Privacy Policy

Last updated July 29, 2026

The short version: there are no accounts, so we never ask for your name or email. We do not use analytics SDKs, advertising identifiers, or third-party trackers. We do not sell anything about you. Your setup sheets and telemetry are sent to an AI provider because that is how the analysis is produced, and to nobody else.

Who we are

Karting Days is operated by Garage56. This policy explains what the app and the web companion collect, why, and what you can do about it.

There is no account

When you first open the app it generates a random identifier for your install and stores a recovery secret in your device keychain. That identifier is what your data is attached to. We do not ask for, and do not hold, your name, email address, phone number, or date of birth.

One consequence worth stating plainly: because we have no way to identify you, we cannot recover your data if you lose the device and its keychain, and we cannot answer a request to hand over "your" data without something proving it is yours.

What we collect

Content you create

• Photographs of setup sheets you scan, and the values read from them.
• Setup values, session notes, and feedback you type in yourself.
• Telemetry files you import from your data logger. These contain GPS traces of your laps, lap and sector times, and channel data such as speed, RPM, and temperatures.
• Questions you ask the setup assistant, and the analyses produced in response.

Location

The app asks for location access while in use so an event can be tagged with the track's location, which is what lets us look up the weather for that session. You can refuse, and the rest of the app continues to work without it. The GPS traces inside your telemetry files are separate from this permission: they come from your data logger, and they describe where your kart went, which for a circuit is a matter of public geography.

Technical data

• An anonymous device identifier and an authentication token for your install.
• A push notification token, so we can tell you when an analysis finishes.
• Counts of analyses and AI requests, which is how monthly allowances and abuse limits are enforced.
• Ordinary server logs, including IP addresses, retained for a short period for security and debugging.

Purchases

When you subscribe, Apple gives us a signed receipt containing the product purchased, the transaction identifiers, and the expiry date. We store those to know whether your subscription is active. We never receive your payment card details. Apple handles payment entirely.

What we do not collect

• No name, email, or phone number.
• No advertising identifier, and no ad networks.
• No analytics or crash-reporting SDKs.
• No third-party trackers, cookies for tracking, or cross-site profiling.
• No contacts, calendar, microphone, or health data.
• No payment details.

Who your data is shared with

We do not sell your data and we do not share it for anyone else's marketing. We use the following service providers to run the Service, and each receives only what it needs:

• Anthropic processes the AI requests. This is the one provider that receives your actual content: setup sheet images for reading handwriting, telemetry data for analysis, and the questions you ask. Their handling is governed by Anthropic's commercial terms and privacy policy.
• Cloudflare provides the network edge and the object storage that holds your uploaded files and generated reports.
• Render hosts the backend service and its database.
• Apple processes purchases and delivers push notifications.
• Open-Meteo supplies historical weather. It receives a set of coordinates and a date, and nothing that identifies you.

We may also disclose data if the law requires it. Given how little we hold and that it is not tied to an identity, there is not much that could be produced.

Sharing you initiate

If you create a share link for an event, the people you approve can see that event's data read-only. Those links expire, each viewer is approved by you individually, and you can revoke a share at any time. Nothing is shared unless you create the link.

Where data is stored

Data is stored on infrastructure in the United States. If you use the Service from elsewhere, your data is transferred there.

How long we keep it

Content stays until you delete it. When you delete an item, its contents are purged promptly and a small marker is kept so the deletion propagates to your other devices; those markers are removed after about 90 days.

Deleting everything is available in the app. It schedules an irreversible purge of all your content, which takes effect after a short grace period of about three days. Open the app again during that window and the deletion is cancelled. After the purge, your data is gone from the database and from file storage, and we cannot restore it. A subscription is separate: cancel that through your Apple Account.

Security

Traffic is encrypted in transit. Authentication tokens are stored as hashes rather than in readable form, the recovery secret lives in your device keychain, and app requests are attested with Apple's App Attest to make forged clients harder. No system is perfectly secure, and we do not claim otherwise.

Your choices and rights

You can refuse location access, refuse notifications, delete any individual item, or delete everything, all from within the app. Those controls are the practical route to the rights the law may give you.

Depending on where you live, you may have rights to access, correct, delete, or port your data, or to object to its processing. Because there is no account, the app's own delete function is usually the fastest and most reliable way to exercise them. If you want to make a request another way, write to us at the address below, but understand that we may be unable to link a request to any particular data.

Children

The Service is not directed at children under 13, and we do not knowingly collect their data. Karting has young drivers, so to be clear: if a parent or guardian manages the app and the data on a young driver's behalf, that is between them and the driver, and the account holder is the adult.

Changes to this policy

If we change what we collect or who we share it with, we will update this page and the date at the top, and we will give notice in the app for anything material.