Legal
Privacy Policy
This Privacy Policy explains how Race Analytix collects, uses, shares and protects personal data when you use the Race Analytix mobile app for iOS and Android, the website raceanalytix.com, and related services (together, the Services). We wrote it to be read, not just accepted — if anything is unclear, write to us at privacy@raceanalytix.com.
01Who we are
The Services are operated by Race Analytix LTD, a company registered in the Republic of Bulgaria under UIC (EIK) 205413555, with its registered address at 87 Aleksandar Malinov Blvd., 4-10, Sofia 1715, Bulgaria ("Race Analytix", "we", "us").
We are the controller of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
For any privacy question or request, contact us at privacy@raceanalytix.com.
02Scope
This policy covers the Race Analytix app, the website raceanalytix.com, and our customer support.
It does not cover third-party services that you connect to Race Analytix or reach through it — for example app stores, timing and data-logging systems, wearable platforms or social networks. Those services have their own privacy policies.
When a team, club, track or driving school invites you into its workspace in Race Analytix and manages data about its members, that organisation decides what it records about you. For that data we act as a processor on the organisation's behalf, and its own privacy notice also applies.
03The data we collect
We collect only what we need to run the Services. Much of it is optional and depends on the features you choose to use.
| Category | Examples | Source |
|---|---|---|
| Account data | Name or nickname, email address, password (stored only in hashed form), profile photo, country, language, the roles you use (driver, coach, mechanic, team manager, etc.) | You |
| Driver profile | Age group or date of birth, disciplines (karting, circuit, rally, motorcycling, sim racing), classes, licence level, team | You |
| Vehicle and setup data | Vehicle make, model and class, setup parameters, maintenance and mechanic notes | You, your team |
| Session and telemetry data | Precise GPS position, speed, acceleration, lap and sector times, distance, track, session date and time; data imported from timing and logging systems you connect (e.g. MyLaps, Racelogic VBOX, MoTeC, AiM) | Your device's sensors, connected systems |
| Video and media | Videos and photos you record or upload, including telemetry overlays | You |
| Health and fitness data (optional) | Heart rate, heart-rate variability, workouts, sleep and recovery metrics | Apple Health or Garmin, only if you connect them |
| Communications | Messages you exchange with other users, support requests and our replies | You |
| Purchase data | Subscription tier, purchase and renewal status, transaction identifiers. We never receive your card or bank details. | Apple App Store / Google Play, via RevenueCat |
| Device and usage data | Device model, operating system, app version, language, IP address, crash reports, features used and when | Your device |
| Attribution data | The store, campaign or link that led to your install; advertising identifier (IDFA/GAID) only where you allow it | Your device, attribution providers |
04How we use your data and our legal bases
Under the GDPR we must have a legal basis for each use of your data. The table below sets them out.
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and running your account; providing timing, analysis, telemetry, video, networking and track, race and school management features | Account, profile, vehicle, session, telemetry, media | Performance of our contract with you (Art. 6(1)(b) GDPR) |
| Lap timing, track detection and distance measurement using your device's location | Precise location | Performance of contract; collected only while you grant location permission in your device settings |
| Showing your physiological data alongside your driving data | Health and fitness data | Your explicit consent (Art. 9(2)(a) and 6(1)(a) GDPR) |
| Sharing sessions, videos and data with the people and organisations you choose | The data you choose to share | Performance of contract, on your instruction |
| Selling and managing subscriptions; keeping accounting records | Purchase data, account data | Performance of contract; legal obligation (Art. 6(1)(c) GDPR) |
| Service messages about your account, security or changes to the Services or this policy | Email, push token | Performance of contract; legitimate interest in keeping you informed |
| Answering support requests | Account data, communications, device data | Performance of contract; legitimate interest |
| Product analytics to understand which features work and fix problems | Device and usage data | Your consent, which you can change at any time in the app's privacy settings |
| Measuring which stores and campaigns bring new users | Attribution data | Your consent (on iOS, through Apple's App Tracking Transparency prompt) |
| Marketing emails and push notifications | Email, push token | Your consent; you can unsubscribe at any time |
| Keeping the Services secure, preventing fraud and abuse, enforcing our Terms | Account, device and usage data | Legitimate interest in protecting our users and the Services (Art. 6(1)(f) GDPR) |
| Complying with the law and responding to lawful requests | Any data as required | Legal obligation |
Where we rely on legitimate interest, you have the right to object (see section 10). We may also create aggregated or anonymised statistics that no longer identify you; these are not personal data.
05Health data from wearables
Connecting Apple Health or Garmin is optional. If you do, we treat this data as a special category of personal data and handle it with extra care:
- We read it only with your explicit consent, given when you connect the source, and only the data types you approve.
- We use it only to provide features to you and to the people you choose to share it with (for example your coach or team doctor).
- We never sell it, never use it for advertising or marketing, and never send it to our analytics or attribution providers.
- Data obtained through Apple HealthKit is used in line with Apple's rules: it is not disclosed to third parties for advertising, marketing or data-broker purposes.
- You can withdraw consent at any time by disconnecting the source in the app and revoking access in Apple Health or Garmin Connect. We delete health data we imported within 30 days of withdrawal.
Race Analytix is a performance tool, not a medical device. Its physiological insights are not medical advice.
07International transfers
Some of our service providers are located outside the European Economic Area, in particular in the USA, where our website, app data and email are hosted. When your data is transferred there, we rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework for certified companies, and the decision covering Israel) or on the Standard Contractual Clauses approved by the European Commission. You can ask us for a copy of the relevant safeguards at privacy@raceanalytix.com.
08How long we keep data
| Data | Retention period |
|---|---|
| Account and profile data | While your account is active; deleted within 30 days after you delete your account |
| Sessions, telemetry, vehicle data and media | Until you delete them or your account |
| Health and fitness data | Until you disconnect the source or withdraw consent; deleted within 30 days |
| Purchase and accounting records | As long as required by Bulgarian accounting and tax law |
| Analytics and attribution data | No longer than 24 months |
| Support communications | Up to 24 months after the request is closed |
| Backups | Overwritten on a rolling basis within 30 days |
Data shared inside an organisation's workspace may be kept according to that organisation's own retention rules.
09Security
We protect your data with encryption in transit (TLS) and at rest, access controls limited to staff who need it, hashed passwords, and regular review of our systems and providers. No system is completely secure; if a personal data breach is likely to put your rights at risk, we will notify you and the supervisory authority as the law requires.
10Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- rectify data that is inaccurate or incomplete;
- erase your data ("right to be forgotten");
- restrict how we process your data;
- data portability — receive the data you gave us in a structured, machine-readable format;
- object to processing based on legitimate interest, and at any time to direct marketing;
- withdraw consent at any time, without affecting processing that took place before;
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you.
You can exercise most rights directly in the app — edit your profile, export your data, change privacy settings or delete your account — or by writing to privacy@raceanalytix.com. We reply within one month; we may need to verify your identity first.
You also have the right to lodge a complaint with a supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg. You may also contact the authority in the EU country where you live or work.
11Deleting your account
You can delete your account at any time in the app under Settings → Account → Delete account, or by emailing privacy@raceanalytix.com from the address linked to your account. Deletion removes your profile, sessions, telemetry, media and connected health data, subject to the retention periods in section 8. Cancelling a subscription is done separately through the App Store or Google Play.
12Young drivers
Motorsport often starts young, especially in karting. In Bulgaria, the age at which a person can consent to online services on their own is 14.
- A user under 14 may use Race Analytix only with an account created or approved by a parent or legal guardian, who can view, manage and delete the child's data.
- Connecting health and fitness data for a user under 18 requires the approval of a parent or legal guardian.
- If we learn that we hold data of a child under 14 without such approval, we will delete it.
Parents and guardians can contact us at privacy@raceanalytix.com with any question.
13App permissions
The app asks for device permissions only when a feature needs them. Each is optional and can be changed at any time in your device settings; some features will not work without the related permission.
| Permission | Why we ask |
|---|---|
| Location | Lap timing, track detection and distance measurement |
| Motion and sensors | Acceleration and movement data for telemetry |
| Camera and microphone | Recording session videos |
| Photos and media | Saving and uploading videos and images |
| Bluetooth and local network | Connecting timing, logging and sensor devices |
| Health | Reading heart rate and other data from Apple Health or Garmin |
| Notifications | Session alerts, messages and account notices |
| Tracking (iOS) | Install attribution through Apple's App Tracking Transparency |
14AI features
Some features use automated analysis and AI to generate training suggestions, performance insights and team-management support from your data. These suggestions are for your information only; they do not produce decisions with legal or similarly significant effects on you, and you remain in control of what you do with them.
15Website and cookies
The website raceanalytix.com uses only cookies and similar technologies that are strictly necessary for it to work. We do not use analytics or advertising cookies on the website. If that changes, we will ask for your consent first and update this policy.
16Changes to this policy
We may update this policy as the Services evolve. The effective date and version at the top always show the current text. If we make a material change, we will notify you in the app or by email before it takes effect.
17Contact
Race Analytix LTD
UIC (EIK) 205413555
87 Aleksandar Malinov Blvd., 4-10, Sofia 1715, Bulgaria
privacy@raceanalytix.com