Privacy Policy

1 Data Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

2 Data We Collect

RaceRide collects and processes the following personal data:

Account Data (when registering in the app):

• Email address (required)
• Password (stored encrypted, never in plain text)
• Optional username and profile picture

Activity Data (when using the app):

• Recorded rides including GPS track, distance, duration, speed
• Custom routes you create (optionally shared publicly)
• Personal bests and segment times
• Achievements and XP points

Usage Data (anonymized):

• Anonymous app events for product improvement (e.g. "route created", "ride started")
• Error reports (no personal data included)

Website (Landing Page):

• Email address voluntarily entered in the waitlist form
• Server logs from Netlify hosting (IP address, browser type, timestamp)

3 GPS & Location Data

RaceRide accesses your location only during an actively started ride recording. There is no background tracking without your knowledge.

• GPS data is processed only while recording is active
• You can disable GPS access at any time in your device system settings
• Recorded GPS tracks are stored in your account and are private by default
• Routes are only made public when you explicitly choose to share them

Legal basis: Consent (Art. 6(1)(a) GDPR) — granted by giving the location permission in the app.

4 Purpose of Processing

• Account data: Authentication and account management
• GPS data: Recording and analysis of rides, ghost racing, personal bests
• Activity data: Calculation of statistics, leaderboards, achievements
• Usage data: App improvement and bug fixing
• Email (waitlist): Notification about new app versions and the Play Store launch

We do not share data with third parties for advertising. We do not sell any personal data.

5 Legal Basis

• Art. 6(1)(b) GDPR — Contractual necessity: Processing account and activity data to provide the app's features
• Art. 6(1)(a) GDPR — Consent: GPS access, waitlist email, optional profile data
• Art. 6(1)(f) GDPR — Legitimate interests: Error analysis and app improvement via anonymized usage data

6 Third-Party Providers

All core app data (rides, routes, accounts) is stored exclusively on Supabase servers in Frankfurt, Germany (EU).

7 Data Retention

• Account data: Until you delete your account in the app
• After account deletion: All personal data is permanently deleted within 30 days
• Anonymized usage data: May be retained longer as it contains no personal reference
• Waitlist email: Until unsubscription or upon request
• Server logs (Netlify): According to Netlify's policy (typically 30 days)

8 Your Rights

Under the GDPR, you have the following rights:

To exercise any of these rights, contact us at: racerideapp@gmail.com

You also have the right to lodge a complaint with the supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz.hamburg.de).

9 Minimum Age

RaceRide is intended for users aged 16 and over. Users under 16 may only use the app with the consent of a parent or guardian. We do not knowingly collect data from children under 16. If we become aware of such data, the corresponding account will be deleted immediately.

10 Cookies & Tracking

The RaceRide landing page uses no cookies and no tracking (no Google Analytics, no Facebook Pixel, no retargeting).

The RaceRide app does not use any advertising trackers. Anonymized usage events are sent directly to our own Supabase database, not to third-party advertising networks.

11 Changes to This Policy

We reserve the right to update this Privacy Policy when technical or legal circumstances change. The current version is always available on this page. For significant changes, we will notify registered users by email.

Last updated: June 2026

12 Contact