RACE ANALYTIX

Legal

Privacy Policy

Effective 29 July 2026Version 2.1.7

This Privacy Policy explains how Race Analytix collects, uses, shares and protects personal data when you use the Race Analytix mobile app for iOS and Android, the website raceanalytix.com, and related services (together, the Services). We wrote it to be read, not just accepted — if anything is unclear, write to us at privacy@raceanalytix.com.

01Who we are

The Services are operated by Race Analytix LTD, a company registered in the Republic of Bulgaria under UIC (EIK) 205413555, with its registered address at 87 Aleksandar Malinov Blvd., 4-10, Sofia 1715, Bulgaria ("Race Analytix", "we", "us").

We are the controller of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.

For any privacy question or request, contact us at privacy@raceanalytix.com.

02Scope

This policy covers the Race Analytix app, the website raceanalytix.com, and our customer support.

It does not cover third-party services that you connect to Race Analytix or reach through it — for example app stores, timing and data-logging systems, wearable platforms or social networks. Those services have their own privacy policies.

When a team, club, track or driving school invites you into its workspace in Race Analytix and manages data about its members, that organisation decides what it records about you. For that data we act as a processor on the organisation's behalf, and its own privacy notice also applies.

03The data we collect

We collect only what we need to run the Services. Much of it is optional and depends on the features you choose to use.

CategoryExamplesSource
Account dataName or nickname, email address, password (stored only in hashed form), profile photo, country, language, the roles you use (driver, coach, mechanic, team manager, etc.)You
Driver profileAge group or date of birth, disciplines (karting, circuit, rally, motorcycling, sim racing), classes, licence level, teamYou
Vehicle and setup dataVehicle make, model and class, setup parameters, maintenance and mechanic notesYou, your team
Session and telemetry dataPrecise GPS position, speed, acceleration, lap and sector times, distance, track, session date and time; data imported from timing and logging systems you connect (e.g. MyLaps, Racelogic VBOX, MoTeC, AiM)Your device's sensors, connected systems
Video and mediaVideos and photos you record or upload, including telemetry overlaysYou
Health and fitness data (optional)Heart rate, heart-rate variability, workouts, sleep and recovery metricsApple Health or Garmin, only if you connect them
CommunicationsMessages you exchange with other users, support requests and our repliesYou
Purchase dataSubscription tier, purchase and renewal status, transaction identifiers. We never receive your card or bank details.Apple App Store / Google Play, via RevenueCat
Device and usage dataDevice model, operating system, app version, language, IP address, crash reports, features used and whenYour device
Attribution dataThe store, campaign or link that led to your install; advertising identifier (IDFA/GAID) only where you allow itYour device, attribution providers

04How we use your data and our legal bases

Under the GDPR we must have a legal basis for each use of your data. The table below sets them out.

PurposeData usedLegal basis
Creating and running your account; providing timing, analysis, telemetry, video, networking and track, race and school management featuresAccount, profile, vehicle, session, telemetry, mediaPerformance of our contract with you (Art. 6(1)(b) GDPR)
Lap timing, track detection and distance measurement using your device's locationPrecise locationPerformance of contract; collected only while you grant location permission in your device settings
Showing your physiological data alongside your driving dataHealth and fitness dataYour explicit consent (Art. 9(2)(a) and 6(1)(a) GDPR)
Sharing sessions, videos and data with the people and organisations you chooseThe data you choose to sharePerformance of contract, on your instruction
Selling and managing subscriptions; keeping accounting recordsPurchase data, account dataPerformance of contract; legal obligation (Art. 6(1)(c) GDPR)
Service messages about your account, security or changes to the Services or this policyEmail, push tokenPerformance of contract; legitimate interest in keeping you informed
Answering support requestsAccount data, communications, device dataPerformance of contract; legitimate interest
Product analytics to understand which features work and fix problemsDevice and usage dataYour consent, which you can change at any time in the app's privacy settings
Measuring which stores and campaigns bring new usersAttribution dataYour consent (on iOS, through Apple's App Tracking Transparency prompt)
Marketing emails and push notificationsEmail, push tokenYour consent; you can unsubscribe at any time
Keeping the Services secure, preventing fraud and abuse, enforcing our TermsAccount, device and usage dataLegitimate interest in protecting our users and the Services (Art. 6(1)(f) GDPR)
Complying with the law and responding to lawful requestsAny data as requiredLegal obligation

Where we rely on legitimate interest, you have the right to object (see section 10). We may also create aggregated or anonymised statistics that no longer identify you; these are not personal data.

05Health data from wearables

Connecting Apple Health or Garmin is optional. If you do, we treat this data as a special category of personal data and handle it with extra care:

  • We read it only with your explicit consent, given when you connect the source, and only the data types you approve.
  • We use it only to provide features to you and to the people you choose to share it with (for example your coach or team doctor).
  • We never sell it, never use it for advertising or marketing, and never send it to our analytics or attribution providers.
  • Data obtained through Apple HealthKit is used in line with Apple's rules: it is not disclosed to third parties for advertising, marketing or data-broker purposes.
  • You can withdraw consent at any time by disconnecting the source in the app and revoking access in Apple Health or Garmin Connect. We delete health data we imported within 30 days of withdrawal.

Race Analytix is a performance tool, not a medical device. Its physiological insights are not medical advice.

06Who we share data with

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share it only in the situations below.

People and organisations you choose. Your sessions, videos and data are private by default. You decide what to share and with whom — for example a coach, mechanic, co-driver, family member, doctor, nutritionist or team manager, or publicly on social networks when you tap share. You can change or revoke sharing at any time.

Organisations you join. If you join a team, club, track or driving school, the data you share within its workspace is visible to its authorised members.

Service providers who process data on our behalf, under contracts that bind them to our instructions and to confidentiality:

ProviderPurposeLocation
RevenueCat, Inc.Subscription and purchase managementUSA
Mixpanel, Inc.Product analytics (with your consent)USA / EU
Adjust GmbHInstall attribution (with your consent)Germany (EU)
AppsFlyer Ltd.Install attribution (with your consent)Israel
A2 Hosting, Inc.Hosting and storage of website and app dataUSA
A2 Hosting, Inc.Email services, including service and marketing emailsUSA

App stores and connected platforms. Apple and Google process your purchases as independent controllers under their own policies. When you connect Apple Health, Garmin, or a timing or logging system, data flows between that platform and Race Analytix according to your settings and that platform's terms.

Legal reasons. We disclose data where required by law, court order or a lawful request by public authorities, or where necessary to protect the rights, safety or property of our users, the public or Race Analytix.

Business changes. If Race Analytix is involved in a reorganisation, merger, acquisition or transfer of assets — including a transfer within our group of companies — personal data may be transferred as part of that transaction. This policy will continue to apply, and we will inform you of any change of controller.

07International transfers

Some of our service providers are located outside the European Economic Area, in particular in the USA, where our website, app data and email are hosted. When your data is transferred there, we rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework for certified companies, and the decision covering Israel) or on the Standard Contractual Clauses approved by the European Commission. You can ask us for a copy of the relevant safeguards at privacy@raceanalytix.com.

08How long we keep data

DataRetention period
Account and profile dataWhile your account is active; deleted within 30 days after you delete your account
Sessions, telemetry, vehicle data and mediaUntil you delete them or your account
Health and fitness dataUntil you disconnect the source or withdraw consent; deleted within 30 days
Purchase and accounting recordsAs long as required by Bulgarian accounting and tax law
Analytics and attribution dataNo longer than 24 months
Support communicationsUp to 24 months after the request is closed
BackupsOverwritten on a rolling basis within 30 days

Data shared inside an organisation's workspace may be kept according to that organisation's own retention rules.

09Security

We protect your data with encryption in transit (TLS) and at rest, access controls limited to staff who need it, hashed passwords, and regular review of our systems and providers. No system is completely secure; if a personal data breach is likely to put your rights at risk, we will notify you and the supervisory authority as the law requires.

10Your rights

Under the GDPR you have the right to:

  • access your personal data and receive a copy;
  • rectify data that is inaccurate or incomplete;
  • erase your data ("right to be forgotten");
  • restrict how we process your data;
  • data portability — receive the data you gave us in a structured, machine-readable format;
  • object to processing based on legitimate interest, and at any time to direct marketing;
  • withdraw consent at any time, without affecting processing that took place before;
  • not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you.

You can exercise most rights directly in the app — edit your profile, export your data, change privacy settings or delete your account — or by writing to privacy@raceanalytix.com. We reply within one month; we may need to verify your identity first.

You also have the right to lodge a complaint with a supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg. You may also contact the authority in the EU country where you live or work.

11Deleting your account

You can delete your account at any time in the app under Settings → Account → Delete account, or by emailing privacy@raceanalytix.com from the address linked to your account. Deletion removes your profile, sessions, telemetry, media and connected health data, subject to the retention periods in section 8. Cancelling a subscription is done separately through the App Store or Google Play.

12Young drivers

Motorsport often starts young, especially in karting. In Bulgaria, the age at which a person can consent to online services on their own is 14.

  • A user under 14 may use Race Analytix only with an account created or approved by a parent or legal guardian, who can view, manage and delete the child's data.
  • Connecting health and fitness data for a user under 18 requires the approval of a parent or legal guardian.
  • If we learn that we hold data of a child under 14 without such approval, we will delete it.

Parents and guardians can contact us at privacy@raceanalytix.com with any question.

13App permissions

The app asks for device permissions only when a feature needs them. Each is optional and can be changed at any time in your device settings; some features will not work without the related permission.

PermissionWhy we ask
LocationLap timing, track detection and distance measurement
Motion and sensorsAcceleration and movement data for telemetry
Camera and microphoneRecording session videos
Photos and mediaSaving and uploading videos and images
Bluetooth and local networkConnecting timing, logging and sensor devices
HealthReading heart rate and other data from Apple Health or Garmin
NotificationsSession alerts, messages and account notices
Tracking (iOS)Install attribution through Apple's App Tracking Transparency

14AI features

Some features use automated analysis and AI to generate training suggestions, performance insights and team-management support from your data. These suggestions are for your information only; they do not produce decisions with legal or similarly significant effects on you, and you remain in control of what you do with them.

15Website and cookies

The website raceanalytix.com uses only cookies and similar technologies that are strictly necessary for it to work. We do not use analytics or advertising cookies on the website. If that changes, we will ask for your consent first and update this policy.

16Changes to this policy

We may update this policy as the Services evolve. The effective date and version at the top always show the current text. If we make a material change, we will notify you in the app or by email before it takes effect.

17Contact

Race Analytix LTD
UIC (EIK) 205413555
87 Aleksandar Malinov Blvd., 4-10, Sofia 1715, Bulgaria
privacy@raceanalytix.com