# Steady Pace and PIPEDA

> Canada's PIPEDA governs how organizations collect, use, and disclose personal information. Steady Pace collects none and discloses none, so its core requirements never come into play.

Canada's federal privacy law, PIPEDA, sets rules for how a business handles the personal information it collects. Steady Pace, built in Canada, collects none, which turns most of those rules into questions with short answers.

**The short answer:** PIPEDA, Canada's Personal Information Protection and Electronic Documents Act, governs how private-sector organizations collect, use, and disclose personal information in the course of business. Its duties, consent, limiting collection, safeguarding data, are all about information a company gathers and holds. Steady Pace gathers and holds none: no account, no analytics, no server, no network connections. Your runs stay on your phone. So the obligations PIPEDA places on collected personal information do not arise, because there is no collected personal information.

## PIPEDA's principles

| PIPEDA principle | How it applies to Steady Pace |
| --- | --- |
| Limiting collection | Collection is zero, the strongest form of the principle |
| Consent for collection and use | Nothing is collected or used off your phone to consent to |
| Limiting use and disclosure | Nothing is disclosed, because nothing leaves the device |
| Safeguards | There is no server-side data to safeguard |
| Individual access to your data | Your data is already in your hands, on your phone |

## PIPEDA's core duties

PIPEDA requires organizations to collect only what they need, get consent, keep data safe, and let people see it. Every duty presupposes that the organization has your information. Steady Pace never takes it off your phone. There is no dataset to minimize, no disclosure to limit, and no store to protect. Your data is on your device, under your control, and was never anywhere else.

## Built in Canada

Steady Pace is made in Canada. Its privacy behavior is how the app is built. Because it makes no network connections, the same guarantee holds wherever you run. There is one behavior: your runs stay with you.

Steady Pace collects no personal information, so your data never left your phone.

- [GDPR](https://steadypace.ca/compliance/gdpr): The same architecture under European law.
- [CCPA and CPRA](https://steadypace.ca/compliance/ccpa-cpra): And under US state law.
- [A private running app](https://steadypace.ca/private-running-app): How the app collects nothing to begin with.

**Does Steady Pace comply with PIPEDA?**

It is built so PIPEDA's core duties never arise. It collects, uses, and discloses no personal information off your phone, so there is no dataset to get consent for, safeguard, or limit. Your runs stay on your device.

**Do I consent to data collection when I use it?**

There is nothing to consent to, because nothing is collected off your phone. The app has no account and makes no network connections, so no personal information is gathered, used, or shared.

**Can I access or delete the data held about me?**

Your data is already in your hands. It lives on your phone. You access it directly and remove it when you remove it from the device.

**Does being a Canadian app change how it handles data?**

No. Because the app makes no network connections, its privacy behavior is the same everywhere. There is one behavior: your runs stay on your phone, wherever you are.


---
Source: https://steadypace.ca/compliance/pipeda-canada
App Store: https://apps.apple.com/app/steady-pace/id6773682525