cached display data and entries not yet transferred. The apps store the session key in your device’s protected keychain or keystore and the other information in their app storage. This is strictly necessary for the function (Section 25(2) no. 2 TDDDG). When you sign out, the app removes your session key and the cached data; only settings such as language and appearance remain.

Reminders and the break timer in mypacing 2.0 are notifications triggered by your device itself; no push service is involved.

7. Emails

We write to you when your account requires it: confirming your email address, resetting your password, security notices, changed legal texts, the reminder before an unused account is deleted and – if you downloaded the Android app directly from our website – notices about a new version (Art. 6(1)(b) and (f) GDPR). You only receive the weekly review by email if you switched it on; you can unsubscribe with one click in each of these emails. The emails are sent via ALL-INKL.COM (no. 10).

8. When you write to us

If you write to us by email (or, in older app versions, through the support form), we process your message and contact details to deal with your request (Art. 6(1)(b) or (f) GDPR). If your message contains health information, we only use it for the reply. Replies are written by people; no AI service is involved. We delete messages about your account at the latest together with the account, unless statutory retention obligations apply.

9. Data from earlier versions of mypacing

Until 21 and 22 September 2026, mypacing offered further features that were discontinued with its realignment. What was created with them remains in your account until you delete it; on request we delete it earlier (hallo@mypacing.app):

  • Earlier information such as a health profile, symptoms with severity, days marked as “crash”, standing test and questionnaires. No new information of this kind is collected.
  • Further measurements from earlier app versions (for example blood pressure, body measurements, VO₂max, cycle data or CPAP metrics), if you shared them at the time. mypacing 2.0 only reads the values listed in no. 4.
  • Technical measurement diagnostics of the former camera measurement (metrics about the recording only, no image): deleted automatically after twelve months.
  • Anonymous data donations without an account: no longer accepted; we delete files already donated once they have been processed, but no later than 24 months after receipt.
  • Share links: no longer work; only the character string, label, expiry and number of views are stored.
  • Weather: If you stored a location in an earlier version, we continue to add weather values from Open-Meteo (Switzerland) to your daily values. Only coordinates rounded to about one kilometre and the time period are transmitted – no name, no health data. We delete the location on request.
  • Oura: If you connected your Oura account earlier, the connection remains stored. Ring data is only fetched through it from Oura Health Oy (Finland) when an older app or web version triggers a sync. We remove the connection on request.
  • Push notifications: Older app versions (1.x) can receive reminders as push notifications if you allowed this there. For this, a device identifier and the text of the message go to the push service of Apple (USA) or Google (Ireland/USA). The texts contain no health values.

10. Who receives your data

We do not sell data, show no ads and do not pass your data on to third parties for their own purposes. Only the following are involved:

  • Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany – servers and operation, data centre in Nuremberg. Your account and your health data are stored here.
  • ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany – domain and sending of emails. Your email address goes there when we write to you; no health data is stored there.

Both work exclusively on our instructions on the basis of a data processing agreement (Art. 28 GDPR). Only for features you choose yourself are the following added: Apple or Google when you sign in with them (no. 3) and for push notifications of older app versions, and Open-Meteo and Oura for the legacy features in no. 9. When you download the app from the App Store or Google Play, Apple or Google process data under their own responsibility according to their own privacy notices.

11. Transfers to third countries

Your account, your health data and all analyses are processed exclusively on servers in Germany. Information only leaves the EU with the optional features in no. 3 and no. 9: to Apple and Google (USA) for signing in with them and for push notifications of older app versions – both are certified under the EU-US Data Privacy Framework or use standard contractual clauses – and to Open-Meteo (Switzerland), for which an adequacy decision of the European Commission exists. If you sign in with email and password and use no legacy features, no personal data leaves the EU.

12. How long we keep data

  • Account, daily data and entries: as long as your account exists. If you delete it, we remove your personal data unless statutory retention obligations prevent this. After 24 months of inactivity we delete an account ourselves; we send a reminder by email two months beforehand.
  • Backups are only used for restoring, are kept protected outside the public area and are deleted after 14 days. After an account deletion, a copy may therefore remain in a backup for up to 14 days.
  • Server logs: 14 days. IP addresses of sign-ins: 90 days.
  • Pseudonymised contributions to the shared analysis: see no. 5.

13. Security

All connections are encrypted with TLS. We store health data, email address, name and date of birth encrypted, and passwords only as a hash. Access to the servers is limited to what is technically necessary.

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

How it works in practice: In the app under Me you can download your data and delete your account. For everything else, an informal email to hallo@mypacing.app is enough; you do not need to give a reason.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany, phone +49 211 38424-0, poststelle@ldi.nrw.de.

15. Do you have to provide data?

Without email address, first name, date of birth and password (or signing in with Apple or Google) we cannot create an account. Without consent to the processing of your health data, mypacing cannot store and analyse your values; the demo remains open to you. Which values you share from Apple Health or Health Connect is up to you.

16. Changes

We update this privacy policy when mypacing changes. With every change we increase the version number and show you the new version in the app.

Consent to the processing of health data

Version v2.1 · 2 October 2026

You confirm this text with a separate checkbox when you register in the app or web app. Without it, mypacing cannot store your values; the demo works without it.

“I explicitly consent to mypacing storing my health data (e.g. heart rate, sleep, how I feel) encrypted and processing it for my personal insights. Inseparably included is mypacingLAB: my daily values are pseudonymised and pooled into groups for a shared analysis – delimited, not open-ended, to the questions of exertion and recovery, sleep, and resting heart rate and heart rate variability over the day, solely to improve how mypacing presents data. No selling, no advertising, no sharing. I can withdraw at any time by deleting my account (Art. 9(2)(a) GDPR).”

What the consent covers

  • Which data: the values you share from Apple Health or Health Connect (steps, distance, energy, floors, heart rate, resting heart rate, heart rate variability, sleep, respiratory rate, oxygen saturation), your check-ins, day plan, notes, activities and rest moments – as described in no. 4 of the privacy policy.
  • What for: first, your personal overview and the comparison with your own history; second, the pseudonymised shared analysis (mypacingLAB), exclusively on the questions of exertion and recovery, sleep, and resting heart rate and heart rate variability over the day, and only to improve the presentations in mypacing (no. 5 of the privacy policy).
  • What flows into the shared analysis: per calendar day and under the random research identifier, age and sex only as a rough group (the age band; sex only if you stated it in an earlier version) and – likewise only from earlier versions – the diagnoses you live with; which route the values came by; resting heart rate, daily low and daily high, how many seconds of a day your heart rate was at which value and how many data points there were, the time above your personal heart rate limit (if you set one earlier), heart rate while walking and how quickly your heart rate drops after exertion; night-time heart rate with its lowest and average value and how much it varied; heart rate variability with device class, calculation method and the period over which it was formed; sleep duration with deep sleep, REM, light sleep and time awake as well as your device’s sleep score; steps, distance covered, floors, basal and total energy; respiratory rate and oxygen saturation (SpO₂); your own entries from the check-in (how you feel, sleep quality, lying down during the day and whether you slept then, head & contact – thinking, talking, stimulation – and a self-entered resting heart rate) and your activities with duration and effort. From earlier versions (apps and file upload) also wheelchair pushes and wheelchair distance, walking speed, walking steadiness, six-minute walk distance, maximal oxygen uptake (VO₂max), blood pressure, weight, body fat percentage, body mass index, body temperature, wrist temperature, water intake, sodium intake, cycle data, Garmin Body Battery, Whoop and ResMed myAir metrics, severity information (Bell scale, FUNCAP questionnaire), standing test results (heart rate lying down and standing, without time of day) and medications – only name, type, start date and end date; dose and note stay in your account – and only if you stored a location earlier, the weather at your location with humidity and air pressure. Your name, email address and exact date of birth are not included.
  • Who: only us. Our host Hetzner in Nuremberg runs the servers on our behalf. No sharing with third parties, no sale, no advertising, no training of AI models.
  • Where and how long: encrypted on servers in Germany for as long as your account exists. If you stop using mypacing, we delete your account at the latest after 24 months of inactivity; we remind you by email two months beforehand.

Voluntary and revocable at any time

Consent is voluntary. You can withdraw it at any time with effect for the future – by deleting your account in the app (Me → Delete account) or by writing to us informally at hallo@mypacing.app; we will then delete your account. The lawfulness of processing up to the withdrawal remains unaffected. After withdrawal, no new values flow into the shared analysis; pseudonymised contributions already made remain there afterwards, without any link to you – unless you ask us before the deletion to remove them as well.

Independently of this, you control in your device settings which values from Apple Health or Health Connect the app may read. This permission does not replace the consent; it technically determines what can be read.

Record and earlier versions

We store when you agreed to which version. Anyone who agreed to an earlier version (up to v1.16) is shown this version once in the app before continuing. Contributions that entered the shared analysis under a version up to v1.14 continue to be analysed only for the purpose stated at the time.

What changed with v2.0: legal texts rewritten and combined for mypacing 2.0; exact list of the values the new app reads; day plan, rest moments and activities as separate entries; information on data from earlier versions. No new kinds of data, new recipients or new purposes are added.