RaceClub — Legal

Privacy Policy and Terms of Service for the RaceClub iOS app

View the Project on GitHub canot7/raceclub-legal

Privacy Policy

Last updated: 11 May 2026

This Privacy Policy describes how the RaceClub mobile application (“RaceClub”, “the app”, “we”) collects, uses and protects your personal data.

1. Data controller

The data controller is Arthur Queval, individual developer, reachable at a.queval@gmail.com.

2. Data we collect

We collect only the data strictly necessary to operate the app.

2.1 Account data

When you sign in with Apple, we receive:

2.2 Location data

RaceClub records your precise GPS position during races (latitude, longitude, speed, heading, timestamp). Location is recorded:

2.3 Activity data

We do not collect: contacts, photos, microphone data, advertising identifiers. We do not track you across other apps or websites.

3. Why we use your data

Processing is based on the Swiss Federal Act on Data Protection (FADP / nFADP). For users in the European Union, the GDPR also applies. Legal grounds:

5. Sharing your data

We share data with the following processors, strictly for app operation:

Recipient Purpose Location
Supabase (hosting + database) Account, races, real-time positions EU (AWS Ireland)
Apple (Sign in with Apple) Authentication Worldwide (Apple Inc.)

Club Races: positions you record during a Club Race are visible in real time to other participants of the same race. Solo race data remains private to you.

We do not sell your data. We do not share it for advertising purposes.

6. Retention

Your data is retained as long as your account is active. You can request deletion at any time by emailing a.queval@gmail.com; your data will be deleted within 30 days.

7. Your rights

You have the right to:

To exercise these rights: a.queval@gmail.com.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch. EU users may lodge a complaint with their local data protection authority.

8. Security

Data in transit is encrypted (TLS). Data at rest is encrypted on Supabase. Access is protected by Row Level Security policies that prevent users from accessing data they do not own.

9. Children

RaceClub is not directed at children under 13. We do not knowingly collect data from children under 13.

10. Changes to this policy

We may update this Privacy Policy. The “Last updated” date will reflect the latest version. Material changes will be notified in the app.

11. Contact

Arthur Queval — a.queval@gmail.com