RallyTrak is operated by Waypoint Group Holdings, LLC ("we", "us", "RallyTrak"). This policy explains what information we collect when you use the RallyTrak mobile app or rallytrak.com, how we use it, and the choices you have.
Questions? Email Hello@RallyTrak.com.
01Information We Collect
Information you give us
- Account information — your name, email address, and the password you set when you create an account.
- Profile information — optional details such as rider category, region, or bike.
- Event registrations — the events you sign up for and any waivers you accept.
- Payment information — handled by Apple (in-app purchases) and our subscription processor RevenueCat. We never see your full payment card number.
Information we collect automatically
- Location data — precise GPS coordinates and timestamps, recorded only while you are actively running a stage in the app. Recording stops when you finish or cancel the stage. We use background location so the app can keep recording while the phone is in your pocket during a stage. We do not collect location data outside of an active stage.
- Heart rate data — if you pair an external Bluetooth heart rate monitor, the app reads heart rate values during a stage. This is stored alongside your stage results.
- Device and diagnostic data — anonymous crash reports, error logs, and basic device information (OS version, app version, device model). We use Sentry for crash reporting.
- Usage data — basic analytics about which features you use, to help us prioritize improvements.
02How We Use Your Information
- To time your stages — your location data is the primary input to our scoring engine.
- To credit your results — we associate stage data with your account and the event you registered for so organizers and other riders can see leaderboards.
- To operate your subscription — we use RevenueCat to verify your subscription status with Apple.
- To improve the app — anonymous crash and usage data tells us where the app breaks or confuses people.
- To communicate with you — transactional emails (password resets, event confirmations, billing notices). We will not send marketing emails without your explicit opt-in.
04How Long We Keep Information
- Account information — kept while your account is active. Deleted within 30 days of account deletion.
- Stage and event results — kept as long as the event organizer maintains the event, or for 7 years for our records, whichever is shorter.
- Diagnostic data — kept for 90 days, then deleted or anonymized.
05Your Choices & Rights
- Access, correct, or delete your data — email Hello@RallyTrak.com. We will respond within 30 days.
- Withdraw consent — you can revoke location, Bluetooth, or notification permissions at any time in your iOS Settings → RallyTrak.
- Cancel your subscription — manage in iOS Settings → Apple ID → Subscriptions, or follow support.apple.com/HT202039.
- Close your account — email Hello@RallyTrak.com. Account closure deletes your profile and disassociates your stage data from your identity within 30 days. Event organizers retain anonymized results for their records.
If you are in California (CCPA)
You have the right to know what personal information we collect, to delete it, and to opt out of any sale (we do not sell data). Submit requests to Hello@RallyTrak.com.
If you are in the EU/UK (GDPR)
You have the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases are: contract performance (running your account and stages), legitimate interest (improving the app), and consent (location, Bluetooth). Submit requests to Hello@RallyTrak.com. You may also lodge a complaint with your local data protection authority.
06Children
RallyTrak is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, email Hello@RallyTrak.com and we will delete it.
07Security
We use industry-standard practices to protect your data: encryption in transit (HTTPS/TLS), encryption at rest (Supabase database), and access controls on our admin systems. No system is perfectly secure; if a breach occurs, we will notify affected users as required by law.
08International Transfers
Our service providers are primarily in the United States. If you use RallyTrak from outside the United States, your information will be transferred to and processed in the United States, which may have different privacy protections than your home country.
09Changes to This Policy
When we update this policy, we will revise the "Last Updated" date. Material changes will be announced in-app or by email. Continued use after a change means you accept the updated policy.