Privacy Policy

LAST UPDATED SEPTEMBER 3, 2026

Racer is a local-first app: your trips are stored on your phone. A small cloud layer exists so that challenges, leaderboards, photo-built cars and profile pictures work. This policy explains exactly what that layer receives, why, who else touches it, and how to erase all of it.

Short version: no email, no name, no phone number, no ads, no trackers, no analytics SDKs, no selling of data, and no background location. You can delete everything from inside the app in one tap.

WHO WE ARE

Racer (“we”) operates the Racer iOS app and this website. Questions about this policy go through the support page.

WHAT WE COLLECT

DATA	WHEN	WHY
Anonymous account id	Created automatically on first launch.	Ties your trips, car and records together. It is a random identifier, not you.
Apple sign-in identifier	Only if you tap “Continue with Apple”.	Lets your account follow you to a new phone. We request no name and no email from Apple; we receive only Apple's opaque user identifier.
Call sign and car	Whenever you change them.	Shown to rivals on leaderboards and challenge pages.
Profile picture	Only if you add one.	Shown next to your call sign. Stored in a publicly readable bucket, so treat it as public.
Trips	After each completed, non-voided race while you are online.	Start time, elapsed time, distance, destination name and coordinates, the Map's estimate, and the GPS trail of the run. The trail is what lets a rival race your ghost. Voided runs never leave the phone.
Photos you choose	Only when you use “Build 3D car from photo”.	The photo is sent to our server and forwarded to Meshy, a 3D-generation service, to produce a model. We keep the resulting model, not the photo. The on-device “Match paint from photo” never leaves your phone.
Reports	When you report a racer.	Your account id, theirs, and the reason, so we can review.

We do not collect contacts, device identifiers for advertising, health data, or precise location outside of a race you started. Location is only read while the app is open and a race is running or the map is on screen.

WHAT IS SHARED, AND WITH WHOM

Challenge links show your call sign, car, picture, destination name, time and distance to anyone with the link. The GPS trail is only downloadable inside the app by a signed-in user who enters your six-character code. Links expire after 30 days.
Route leaderboards show your call sign, car, picture and best time to other racers who drive to the same destination. Your account id is never exposed; boards use a one-way hash.
Nothing is sold and nothing is shared with advertisers or data brokers.

SERVICE PROVIDERS

Supabase hosts the database, authentication and file storage (United States).
Vercel hosts this website and challenge pages.
Meshy converts a car photo into a 3D model when you ask for one. Meshy's own retention applies to the photo you send; the finished model is copied to our storage and the Meshy link expires.
Apple provides maps, routing and Sign in with Apple. Route requests go from your phone directly to Apple under Apple's privacy policy.

SECURITY

Every table is protected by row-level security so an account can only read and write its own rows. Cross-user features (challenge pages, leaderboards) run through server-side functions that expose only the fields listed above. Generated car models live in a private bucket and are served with short-lived signed links. All traffic is encrypted in transit.

RETENTION

We keep your data until you delete your account. Challenges expire 30 days after creation. If you never sign in with Apple and delete the app, the anonymous account becomes unreachable; you can still remove it by reinstalling and deleting from the Garage, or by contacting support with your call sign.

YOUR CHOICES AND RIGHTS

Delete everything: Garage → Account → Delete account & data. This removes your account, trips, records, challenges, profile picture and generated cars from our servers and from the phone. It is immediate and cannot be undone.
Stay anonymous: Sign in with Apple is optional. Everything works without it.
Stay offline: Racer records and races locally without a connection; nothing uploads until you are online.
Access or correct: call sign, car and picture are editable in-app. For a copy of your data, contact support.
Depending on where you live you may have additional rights (for example under GDPR or CCPA) to access, correct, delete or port your data, or to object to processing. Use the support page to exercise them; we do not discriminate for doing so.

CHILDREN

Racer is for licensed drivers and their passengers. It is not directed to children under 16 and we do not knowingly collect data from them. If you believe a child has created an account, contact support and we will delete it.

CHANGES

If this policy changes in a way that matters, the app will ask you to review it again before your next race. The date at the top always reflects the current version.