LongPace Privacy Policy

Effective date: 2026-05-21 · Last updated: 2026-05-21

How to reach us

LongPace is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). Privacy questions go to captainlongevity@gmail.com.

What never reaches us

Because LongPace has no servers, the app cannot collect or transmit any of the following to us — not stored, not shared, not sold, not analyzed:

• Conditions you track (Long COVID, ME-CFS, POTS), diagnosis dates, diagnosis sources, first-symptom onset, initial trigger events, comorbidities, and SSDI / LTD application status.
• DSQ-SF daily entries, symptom frequency and severity scores, Total DSQ Score, and IOM 2015 SEID criteria status.
• NASA Lean Test measurements: baseline supine HR, standing HR, maximum HR delta, POTS criteria status, supine blood pressure, and symptoms experienced during the test.
• Cognitive test scores (PASAT, DSST), subjective cognitive self-rating, and brain fog severity.
• Functional capacity logs, energy envelope percentages, hours upright, hours bedbound, triggers, and recovery times.
• Medical encounter records: provider name, specialty, encounter type, documented diagnoses, provider statements, MDI status, documented functional limitations, and treatment plans.
• Attached provider documents (denial letters, IME reports, CPET test reports, lab reports).
• HealthKit data (heart rate, resting heart rate, HRV, step count, sleep analysis, active energy, VO2 max, basal body temperature).
• Insurance plan or LTD carrier names.
• Your name, email, phone, date of birth, address, or any account identifier.
• Advertising / tracking device identifiers (IDFA, IDFV).
• Location data.
• Crash reports and analytics events directed to any third party.

Where your records actually live

Every record you enter is written to local storage on your iOS device through Apple's SwiftData framework. If you have iCloud Backup or Finder/iTunes device backup enabled, Apple's standard device backup includes LongPace's SwiftData store. Restoring a new iPhone from that backup restores your archive automatically.

No integrations with insurers, agencies, or research databases

LongPace does not communicate with insurance carriers, the Social Security Administration, the Centers for Medicare & Medicaid Services, healthcare providers, academic institutions, or research databases. There is no advertising SDK in the app, no analytics SDK, and no marketing-data partnership. Unlike some Long COVID / ME-CFS apps that offer an "optional research data sharing" toggle, LongPace does not — the option does not exist because the server-side infrastructure does not exist. If a future release ever introduces any such capability, it will be strictly opt-in and disclosed in the app before any record leaves your device.

What runs entirely on your device

Multiple features process data locally on your device only:

• HealthKit integration — read-only via Apple's HealthKit framework. HR, step count, sleep, HRV, and related health samples are read locally and processed on-device for the Home Dashboard, NASA Lean Test auto HR capture, and PEM baseline detection. HealthKit data is never transmitted off-device.
• NASA Lean Test scoring — maximum HR delta and POTS criteria check are rule-based on-device calculations. No AI, no machine learning, no cloud inference.
• DSQ-SF scoring — Total DSQ Score and IOM 2015 SEID criteria check are rule-based on-device calculations.
• Cognitive testing — simplified PASAT and DSST run entirely on-device. Stimuli, response capture, and scoring all happen locally.
• Document scanning — Apple's VisionKit on-device. Scanned images of denial letters, IME reports, or provider notes never leave your phone.
• PDF report generation — Apple's PDFKit on-device. No archive content is transmitted during generation. The SSA Function Report Companion, LTD Appeal Packet, CPET Preparation Pack, and Comprehensive Functional Evidence Pack are built from your local records and rendered on-device.
• App Lock — Apple's LocalAuthentication framework. Face ID / Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success-or-failure signal.
• Reminders — scheduled via Apple's UserNotifications framework and fired locally on your device. No remote push servers are involved.

Device backup is the recovery path

LongPace stores every record on your iPhone only. The app does not use iCloud sync, CloudKit, or any cloud storage of its own. If your phone is lost and you have no backup, the archive is gone — we have no copy to send you.

Two ways to protect against device loss:

• Keep iCloud Backup on (iOS Settings > [your name] > iCloud > iCloud Backup). When enabled, Apple's nightly encrypted device backup includes LongPace's SwiftData store, and a new-iPhone restore brings your archive with it.
• Back up to Finder or iTunes on a Mac or PC. LongPace's records travel with the device backup.

You can also export the entire archive as a JSON file via Settings > Privacy & Backup > Export full archive at any time, then save it to Files, email it to yourself, or copy it to a USB drive. The JSON export is universal Free — not a Pro feature.

Subscriptions and Apple StoreKit

LongPace offers an optional Pro subscription (Annual or Lifetime one-time) via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple. LongPace receives only the entitlement status (active or inactive) and a purchase identifier. Your Apple ID, payment method, billing address, and transaction history are not visible to us. Apple's handling of subscription information is governed by Apple's own Privacy Policy.

Permissions the app may request

• HealthKit (read-only) — requested when you start the NASA Lean Test Auto mode for the first time, or when you authorize from Settings > Health Integration. Used to read HR, step count, sleep, HRV, and related health samples for the Home Dashboard and NASA Lean Test. Never written, never uploaded.
• Camera — requested only when you tap "Scan document" on an encounter or document entry (Pro).
• Face ID — requested only after you enable App Lock in Settings.
• Notifications — requested only after you enable DSQ / NASA / cognitive reminders.

Revoke any of these at any time in iOS Settings > LongPace, or for HealthKit in the Health app > Profile > Privacy > Apps > LongPace.

No AI, no automated medical inference

LongPace does not predict treatment outcomes, estimate disability approval likelihood, generate appeal letters, perform artificial-intelligence analysis on your archive, or run any machine-learning model on your records or HealthKit data. The DSQ-SF Total Score, IOM 2015 SEID criteria check, NASA Lean Test maximum HR delta, and POTS criteria check are rule-based calculations from publicly available academic literature, computed on your device. The simplified PASAT and DSST cognitive tests are deterministic stimulus / response implementations that score correctness and reaction time, not adaptive AI assessments.

DePaul University and Bateman Horne Center attribution

The DePaul Symptom Questionnaire-Short Form (DSQ-SF) implemented in this app is based on publicly available academic research from DePaul University's Center for Community Research, provided for personal informational use only. The NASA Lean Test protocol is based on publicly available academic protocol from the Bateman Horne Center, provided for personal informational use only. Neither implementation is endorsed by DePaul University or the Bateman Horne Center, and LongPace has no affiliation, agreement, or partnership with either institution.

Children

LongPace is not directed to children under 13. We do not knowingly collect any information from anyone, including children, because we collect nothing. POTS does occur in adolescents, and the app's protocol thresholds (≥40 bpm for ages 12-19) acknowledge this; the app is intended to be used by or with adult oversight.

How long records are kept, and how to remove them

You control retention completely. A record you delete in the app is removed immediately after a mandatory confirmation alert; there is no Recently Deleted recovery system. To wipe every trace of your archive from this device, delete the app. We have no server-side copy because we have no servers. If you have an iCloud device backup, that backup may contain prior versions of the LongPace store — you can manage iCloud device backups via iOS Settings > [your name] > iCloud > Manage Account Storage.

International users

The app is published in English and is primarily marketed in North America. Because we operate no servers, we do not transfer your data internationally.

Updates to this policy

If the app's data handling ever changes, the policy on this page will be updated, and the change will surface in the app before the affected feature becomes usable. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Privacy questions: captainlongevity@gmail.com