# Privacy standards, met by design

> Steady Pace collects no data and makes no network connections, which satisfies the hard parts of GDPR, CCPA, and Apple's privacy rules by design. What that means, stated plainly.

Most privacy rules exist to govern data a company collects and moves. Steady Pace collects none and moves none, so much of what those rules require is satisfied not by a policy but by the way the app is built. Here is the detail, framework by framework.

If your work makes you care about standards, this section is for you. Steady Pace was built on one architectural decision: it collects no personal data and makes zero network connections. Everything runs on your phone. Modern privacy law attaches obligations to data that is collected, stored, and transferred. There is none of that here.

## The architecture

Steady Pace has no account, sends no analytics, serves no ads, and never connects to a server. Your pace, routes, distance, and history are computed and kept on the device. The GPS offset is discarded on the phone during processing, so even the local data is not a clean map back to you. Nothing is uploaded, so nothing can be sold, shared, breached, subpoenaed from a server, or exposed by a changed setting.

## Framework by framework

- [GDPR](https://steadypace.ca/compliance/gdpr): Data minimization and privacy by design are met by construction, because no personal data is processed or transferred.
- [CCPA and CPRA](https://steadypace.ca/compliance/ccpa-cpra): The strongest version of "we do not sell or share your data": there is no data collected to sell or share.
- [App Store privacy label](https://steadypace.ca/compliance/apple-app-privacy-label): An app that collects nothing qualifies for Apple's clearest label: Data Not Collected.
- [App Tracking Transparency](https://steadypace.ca/compliance/app-tracking-transparency): No tracking prompt, because there is no tracking and no ad identifier read.
- [PIPEDA](https://steadypace.ca/compliance/pipeda-canada): Canada's privacy law: nothing collected, used, or disclosed off your phone.
- [Data minimization and privacy by design](https://steadypace.ca/compliance/data-minimization-privacy-by-design): The privacy principles the app is built on, and how they line up with recognized frameworks.

## Check it yourself

Put the app in airplane mode and it works exactly the same, because it never used the connection. An app that runs identically with every radio off collects and sends nothing. You can verify this in ten seconds on your own phone.

Data that is never collected cannot be breached or sold. Steady Pace is built that way.

- [A private running app](https://steadypace.ca/private-running-app): The full picture of how the app stays private.
- [Zero network connections](https://steadypace.ca/blog/running-app-that-makes-no-network-connections): The technical claim the whole section rests on.
- [Why it matters](https://steadypace.ca/location-privacy): What uploaded location data has already exposed.


---
Source: https://steadypace.ca/compliance
App Store: https://apps.apple.com/app/steady-pace/id6773682525