PRIVACY
POLICY.

This Privacy Policy explains how OnRace collects, uses, and protects your personal information when you use our mobile performance application and website, in accordance with the General Data Protection Regulation (GDPR).

By using OnRace, you agree to the practices described in this policy.

1. Data Controller

The data controller for your personal information is OnRace. For any question regarding your personal data, contact us at support@on-race.app.

2. Data Collected

2.1 Information provided directly

• First and last name
• Email address
• Profile picture
• Profile information (city, bio, vehicles)

2.2 Activity Data

• Lap times and recorded sessions
• Selected tracks
• Speed, altitude, and distance (via GPS)
• Sector data and technical metrics

2.3 Background Location (ACCESS_BACKGROUND_LOCATION)

OnRace requests the ACCESS_BACKGROUND_LOCATION permission so that a recording session can continue while your screen is locked or the app is in the background — this prevents your lap times from being interrupted if your phone sleeps during a session.

• Background location is used ONLY during a recording session that you have manually started — never passively, automatically, or outside of an active session.
• If a session completes successfully, your GPS data (track, lap times, sectors, speed) is stored on your account.
• If a recording fails, partial data is kept temporarily for debugging purposes, for a maximum of 30 days, then permanently deleted.
• Background location data is never sold or shared with third parties for advertising or commercial purposes.

3. Purposes of Processing

Your data is used to:

• Provide timing and performance analysis features, including your trajectory, lap times, and speed.
• Improve the app and fix bugs.
• Send you account-related notifications (if you have consented).
• Comply with our legal obligations.

4. Legal Basis

Processing of your data is based on the performance of a contract (provision of the service), your consent (notifications, location), and our legitimate interests (service improvement, security).

5. Sharing of Data

We never sell your personal data. Your data may be shared only with our technical service providers (hosting, analytics) strictly for the purpose of operating the service, and only under adequate contractual safeguards.

6. Data Retention

We retain your account and activity data for as long as your account remains active. If you delete your account, your data is permanently erased within 30 days, except where we are required by law to retain it for a longer period.

• Account and activity data: retained while your account is active.
• Account deletion: permanent erasure within 30 days, unless a legal obligation requires longer retention.
• Technical logs and crash reports: retained for a maximum of 12 months.

You may request deletion of your data at any time by contacting support@on-race.app. We respond to all deletion requests within 30 days.

7. Your Rights (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten"), including permanent account deletion within 30 days.
• Right to data portability, including full export of your activity data.
• Right to object to processing.
• Right to withdraw your consent at any time.

To exercise these rights, contact us at support@on-race.app.

8. Security

Your data is secured via Firebase (Google Cloud), meeting the strictest industry standards:

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction: encryption of data in transit (TLS), restricted access to data, and system monitoring.

9. Cookies

Our website uses only technical cookies strictly necessary for the site to function. No third-party advertising or tracking cookies are used.

10. Changes to This Policy

We may update this policy at any time. In the event of a material change, you will be notified via the app or by email. The date of the last update is shown at the top of this page.

Contact & Support