Privacy policy

Who we are

Kilopace (kilopace.com) is run by ThirteenTabs Ltd, a company registered in the United Kingdom. We decide how your personal data is used, which makes us the controller under the UK GDPR and, for visitors in the EU, the EU GDPR. Company details are on our legal notice.

Questions about your data: [email protected].

What we collect and why

Your quiz answers, such as age, height, weight, training history, schedule and any health information you choose to give (for example pregnancy, medical conditions, medication or injuries). We use them only to calculate and build your journal. Legal basis: performing our contract with you; for health information, your explicit consent, which you give with the checkbox before checkout.
Your first name, if you add it, to print on the cover. Legal basis: contract.
Your email address, to deliver your journal, let you download it again and send new editions. Legal basis: contract.
Order details from our payment provider (order number, amount, currency, email), to deliver your order, handle refunds and keep accounts. Legal basis: contract and legal obligation.
Analytics, only if you accept them in the cookie banner: Google Analytics 4 and Yandex Metrica show us which pages help people and where the checkout loses them. Legal basis: consent.
Cookieless statistics and security logs: Cloudflare Web Analytics counts visits without cookies or profiles, and our hosting providers keep short-lived technical logs (IP address, browser) to keep the service secure. Legal basis: our legitimate interest in running a secure, working website.

We do not sell your data, use it for advertising or share it with data brokers. Your plan is calculated automatically from your answers; this produces training content only and has no legal or similarly significant effect on you.

Payments

Payments are handled by Lemon Squeezy, which acts as the merchant of record and sells the journal to you on our behalf. Lemon Squeezy processes your payment details under its own privacy policy. We never see or store your card number.

Who processes data for us

Supabase: database, file storage and server functions, hosted in Frankfurt, Germany.
Cloudflare: website hosting, content delivery and cookieless statistics.
Anthropic: writes the explanatory text in your journal. It receives your calculated plan figures and first name, never your email address, and does not use them to train its models.
Lemon Squeezy: checkout, payment, tax and receipts.
Google (Google Analytics 4) and Yandex (Yandex Metrica): analytics, only with your consent.

Each provider may only use the data to provide its service to us, under a data processing agreement.

International transfers

Some providers process data outside the UK and the European Economic Area, mainly in the United States. Where they do, the transfer is covered by an adequacy decision (including the UK–US data bridge and the EU–US Data Privacy Framework) or by standard contractual clauses and the UK addendum.

Yandex Metrica may process data in Russia, which has no adequacy decision, so your data there may not have the same protection as in the UK or EU. We load Yandex Metrica only if you accept analytics cookies; accepting is your consent to this transfer, and refusing does not limit how you can use the site.

Cookies and similar storage

Necessary: your cookie choice and, while you take a quiz, your answers in your browser's storage so that you do not lose them on the way to checkout. These do not need consent.
Analytics: Google Analytics (cookies starting with _ga) and Yandex Metrica (cookies starting with _ym), set only after you accept. You can change your choice at any time with the cookie settings link at the bottom of every page.

How long we keep your data

Quiz answers, name, email and your journal file: 24 months from purchase, so that you can download your journal again and use your editions. They are then deleted automatically.
Checkouts that were never paid: deleted after 30 days.
Records needed for tax and accounting are kept by Lemon Squeezy for the period the law requires.
Analytics data: up to 14 months in Google Analytics; in Yandex Metrica, for the period set in Yandex's own retention settings.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Where we rely on consent, you can withdraw it at any time; this does not affect what we did before. If you withdraw consent for your health information, we delete your answers and cannot build new editions of your journal.

Email [email protected]; we reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk) or, in the EU, to the data protection authority where you live.

Age

Kilopace is for adults. Please do not use it if you are under 18.

Security

Data is encrypted in transit, journals are stored privately and shared only through time-limited download links, and access to personal data is limited to the people who need it to run the service.

Changes

If we change this policy, we update the date below and, for significant changes, tell customers by email. Version: 2026-10-19.