Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains which personal data is processed when you use the WholePace app for iPhone and iPad, for which purposes, who receives it and which rights data subjects have. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, takes the EU General Data Protection Regulation (GDPR) into account. The German version is authoritative.

Controller

Xvision Solutions
Mario Mueller
Waldhaus 5
3432 Lützelflüh
Switzerland
office@xvision.solutions

Principles

• WholePace is a nutrition and health app. Data is processed only as far as these features require.
• WholePace works without an account. Without an account, everything you enter stays on your device only.
• In the current version, information about nutrition, your body and activity is stored on your device only. We do not receive it, not even with an account.
• WholePace contains no advertising, does not track you across apps or websites of other providers and does not sell data.
• The data of an account is stored with Supabase in a project located in Zurich, Switzerland.

Which data we process

Data on your device

This data results from your input and is kept in the app’s database on your device:

• foods, recipes and meals with time, amounts and nutritional values
• daily targets for energy and nutrients
• details for the target calculation: date of birth, sex, height, weight and your 24-hour activity profile (all optional)
• name and profile picture (optional)
• app settings such as language and appearance
• with an account: the sign-in session in the iOS keychain

WholePace does not use iCloud synchronisation for this. The data is removed when you delete the app.

Account and sign-in

An account is optional. If you create one, the following is processed:

• email address and password when signing in by email. The password is stored with the sign-in service only as a cryptographic hash; we have no access to it in plain text.
• with “Sign in with Apple”, an identifier provided by Apple and the email address Apple passes on, possibly a private relay address from Apple, and your name if you allow it
• user ID, session and sign-in information, and the times of registration and sign-in

When creating an account, you confirm that you are at least 16 years old. To confirm your email address and to reset your password, the sign-in service sends emails to the address on file.

Profile in the account

• display name
• optional profile picture. It is kept in private file storage and can only be read by your account.

Technical data

When the server is accessed, technically necessary data arises, in particular IP address, time, requested function and error messages. The hosting provider logs it to ensure operation and security.

Crash and error diagnostics

To detect and fix crashes and technical errors, WholePace uses the Sentry service. When a crash or technical error occurs, the app sends a technical report, in particular the kind of error and error code, the affected area of the app, technical steps before the error, device model, operating system, app version and build, and information about the stability of the app session (start, end, crash).

The reports contain no content such as foods, meals, weight or body details, no names, no email address and no user ID. Screenshots, screen recordings and recording of how you use the app are disabled. The IP address is used technically for transmission but is not stored as part of the reports. The reports are stored in Sentry’s EU region (Germany) and deleted after the retention period, at the latest after 90 days.

No analytics or advertising services

WholePace uses no usage-analytics services and no advertising identifiers. If that changes, this Privacy Policy will be updated beforehand.

Health data

Information about nutrition, weight, your body and activity can be health data and therefore particularly sensitive personal data.

• This information is optional. Body details are only needed if you want the target assistant to calculate a guideline value.
• It is stored and calculated exclusively on your device. It is not transmitted to our servers, to Sentry or to any other third party.
• It is not used for advertising, profiling or any purpose other than the app’s features.
• It will only be transferred to the cloud, for example for synchronisation between devices, once that feature is offered. This Privacy Policy will be updated beforehand, including the legal basis and any explicit consent that may be required.

Purposes

We process data in order to:

• provide the app’s features on your device
• provide and secure the optional account, sign-in and profile
• ensure secure and stable operation, prevent abuse and detect and fix crashes and errors
• answer support requests
• comply with legal obligations

Legal bases

Where the GDPR applies, we base processing on the following legal bases:

• performance of the contract of use for account, sign-in and profile (Art. 6(1)(b) GDPR)
• legitimate interests in secure, stable and abuse-free operation, including crash and error diagnostics (Art. 6(1)(f) GDPR)
• consent for voluntary information such as your name or profile picture (Art. 6(1)(a) GDPR)
• compliance with legal obligations (Art. 6(1)(c) GDPR)

Health data is processed only on your device and does not reach us; we do not currently process it.

Under the FADP, processing takes place within the purposes stated above and in line with the principles of proportionality, purpose limitation and data security.

Recipients and processors

Personal data is only disclosed where this is necessary for operation, required by law or the data subject has consented. Service providers process data on our behalf and only for the agreed purposes.

• Supabase, Inc. (USA) provides authentication, database, file storage and server functions for the account. The project is located in Zurich, Switzerland.
• Apple Inc. (USA) or Apple Distribution International Ltd. (Ireland) for distribution through the App Store and “Sign in with Apple”. Apple’s privacy policy also applies to these services.
• Functional Software, Inc. (Sentry, USA) for crash and error diagnostics. Reports are stored in Sentry’s EU region (Germany).
• Authorities only receive data where there is a legal obligation.

Transfers abroad

Account data is stored in Zurich, crash and error reports in Germany. Some of the service providers named above are based in the USA or use sub-processors abroad, for example for operation or support. Data is only disclosed to, or accessed from, a country without an adequate level of data protection if appropriate safeguards are in place, in particular certification under the Data Privacy Framework or standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the European Commission.

Retention and deletion

• Data on your device remains until you change or delete it in the app or delete the app.
• Account data is stored for as long as your account exists.
• You can delete your account at any time in the app under Settings. This permanently deletes your account, your profile and your profile picture on the server. Data on your device is kept.
• Crash and error reports are deleted after 90 days at the latest.
• Deleted data may remain in backups until the hosting provider’s regular backup cycles expire and is then overwritten.
• Statutory retention obligations remain reserved.

Data security

We take appropriate technical and organisational measures, in particular encrypted transmission (TLS), access rules at database level (row level security), private file storage for profile pictures, storing passwords only as a hash and storing the sign-in session in the iOS keychain. Absolute security cannot be guaranteed for electronic transmission and storage. Please protect your sign-in details and unlocked devices.

Your rights

Within the scope of applicable law, data subjects have the right to access, rectification, erasure, restriction of processing, objection and data portability. Consent can be withdrawn at any time with effect for the future; this does not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on legitimate interests, data subjects can object to it at any time on grounds relating to their particular situation.

Please send requests to office@xvision.solutions. To avoid disclosing data to unauthorised persons, we may ask for proof of identity. You can view, change and delete data that is stored only on your device directly in the app; we have no access to it.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the supervisory authority in your place of residence.

Minimum age

WholePace is intended for people aged 16 and over and is not directed at children. We do not knowingly collect data from children under 16. If we learn that an account was created by a child under 16, we will delete it.

Paid optional features

The core features of WholePace are free of charge. Should optional extra features be offered for a fee in the future, purchases will be made through Apple In-App Purchase. Payment data is processed exclusively by Apple; we only receive the purchase confirmation needed to unlock the feature. This Privacy Policy will be updated accordingly beforehand.

Changes

This Privacy Policy may be updated if WholePace, the services used or legal requirements change. The version published in the app and on wholepace.app applies. We will inform you of material changes in an appropriate manner.

Contact

If you have questions about data protection, contact us at office@xvision.solutions.

This website

This static website is provided through GitHub Pages by GitHub, Inc. (USA). When you visit it, GitHub processes technical data, including your IP address, in particular to keep the service secure. More information is available in the GitHub Privacy Statement. Where data is transferred to the USA, GitHub relies on certification under the Data Privacy Framework or on standard contractual clauses. The legal basis is our legitimate interest in providing the website securely (Art. 6(1)(f) GDPR).

The website sets no cookies, embeds no analytics, advertising or social media services and loads no fonts or scripts from third parties. Your choice of light or dark appearance is stored only in your browser’s local storage under wholepace-site-theme and is not transmitted. You can remove this setting by clearing the website data.

Contact by email

If you send us an email, we process your email address and the content of your message to answer your request. The email link opens your own email app; no form entries are collected on this website.