RaceLog is a live race-tracking service. Participants record their route with GPS while they race, and organizers and spectators follow the event in real time. Because the core of the service is sharing your live location during an event, this policy explains plainly what we collect, why, who can see it, and the control you have over it.
Information we collect
Account information
You sign in with Google, Apple, or email through Firebase Authentication. We receive and store: your email address, your display name, and the unique identifier from your sign-in provider. In your profile you may optionally add a handle, avatar, club, country, preferred unit system, and timezone.
Location and activity data
When you actively track a race, the app collects precise GPS location from your device and sends it to our servers as a stream of track points. Each point includes latitude, longitude, and — where your device reports them — elevation, speed, GPS accuracy, and a timestamp. From this we derive your route, distance, elapsed time, and result. We also store which events you register for and your bib number.
Location is collected only while you are actively tracking a race in the app. The apps request "while in use" (foreground) location and continue recording in the background for the duration of a run you have started, so your track isn't lost when the screen locks. You stop it by finishing or resigning the run.
Technical data
Like any internet service, our servers process standard technical information needed to deliver and secure the Service, such as your IP address, device and app version, and diagnostic logs.
How we use your data
- To provide the core Service: record your track, compute your distance, time, and standings, and show your progress live.
- To display events, leaderboards, and replays to you, other participants, organizers, and spectators.
- To operate, secure, debug, and improve the Service.
- To communicate with you about your account or the Service.
- To comply with legal obligations.
Our legal bases (GDPR Art. 6) are: performance of a contract (providing the tracking service you asked for), your consent (device location access, which you grant in the OS and can withdraw at any time), our legitimate interests (securing and improving the Service), and legal obligation where applicable.
How your data is shared and who can see it
RaceLog is designed to make your race visible to others. The visibility of your name, live position, route, and results depends on the event's setting:
| Event visibility | Who can see your participation and track |
|---|---|
| Public | Anyone with the event link, on the spectator website or in the app. |
| Locked | Anyone can watch, but only whitelisted participants can join and appear. |
| Private | Only people with the event's private share link. |
In all cases, the organizer of an event you join can see your participation, live position, route, and results for that event.
Service providers
We share data with a small number of processors who act on our behalf under contract, only to run the Service:
- Google (Firebase Authentication) — verifies your sign-in and manages your login credentials.
- Fly.io — hosts our application and database (European region, Frankfurt).
- Google Maps (Android) and Apple Maps (iOS) — render the map inside the apps; the spectator website uses MapLibre.
We do not sell your personal data, and we do not use it for advertising.
Data retention
We keep your account and event history for as long as your account exists. Your raw GPS trail (the fine-grained track points) is automatically deleted 365 days after a track finishes; the aggregate result of that track (distance, elapsed time, and standing) is kept so historical leaderboards remain intact. If you delete your account, everything tied to it — including registrations, tracks, and all raw track points — is permanently erased.
Your rights
Under the GDPR and similar laws, you have the right to:
- Access & portability — obtain a complete copy of all data associated with your account.
- Erasure — permanently delete your account and all associated data.
- Rectification — correct inaccurate profile data.
- Restriction & objection — limit or object to certain processing.
- Withdraw consent — turn off location access in your device settings at any time (tracking will no longer work, but past data is unaffected).
- Complain — lodge a complaint with your local data protection authority.
You can export a copy of your data and permanently delete your account from within the app, or by emailing us at hello@racelog.live. We action deletion requests promptly and permanently.
International transfers
Our servers are located in the European Union (Frankfurt, Germany). Some processors listed above may process limited data outside the EU; where they do, they rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Security
Data is encrypted in transit (HTTPS/TLS). Access to production data is restricted, and authentication is handled by Firebase rather than by passwords we store ourselves. No system is perfectly secure, but we take reasonable measures to protect your information.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post the new version here and update the effective date above; for material changes we will provide a more prominent notice.
Contact
Racelog SRL
Str. Nicolae Teclu nr. 40, 400252 Cluj-Napoca, Romania
hello@racelog.live