Privacy Policy

1. Quick summary

• We collect your account email, your iRacing telemetry while sessions are active, lap recordings you store, real-circuit sensor data when you use the mobile app, and any data you import from third-party tools.
• External AI processing is optional and off by default. With your versioned permission, telemetry summaries and coaching text go to Anthropic, speech text to xAI or Fish Audio, and push-to-talk audio to OpenAI where enabled. Revoke this in Settings → Account; timing and saved history remain available.
• Voice choices are saved as account preferences. This release offers a curated voice catalogue.
• We never sell your data. We never use your private content for advertising.
• Delete your RealRacer account in Settings → Account, or request deletion by email without reinstalling the app or signing in. Account ownership must be verified before processing a deletion request.
• Imported reference laps for other drivers are kept private to you and never aggregated across users.

2. What we collect

Account information

• Email address, password (stored as a salted hash — never in plaintext)
• Display name (optional, used in commentary lines that address you)
• iRacing customer ID (auto-populated from your Connector once you claim a PC, used to look up your iRacing PB)
• Subscription status and provider billing identifiers, including Stripe customer ID, Apple purchase evidence and Google Play purchase tokens and account binding
• Bound Connector client IDs (the PCs you've linked to your account)

Session telemetry

• Per-tick samples while iRacing is running and the Connector is active: position, speed, throttle, brake, gear, RPM, lap distance, basic G-forces, GPS lat/lon, steering, clutch, ABS state
• Driver list, gaps, sector times and incident events for the active session
• Track name, car name, session type, lap times

Imported data

• Lap exports you upload from third-party tools (e.g. Garage 61 CSV files), tagged with the source they came from

Voice / microphone

• While you hold the push-to-talk key, the Connector captures audio from your selected microphone, sends it to our STT provider for transcription, then discards the audio. We don't store the raw recording. (See section 6.)
• Your choices from the curated voice catalogue are saved as account preferences. See section 7.

Real-circuit sensor data (mobile app)

• GPS location during an active mobile session (lat/lon/altitude/speed/heading)
• Accelerometer and gyroscope readings during the session
• Telemetry frames from a supported paired BLE device, such as RaceBox, where one is connected
• Heart-rate readings when you connect a supported BLE heart-rate strap, including on Android; current readings are sent to RealRacer for live display and deterministic session processing
• The venue you selected for the session and any session metadata you entered (car, notes)

Operational data

• Login timestamps, IP address (for fraud / abuse detection), browser user-agent
• Session counts and feature-usage counters (used for free-tier limits and capacity planning)
• Email delivery status (bounces / complaints from our email provider)

3. How we use it

We use your data to:

• Generate live AI commentary, engineer calls, spotter calls and (on Pro / Max) coaching during your iRacing sessions
• Show you lap analyses, deltas vs reference laps, and post-lap coaching reports on the dashboard
• Operate, secure and improve the service
• Charge you for your subscription and process refunds where applicable
• Send transactional email (verification, billing receipts, trial reminders, password resets)
• Send occasional product email if you opted in (you can unsubscribe one-click from any such email)
• Comply with legal obligations

We do not use your private data for advertising. We do not sell your data to third parties.

4. Third-party processors

Delivering RealRacer.ai requires sending parts of your data to specialised providers. The active provider depends on deployment configuration. External AI requires the separate permission described above; legal review of processor terms remains pending.

The list above may change as we add or replace providers. We will update this Policy when it changes materially.

5. Imported lap data (Garage 61, etc.)

RealRacer.ai lets you upload lap exports from third-party tools you already use. When you do this:

• The uploaded file is parsed and stored against your account, tagged with its source (e.g. garage61_import).
• If the lap belongs to you (matched by your display name or email), it is stored as a your-lap — used for your personal benchmarks and may contribute to anonymised aggregate stats.
• If the lap belongs to another driver, it is stored as a reference-only lap. It is visible only to you, used only as a reference you can compare against, and is never aggregated, ranked, or shown to other users.
• You can remove individual imported laps, or bulk-remove all imports from a given source, from the dashboard. Removal is immediate; back-up copies are purged within 30 days.

By uploading third-party lap data, you confirm you obtained that data through that service's own export feature on your own account, and that you have the right to provide it to us.

6. Voice / microphone capture (push-to-talk)

The Connector records from your selected microphone only while you hold the push-to-talk key. It does not listen passively. When you release the key:

• The captured audio is sent over an encrypted connection to our speech-to-text provider (OpenAI Whisper) for transcription.
• The transcript is forwarded to the engineer voice agent for a reply.
• The raw audio is discarded after transcription. We do not store voice recordings.
• Transcripts may be retained briefly with your session log for debugging and abuse-detection, then purged within 30 days.

You can disable PTT entirely from your dashboard or by removing the PTT_KEY from your Connector configuration.

7. Voice choices

The current account surface offers a curated voice catalogue. A self-service voice-cloning or clone-deletion control is not offered in this release.

Heart-rate measurements and health-derived private values stay in RealRacer's first-party display, storage and deterministic processing. They are removed from structured external prompts, and private health-related text is blocked from reasoning and speech dispatch. HealthKit permission is separate from external AI permission. Do not include health information in push-to-talk recordings: audio is sent to the disclosed transcription processor when you enable and use that feature.

8. Real-circuit capture (GPS, IMU, BLE)

When you use the RealRacer.ai mobile app for a real-circuit session:

• The app requests permission to use your device’s GPS, motion sensors and Bluetooth before any capture begins. You can deny or revoke each independently from the device’s settings or the in-app Sensors panel.
• Captured sensor data is associated only with the active session and your account. It is not used for advertising, location tracking outside the session, or any cross-user feature without your consent.
• Sessions are bounded by an explicit start and stop in the app; the app does not record sensor data outside an active session.
• GPS updates identify the venue and compute lap times and sector times where reviewed timing gates are available. Phone delivery varies with the device and operating system; Android requests about one fix per second.
• Native phone GPS capture retains completed lap and available sector times without stored telemetry samples. It does not produce telemetry analysis or coaching.
• Supported high-fidelity capture, such as RaceBox at up to 25 fixes per second, can store telemetry samples and support analysis and per-corner coaching where your plan and the captured data allow.
• You can delete a real-circuit session from the dashboard. Back-up copies are purged within 30 days.

The real-circuit mode is intended for use on closed circuits only (see Terms section 7.3). We do not encourage, facilitate or support its use on public roads.

9. Aggregation & cross-user data

RealRacer.ai computes population benchmarks (e.g. "global best at this track in this car") from telemetry across all users. These benchmarks are anonymised — we do not show your name, email or session details to anyone else, and we do not show other users' identities to you.

The following data is excluded from cross-user aggregation and stays private to you:

• Imported reference-only laps (laps from other drivers you uploaded)
• Laps from sessions where you opted out of aggregation
• Laps tagged as personal practice / scratch

You can opt out of cross-user aggregation entirely from Settings → Privacy ("Exclude my telemetry from cross-user aggregation"). Doing so excludes your telemetry from population benchmarks and from any aggregate dataset build immediately; we also remove your historical contribution within 30 days of the request.

10. Email & communications

We send transactional email (verification, billing, trial reminders, password reset) to all account holders — these are operational and cannot be unsubscribed without closing the account.

Marketing email (product updates, new features) is opt-in and can be unsubscribed with one click from any such email, or from your Account page. We honour AWS SES bounce and complaint signals automatically: if our email to you bounces or you mark a message as spam, we suppress further sends to that address.

If you register your interest before launch, we keep your email address, the page and plan you came from, your browser's user-agent string, the consent sentence you were shown and when you submitted the form. We send that list one email when RealRacer opens — nothing else — and you can unsubscribe from it without an account. If you unsubscribe from any of our marketing email, or our email to you bounces or is marked as spam, you are taken off that list too.

11. Retention and deletion

Saved sessions, laps, analyses, coaching and setups remain until removed by their owner or by account deletion and existing storage housekeeping. Uploaded telemetry and setup originals are stored in the database; video selected for browser editing stays on your device. Push-to-talk audio is not stored by RealRacer.

Deleting an account immediately disables authentication, connector credentials, overlay links and active sessions. A durable cleanup job removes owned data and revokes stored Apple grants; provider failures remain pending and retry. Shared reference rows may retain an empty, non-personal placeholder to preserve another customer's records. Private speech synthesis does not use the shared persistent cache; deletion also invalidates legacy shared hashed audio caches because those files have no reliable owner index. Public named audio assets can remain.

A non-authenticating account record, numeric account identity, provider customer identifiers and opaque purchase bindings remain after deletion. Retained billing evidence includes Apple receipts, Google Play purchase tokens, subscription and purchase records, and their account-ownership links. These records remain linked for billing verification, fraud prevention and to prevent old tokens or delayed provider updates from attaching to another account; they are not anonymized. The required legal retention period and backup deletion policy need legal review and are not represented here as a verified automatic deadline. Contact support@realracer.ai for a retention or access request.

Final deletion confirmation cancels Stripe subscriptions immediately without proration or refund, expires pending checkouts and cancels scheduled changes. Deletion does not stop Apple or Google Play billing: manage renewal separately through Apple subscription settings or Google Play subscription settings. Immediate account deletion is still available.

Delete your RealRacer account

In the app: open Settings → Account → Delete account. Confirm your account with your password or linked sign-in provider, review the deletion details, then confirm deletion.

Without access to the app: email support@realracer.ai with the subject RealRacer account deletion request and the email address associated with your RealRacer account. You can submit this request without reinstalling the app or signing in. We need to verify account ownership before processing the request. Do not send passwords, payment details or identity documents.

Account deletion disables access and removes owned sessions, laps, analyses, coaching, setups and stored health data through the deletion process. Limited linked billing and security evidence remains as described in Retention and deletion; this includes provider purchase evidence and account-ownership links.

You can request account deletion while an Apple or Google Play subscription is still active. Deletion does not cancel those store renewals. Manage Apple renewal in Apple subscription settings and Google Play renewal in Google Play subscription settings separately from deleting your RealRacer account.

12. Your rights

You can:

• Access: see what we hold about you from the Account page (email, display name, subscription, lap counts) and request a full export.
• Correct: update your email and display name from the dashboard.
• Delete: use Settings → Account to disable access and request durable cleanup, subject to the limited retained evidence described above.
• Export: request a copy of your telemetry and imported laps in machine-readable form.
• Opt out: exclude yourself from cross-user aggregation, marketing email, or product analytics, independently of each other.
• Complain: if you are in Australia, the EU, the UK, California or any other jurisdiction with a data-protection regulator, you can lodge a complaint with that regulator. Email us first — we'd rather fix the issue directly.

13. Security

We use industry-standard practices: HTTPS for all browser and Connector traffic, salted-hashed passwords, signed session tokens, a least-privileged AWS account structure, and encrypted at-rest storage for the database. No system is perfectly secure; if you suspect your account has been compromised, email security@realracer.ai immediately.

14. Children's privacy

RealRacer.ai is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have, we will delete it.

15. International transfers

RealRacer.ai’s primary infrastructure runs in AWS regions in Australia and the United States. If you access RealRacer.ai from elsewhere, your data will be transferred to and processed in those countries. Our third-party processors may also process data in their own regions (Anthropic, xAI, Fish Audio, OpenAI, Apple, Google and Stripe in the regions specified by their current service terms).

16. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email and/or a banner in the dashboard at least 14 days before they take effect. The "Last updated" date at the top is the easiest way to spot changes.

17. Contact

The data controller for the purposes of EU/UK GDPR is Agensis Pty Ltd (ABN 36 700 367 237), trading as RealRacer.ai. For privacy questions, access requests, deletion requests, or to exercise any right described in section 12: privacy@realracer.ai.
Voice-clone takedowns: takedown@realracer.ai.
General support: support@realracer.ai.
Security incidents: security@realracer.ai.

See also our Terms of Service.