Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information — your email address and any profile details you provide (name, racing class, experience level).
• Telemetry data — CSV files you upload from your MyChron or compatible logger, including lap times, GPS coordinates, G-force, RPM, and speed channels.
• Session metadata — track day records, session types, kart information, and lap classifications you create within the app.
• Usage data — pages visited, features used, and actions taken within the app, collected to improve the product.
• Device and technical data — browser type, IP address, and error logs collected automatically for security and reliability purposes.

We do not collect payment card information directly; billing is handled by third-party payment processors when paid plans are introduced.

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the KartRacer service
• Parse your telemetry files and generate AI coaching reports
• Render GPS maps, lap heatmaps, and progression dashboards
• Send transactional emails (account confirmation, password reset, service updates)
• Respond to your support requests
• Detect and prevent fraud, abuse, and security incidents
• Improve the product using aggregated and anonymized usage patterns

We do not use your telemetry data to train general-purpose AI models for use outside of your own coaching. Your session data is processed on your behalf and is not shared with other users.

3. AI processing

KartRacer uses third-party large language model (LLM) providers to generate coaching reports from your telemetry data. When you trigger an analysis, relevant session data is sent to these providers solely to produce your coaching output. We use providers that commit to data confidentiality and do not use submitted data to train their models. Coaching prompts and responses are not stored by the LLM provider after the request completes.

4. Data sharing and third parties

We do not sell your personal data. We share data only with service providers required to operate KartRacer, including:

• Cloud infrastructure — for hosting, file storage, and database services (currently Supabase / AWS).
• AI processing — for generating coaching reports (see Section 3 above).
• Analytics — aggregated, anonymized usage data may be processed to help us understand product usage.

We may also disclose information if required by law, court order, or to protect the rights and safety of KartRacer or its users.

5. Data retention

We retain your account and telemetry data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required for legal or regulatory compliance.

Backups may retain data for a limited period beyond account deletion as part of standard infrastructure practices.

6. Security

We apply industry-standard technical and organizational security measures including encryption in transit (TLS), encrypted storage, access controls, and authentication protections. No system is completely secure, and we cannot guarantee that data will never be accessed by unauthorized parties. We will notify you of any breach affecting your data as required by applicable law.

7. Cookies and local storage

KartRacer uses cookies and browser local storage to maintain your authenticated session and remember preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but doing so may prevent you from logging in.

8. Children's privacy

KartRacer is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

9. Your rights and choices

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, email us at privacy@kartracer.app. We will respond within 30 days.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a notice in the application. The updated policy will include a revised "Last updated" date at the top.

11. Contact

For privacy questions or requests, contact us at privacy@kartracer.app.