How OmniPace uses personal data, training and recovery information.
Updated: 9 October 2026
Controller
OmniPace is operated by BA Solutions, Łódzka 18A, 81-198 Rewa, Poland, Polish tax number PL5632427238. Contact: contact@omnipace.pro. Website: https://omnipace.pro.
For questions or requests relating to data protection, email contact@omnipace.pro.
Data categories
We may process account identifiers, email address, authentication/session information, profile details (including height, weight, goals and training availability), workout plans, completed activity data, connected-service permissions and imported measurements.
Where enabled, we may process health-related information such as heart rate, resting heart rate, HRV, sleep, recovery and information about injury or physical limitations, as well as Coach messages, generated responses, technical/security logs, support requests and subscription status.
Purposes and legal bases
Account maintenance, ordinary workout planning and service features: performance of the contract (GDPR Article 6(1)(b)); security, error prevention and legal claims: legitimate interests (Article 6(1)(f)), subject to your rights; legally required bookkeeping: Article 6(1)(c).
Processing health data for personalised training, Coach and authorised health integrations is subject to separately obtained, explicit consent under Articles 6(1)(a) and 9(2)(a). You can withdraw this consent in Settings → Privacy & data; relevant processing and features are stopped as required by law. Service communications and support rely on the appropriate contractual or legitimate-interest grounds.
AI processing and profiling
OmniPace uses an artificial intelligence model through server functions. Inputs can include your question, goals, relevant training history, performance and recovery context. These data are processed to provide the features you request.
OmniPace may keep conversation history, plans and technical logs needed for its service. Providers processing data for the service may apply retention periods under their agreements and legal obligations. Training recommendations do not determine legal rights or produce similarly significant decisions within the meaning of GDPR Article 22.
Service providers and integrations
Authorised recipients may include providers of infrastructure, authentication, data storage, server functions and artificial intelligence models. Connected sports platforms receive or supply information authorised by users. Purchases, where enabled, may involve app distribution and payment services. Support email may use an external email hosting and delivery provider.
Information may be shared with authorised subprocessors or authorities when a valid legal basis exists. We do not sell health or personal data for advertising. Google Health Connect or other health-source data are not used for advertising or unrelated data brokerage.
Cross-border processing
Database infrastructure currently uses an EU (Frankfurt) region; support access and subcontracted services may nevertheless involve other locations. Providers of artificial intelligence models and some other services may process data outside the European Economic Area.
Where personal data is transferred outside the EEA, the Controller must rely on an adequate legal transfer mechanism, such as an adequacy decision or European Commission standard contractual clauses and relevant safeguards. Contact us for details applicable to your data.
Data retention
Account and training records are generally maintained while you use OmniPace and require training history. Chat histories and linked data are held while necessary for the service and user account functions. Support logs are retained only for support, security and relevant legal purposes.
On account deletion or consent withdrawal, information without a continuing lawful purpose is deleted or anonymised, with exceptions for legal obligations or claims. Protected backups expire in their operational rotation, and external providers may apply their own retention rules. We can provide details about applicable periods or criteria on request.
Health consent and withdrawal
Consent to health-related processing is a separate positive action, not a consequence of accepting the Terms. It is optional, although functionality that needs these data cannot operate without it. Your consent and withdrawal are recorded with the notice version and timestamp.
You can withdraw consent in Settings → Privacy & data. Withdrawal does not undo lawful earlier processing. You can request deletion of retained health information where no other lawful basis applies. Connected third-party permissions may additionally need to be withdrawn at the provider.
Data subject rights
You may request access, rectification, erasure, restriction, portability and withdrawal of consent; you may object to processing based on legitimate interests. These rights apply subject to GDPR conditions and exceptions.
Contact contact@omnipace.pro to exercise your rights. You may complain to the Polish President of the Personal Data Protection Office (UODO) or another competent EU supervisory authority. We may verify your identity proportionately.
Security and technical data
We use access controls, secured communication and technical and organisational safeguards proportionate to processing risks. No digital service guarantees absolute security.
The app may store necessary account and session data on your device and use technical diagnostics for stability and abuse prevention. Do not share passwords or unnecessary health details in support conversations.
Children and changes
OmniPace is designed for adults aged 18 or older. If you believe that a child has provided personal data, contact us.
We update this policy when processing materially changes. Where a new purpose requires consent, it will be requested before processing for that purpose.
Website and contact form
BA Solutions, Łódzka 18A, 81-198 Rewa, Poland, tax number PL5632427238, controls information submitted at omnipace.pro. Privacy enquiries: contact@omnipace.pro.
The form collects your name, email, selected subject and message to answer your enquiry and handle the request. Providing these details is voluntary; an email and message are needed to reply. Do not send passwords or unnecessary health information.
Pre-contract enquiries are processed under GDPR Article 6(1)(b). Other correspondence and protection against abuse rely on our legitimate interests in answering enquiries and securing the service, Article 6(1)(f). Messages are forwarded through the mail service configured on the website server. The website uses infrastructure provided by an external hosting provider.
The theme does not store form messages in the website database. Correspondence may remain in the mailbox while the matter is handled, and subsequently as necessary to document it, meet legal duties or establish claims. Server security logs may contain IP addresses and technical information. To limit repeated submissions, the theme temporarily keeps a hashed IP address for 60 seconds.
The theme itself does not use cookies or browser storage for analytics or advertising. Language is set in the page URL. The website may use essential administrator login cookies. Any additional analytics, advertising or external embeds require this notice to be updated and applicable consent to be obtained before activation.
The rights in the “Your rights” section also apply to website information. You may object to processing based on legitimate interests.