Skip to content

Privacy Policy

Last updated: October 24, 2026

Plain-English summary. We collect the minimum needed to run your study planner: your email, a securely handled password, and the study data you create. Your data lives on EU servers, is never sold, and there are no ads and no advertising trackers; visits are counted without cookies. Delete your account and your synced data goes with it.

1. Who we are

Paced is operated by Aim2Futur, a French sole proprietorship (entreprise individuelle) of Alexandre Doumergue, registered under SIREN 951 422 740, Lyon, France (“we”, “us”). We are the data controller for the processing described here.

Contact, including for privacy matters: contact@pacedstudy.fr. No Data Protection Officer has been appointed (not required under Article 37 GDPR).

2. What we collect

  • Account data — your email address and a password. The password is handled by our authentication provider and stored only in hashed form; we never see or store it in plain text.
  • Study data — the subjects, topics, schedules, calendar entries and review history you create. It is stored as a single data record tied to your account so it can sync between your devices.
  • Practice follow-up, notes and Mistake deck — what you choose to write in Paced beyond your schedule: after a pass, how it felt, how many practice questions you did and your percentage of right answers; your notes on a topic or a pass (and an optional link to your own notes); the questions you add to your Mistake deck (a question, its answer, an optional photo) with the dates when each card is due. All of it is stored in separate tables tied to your account, readable only by you, never shown to anyone else and never used for advertising or profiling. Photos go to a private storage space (2 MB at most each, JPEG, PNG or WebP, a folder per account, shown through links that expire after one hour).
  • Anki: everything stays on your computer — two optional tools of the Mistake deck, for a computer where Anki runs. (1) Link Anki (Settings, off until you switch it on): the page talks directly to the AnkiConnect add-on on your own computer (http://127.0.0.1:8765) to read how many Anki cards are due today and, when you tap “Send to Anki”, to add your Mistake deck cards to an Anki deck. None of this goes through our servers, except the photo of a card you send: Anki downloads it through a signed link that expires after 15 minutes and keeps it in your own collection. (2) Read an Anki deck (.apkg): the file is opened inside your browser and never uploaded; only the cards you choose to import are saved, as Mistake deck cards (with at most one picture each, same rules as above).
  • Quick captures, “My why”, weekly reflections and week templates — what you choose to write to organise your days: the quick notes you capture; one sentence on why you study, the exam you keep in view and the grade you aim for (each optional); one line per week on what worked; and the typical weeks you save (study hours, weekly classes, regular sessions) to apply them to a period later. All of it is stored in separate tables tied to your account, readable only by you, never shown to anyone else and never used for advertising or profiling, and it is included in “Download my data”.
  • Time settings and time split — your energy windows, the rhythm you give a topic, the subjects you only track, your choice for “After a day off” and, once you set them, the hours of a given day, your markers (bedtime, meals…), where your daily review slot sits, the mode of your passes and your subject slots (one row per account); and, for a session you choose to split, how its minutes divide between study, practice, daily review and other. All of it is stored in separate tables tied to your account, readable only by you, never shown to anyone else and never used for advertising or profiling, and it is included in “Download my data”.
  • My path (archived terms and other paths) — when you archive a term or keep several paths, a full copy of that plan (topics, schedule, review history, grades) and a short summary (period, hours, passes, average) are stored as separate rows tied to your account. They are copies of data you already gave us; only you can see them, never a school or a prep course.
  • Waitlist (closed) — the site no longer collects waitlist sign-ups: the App Store download replaced them at launch. Emails collected before that are kept only until the launch communications are over, or erased immediately on request.
  • Local storage & cookies — this site sets no advertising and no analytics cookie. Your browser stores: a2-theme (your light/dark choice), paced.device-prefs (display choices for this device only: sorting, compact view, and which blocks of Today are shown and in what order), your Supabase session (what keeps you signed in), a2:anki-pont (only if you link Anki: whether it is linked, the decks you chose and, if you set one, your AnkiConnect key — on this device only, never sent to us), and — only if you arrive through a creator link carrying ?ref=CODE — a2-ref, the creator code, kept so it can pre-fill the optional field at signup. You can clear all of them at any time from your browser settings.
  • Subscription data — if you subscribe, we store what we need to know that your access is valid: your plan, its renewal date, and an identifier for the subscription. We never see or store your card details. Card payments on the web are processed by Stripe; purchases made in the iPhone app are processed by Apple, which tells us only whether a subscription is active.
  • Technical logs — our hosting providers keep standard, short-lived server logs (IP address, request metadata) for security and reliability.
  • Audience measurement (cookieless) — since 8 October 2026 this site uses Vercel Web Analytics, provided by our host Vercel Inc. (a processor, see section 4), to count visits, pages viewed and where visitors come from. It sets no cookie and reads or writes nothing on your device. For each page view it receives the page URL, the referrer and any UTM parameters, an approximate location derived from the IP address (country, region, city), the device type, operating system and browser. To tell visitors apart within a day it computes a non-reversible hash of the IP address and browser that is discarded after 24 hours; the IP address itself is not stored by this tool. Statistics are aggregate only: nothing is tied to your account, no cross-site tracking, no advertising use. You can opt out at any time by blocking the path /_vercel/insights/ in your browser or with a content blocker — the site works exactly the same without it.
  • Free-plan usage (web) — to know whether the free plan works, we record, on our own servers and tied to your account, when a free account meets one of its limits (which limit, when) and when it opens the subscription page from there. Nothing else: no page views, no device fingerprint, no third party. These rows are deleted with your account.

We use no advertising and no advertising or cross-site trackers — the only measurement is the cookieless one above — and we never sell or rent your data.

Calendars you connect (optional)

If you connect a calendar in Settings › Agendas (Google Calendar, iCloud or Outlook, through its secret.ics address), we read its events to treat them as busy time in your plan. We keep the address,encrypted and never shown again; for each event only its start, its end, a technical identifier and — only if you turn it on — its title. We never read guests, places, notes or attachments. We read a window from 7 days back to 120 days ahead and replace it at every refresh. We write nothing back to a calendar link. This data is used only to plan your study sessions: no advertising, no profiling, no other use. Our servers contact only Google, iCloud and Outlook addresses. The basis is your consent, given calendar by calendar and withdrawn at any time with “Disconnect”, which deletes the address and every event read; you can also switch a calendar off, or hide its titles. If you answer “Does it get in the way of my reviews?” for an event, we keep that answer (yes or no) for its whole series, tied to your account and readable only by you; it is deleted with your account and included in “Download my data”.

Google Calendar connection (optional)

If you connect your Google account in Settings › Agendas, Google asks you to approve three permissions: list your calendars (read-only), read the events of the calendars you choose (read-only), and create and manageonly the calendar that Paced itself creates, named “Paced”. From the calendars you choose we read, for each event, its start, its end, a technical identifier and — only if you turn it on — its title; never guests, places, notes or attachments, and never all-day events or events you marked as free. We write your upcoming study sessions (title, start, end, a short note) only into the “Paced” calendar: we never create, change or delete anything in your own calendars. We store, on our servers and tied to your account: a refresh token encrypted and never shown again, the identifiers and names of your calendars, the busy times read, and the link between each session and its event. “Disconnect Google” deletes the “Paced” calendar from your Google account, revokes the token at Google and erases all of this; deleting your account does the same. You can also remove Paced at any time at myaccount.google.com/permissions. This data is used only to plan your study sessions: no advertising, no profiling, no sale, no other use, and no human reads it except with your consent, to investigate abuse, or where the law requires it. The basis is your consent, withdrawn at any time. Google remains an independent controller of your Google account and calendars, under its own privacy policy.

Google user data

This is the complete list of what Paced does with the data it receives from your Google Account through the Google Calendar API. Nothing outside this list is done with it.

  • What we access, and why. calendar.calendarlist.readonly: the names, identifiers and time zone of your calendars, and the email address of your Google account (the identifier of your primary calendar), so you can choose which calendars count as busy time and see which account is connected. calendar.events.readonly: for the calendars you chose, each event's start, end, technical identifier and, only if you turn it on, its title, so that your study sessions are planned around them. calendar.app.created: to create the separate “Paced” calendar and to write, move and delete your study sessions inside that calendar only; with this permission Paced cannot touch your other calendars.
  • How we use it. Only to show you your calendars and to plan and write your study sessions: a user-facing feature of Paced. No advertising (personalised or not), no profiling, no credit or lending decision, no sale.
  • Who receives it. Nobody. We do not sell, rent or transfer Google user data to third parties, including advertising platforms and data brokers. It is stored with our hosting provider Supabase, in the European Union, which acts only as our processor; the only other party it is exchanged with is Google, on your instruction.
  • Machine learning. We do not use Google user data to develop, improve or train generalised machine-learning models, and we do not hand it to any automated model or third-party analysis service.
  • Human access. No one at Paced reads it, except if you first agree to it, if it is necessary to investigate abuse or a bug, or if the law requires it.
  • How it is stored and protected. Over encrypted connections only. The refresh token is encrypted (AES-256-GCM) before it is stored and is never shown again; access tokens are kept in memory for the length of one call and are not stored. Each table that holds this data can be read only by its owner.
  • How long we keep it, and how you delete it. Busy times cover a sliding window (7 days back to 120 days ahead) and are replaced at every refresh. Everything else is kept until you press “Disconnect Google” in Settings › Agendas or delete your account: the token is revoked at Google, the “Paced” calendar is deleted from your Google account and every row stored about the connection is erased at once. You can also remove Paced at myaccount.google.com/permissions; Paced then sees that the connection no longer works and you can erase what remains with “Disconnect Google”.

Paced's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your plan in your calendar (optional)

If you create a private calendar link in Settings › Agendas, we store only a fingerprint of it (the link itself is shown to you once), the time zone of your device, your “hide titles” choice and the date it was last read. Anyone who holds the link can read the next 14 days of your plan, until you revoke it or create a new one. The link shares your plan only while Plus is active.

3. Why we process it (legal bases)

  • To provide the service (contract) — accounts, sync, planning features.
  • To run subscriptions (contract) — checking that your access is valid, renewing or ending it, and meeting our accounting obligations.
  • To keep the service secure (legitimate interest) — abuse prevention, logs, breach-resistant passwords.
  • To improve the free plan (legitimate interest) — counting, first-party only, when free accounts meet a limit and when they look at Plus.
  • To know how the site is used (legitimate interest) — cookieless, aggregate audience measurement, as described in section 2.
  • To contact the waitlist (consent) — you can withdraw at any time by replying to any email or writing to us.
  • To meet legal obligations where applicable.

4. Where your data lives

Your account and study data are hosted in the European Union (Supabase, AWS eu-west-1, Ireland). This website is delivered by Vercel's global network; where any transfer outside the EU occurs for site delivery, it is covered by recognised safeguards such as Standard Contractual Clauses. App distribution and in-app purchases are handled by Apple; web card payments are handled by Stripe. Both act as independent controllers for the payment data you give them directly, under their own privacy policies, and transfers outside the EU are covered by recognised safeguards. If you connect Google Calendar, our servers exchange data with Google (United States and elsewhere) only on your instruction, to read the calendars you chose and to write to the “Paced” calendar; Google acts as an independent controller of your Google account.

5. How long we keep it

  • Account & study data — for as long as your account exists. Deleting your account erases your synced study record.
  • Subscription records — kept while the subscription is active, then for the period our accounting and tax obligations require (up to 10 years in France for billing records).
  • Waitlist emails — until launch communications are over, or immediately upon your request.
  • Practice follow-up, notes and Mistake deck — kept while your account exists. You can delete a note, a card (and its photo) or a follow-up answer at any time; deleting your account erases all of them, photos included.
  • Quick captures, “My why”, weekly reflections and week templates — kept while your account exists. You can clear or delete each of them at any time; deleting your account erases all of them.
  • Time settings and time split — kept while your account exists. You can reset your time settings at any time (Settings › My time) and change or remove a session’s split while you finish that session; deleting your account erases all of them.
  • My path — each archived term and each path set aside is kept while your account exists, until you delete it (My path › Delete); deleting your account erases all of them.
  • Connected calendars — the address (or, for Google, the encrypted token) and the events read are deleted when you disconnect a calendar, and with your account; for Google, disconnecting also deletes the “Paced” calendar from your Google account and revokes the token. Events outside the sliding window are replaced at every refresh.
  • Technical logs — short retention periods set by our hosting providers.

6. Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to certain processing. We honour these rights for all users worldwide, not only in the EU. Write to contact@pacedstudy.fr — we answer within one month. You may also lodge a complaint with your local supervisory authority (in France, the CNIL).

7. Security

  • All traffic is encrypted in transit (TLS).
  • Your study record is isolated per account with database row-level security — only your authenticated session can read or write it.
  • At signup, passwords are checked against known breach databases using a privacy-preserving method (k-anonymity) — leaked passwords are refused.

8. Children

Paced is not directed at children under 13. If you are under the age of digital consent in your country (15 in France, up to 16 elsewhere in the EU), you may only use the service with the permission of a parent or guardian.

9. Changes

We will update this page when our practices change and flag any material change in the app. This document is reviewed by the publisher and written to reflect exactly what the product does.

10. Contact

Aim2Futur — Alexandre Doumergue (EI), SIREN 951 422 740, Lyon, France · contact@pacedstudy.fr

← Back to pacedstudy.com · Terms of Use