The short version. In version 1.0, everything you enter in PainPath stays in the app on your iPhone. There is no account. I do not receive your data and I cannot see it. The app contains no analytics and no tracking.
Who is responsible
PainPath is made by an independent developer in Switzerland. I am the controller under the Swiss Federal Act on Data Protection (nFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
Email: hello@getpainpath.com
What the app stores on your iPhone
In version 1.0, PainPath saves what you enter in a database inside the app on your iPhone. This includes:
- the spot that hurts and which side
- your answers about training, shoes, age band and running style
- your answers to the safety questions about warning signs
- your self-check answers and the result
- daily pain check-ins, notes and run distances
- your plan, finished exercises and reminder times
- the date you accepted the disclaimer
Some of this is health data. Health data is sensitive personal data under the nFADP (Art. 5 lit. c) and the GDPR (Art. 9). That is the reason PainPath keeps it on your device and nowhere else.
What the app does not do
- No account or login.
- No connection to a server run by me or anyone else. The app works fully offline.
- No analytics and no crash reporting tools.
- No advertising and no tracking across apps or websites.
- No third-party software development kits (SDKs).
- No access to Apple Health, your location, your camera or your contacts.
- No sale or sharing of data, because I have none.
Reminders
Reminders are local notifications. Your iPhone schedules and shows them. Nothing is sent through a server. A reminder can appear on your lock screen, so other people who see your phone could read it. You can turn reminders off in the app or in the iOS Settings.
The physio report
The PDF report is created on your iPhone. It only leaves your device if you share it yourself, for example by email or a messaging app. The person and the app you send it to then handle it under their own terms. I never receive a copy.
Device backups
PainPath does not sync data through iCloud. If you back up your iPhone with iCloud Backup or to a computer, the backup can include the data of PainPath like that of any other app. Backups are stored under your Apple Account or on your computer, under your control. I have no access to them. You can leave PainPath out of iCloud Backup in the iCloud settings of your iPhone.
The waitlist
If you join the waitlist on this website, I store your email address with Loops (Loops, Inc., USA), the service that sends the waitlist emails. You get a welcome email right away and one more when PainPath opens. Loops stores the data on servers in the USA, so your address is transferred there. I use it for nothing else and I never sell or share it. Every email has an unsubscribe link, and you can also write to me to be removed. I delete the list once the app is open and the launch email is sent.
Links and Apple
The sources screen links to research and health websites. If you open a link, that website handles your visit under its own privacy policy.
Apple processes some data when you download the app, for example your purchase history, under the Apple privacy policy. If you turned on "Share With App Developers" in the iOS Settings under Privacy and Security, Analytics and Improvements, Apple may share anonymous crash reports and usage statistics with me. You can switch this off there at any time.
How long data is kept and how to delete it
Your data stays on your iPhone until you delete it. To delete everything, delete the PainPath app from your iPhone. iOS then removes all of its data from the device. Data in older device backups stays there until those backups are replaced or deleted.
Your rights
Under the nFADP and the GDPR you have the right to see your data and to have it corrected. You can also ask for it to be deleted. Under the GDPR you can also ask for restriction of processing and data portability, and you can object to processing. Because I hold no data about you from the app, I will usually have nothing to show or delete. You can still write to me at any time and I will answer.
You can complain to a supervisory authority. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC). In the EU it is the data protection authority of your country.
Children
PainPath is meant for runners aged 13 and up. It does not collect data from anyone, children included.
Changes to this policy
This policy covers version 1.0. If a later version changes the way the app handles data, for example with a subscription or a training import, I will update this page and the date at the top before that version is released.