Privacy policy

We do not sell, rent or trade your personal information to advertisers, data brokers or anyone else. We do not share it for cross-context behavioural advertising, we do not show you targeted ads, and we do not track your activity across apps or websites owned by other companies.

The companies listed under Service providers run parts of the Service for us. They process information on our behalf to deliver that service, and not for their own advertising.

Your racing history, lap times, profile and activity exist to support your experience in the MXN Karting community, not to become a product we sell to someone else.

Account information. Your email address and a user ID when you create an account, either with email and password or with Sign in with Apple. If you use Sign in with Apple and choose to hide your email, we receive Apple’s private relay address instead. When you sign up we ask for your date of birth to confirm you are at least 13; we do not store it.

Profile information. The details you choose to add: display name, handle, profile photo, bio, home track, city and region, country, driver number, kart transponder ID, experience level and links to your social profiles. These appear on your profile, subject to your privacy setting.

Private details. The app does not ask for your legal name, birthday or gender. A small number of accounts created before November 2026 have some of these on file; they are visible only to that account’s owner, never shown on a profile or to other users, and deleted with the account. Email us to have them removed sooner.

Precise location. With your permission, and only while you are using the app, we use your device’s location to show karting tracks near you and to detect when you are at a track so you can start a session. Outside a session you record, your location is used on the spot and not stored. The app does not request background (“Always”) location access. You can turn location off at any time in iOS Settings; the app keeps working, but nearby tracks and at-track features will not.

Session GPS traces. When you record a session, we store the GPS readings taken during it (position, speed, heading, altitude and accuracy) so we can build your laps, lines and telemetry. These traces are linked to your account and visible only to you. Your lap times and results from the session may be shared as described below; the trace itself is not. We keep the raw readings for as long as the session exists — there is no automatic expiry — and delete them when you delete the session or your account. Recording uses location only while the app is open; the app never records in the background.

Racing data. Sessions, heats, lap times, positions, speeds and the tracks and layouts you raced, whether recorded by the app, entered by hand, imported from a track’s timing system at your request, scanned from a results sheet you photograph, or recorded by a Bluetooth lap timer (such as a RaceBox) that you connect.

Photos and videos. With your permission, the photos and videos you choose to upload — a profile picture, images or video in posts, a photo of a track, or a photo of a results sheet. We only access the items you pick, or the photo you take with the camera.

Content you post. Posts, comments, likes, reviews, club and event activity, challenge entries, feedback you send us, and reports you file about other content.

Social connections. Who you follow, who follows you, follow requests, and accounts you block.

Product interaction. Which screens you open and a small set of in-app actions (for example, starting or saving a session), along with basic device and app-version information. This is linked to your user ID so we can understand how the Service is used and improve it. We do not send your email or name with it, we do not record your screen, and we do not capture what you type or tap automatically.

Push notification token. If you allow notifications, a device token so we can send you the notifications you have turned on.

• To run the Service: your account, profile, sessions, feed, clubs, events, challenges and leaderboards.
• To show nearby tracks, detect when you are at a track, and record your laps.
• To send notifications you have turned on (for example, new followers, comments or session invites).
• To understand which features are used and fix problems, through product analytics.
• To keep the community safe: reviewing reports, enforcing our Terms of Use, and preventing abuse.
• To respond when you contact us.

Public account (the default): other signed-in MXN Karting users can see your profile, posts and racing activity.

Private account: only followers you approve see your posts and racing activity. Where your results appear on shared surfaces — track leaderboards and track reviews — you are shown as “Private Racer” rather than by name.

Shared sessions: if you turn on sharing for a session, anyone with its link can view a summary of it, even if your account is private, until you turn sharing off. The summary never includes your GPS trace.

Your private details and session GPS traces are never visible to other users, whatever your settings.

We use the following companies to run the Service. They process data on our behalf, only for the purposes described here, and not for their own advertising.

• Supabase — authentication, database and file storage. Your account, profile, racing data, GPS traces, photos, videos and posts are stored here.
• PostHog — product analytics (screen views and in-app actions, identified by your user ID only), hosted in the United States.
• Mapbox — maps and satellite imagery. Your device requests map tiles from Mapbox, which receives your IP address and the map area being viewed.
• Google Maps Platform (Places) — photos of some tracks. These requests are made for a track, not for you, and include no personal information.
• Open-Meteo — weather conditions and forecasts for a track’s location. No personal information is sent.
• Apple — Sign in with Apple, and delivery of push notifications through the Apple Push Notification service.
• Expo — app updates and routing push notifications to Apple, which uses your device’s push token.
• Track timing systems — when you choose to import results or view live timing from a track, the app contacts that track’s timing provider (for example, Club Speed) to fetch the results you asked for.

Beyond these providers, we disclose information only if required by law, to protect the safety of our users or the public, or if MXN Karting is merged or sold — in which case your information would remain covered by this policy, and we would tell you before any change to how it is handled.

• Delete your account in the app: Profile → Settings → Delete Account, or email us. See Retention for exactly what is removed.
• Delete a session you recorded to remove its laps and GPS trace without deleting your account.
• Make your profile private in Settings, so only approved followers see your activity.
• Block any user, and report posts, comments or profiles that break our rules.
• Turn off location, photo, camera, Bluetooth or notification access at any time in iOS Settings.
• Access, correct or export your information: edit most of it directly in the app, or email us and we will help.

Depending on where you live (for example, California, the EU or the UK), you may have additional rights to access, correct, delete or port your data, or to object to certain processing. Email us to exercise them; we will not treat you differently for doing so.

We keep your information for as long as your account is active. When you delete your account, we permanently delete your account, profile, private details, sessions, laps, GPS traces, results, points and badges, posts, comments, photos and videos, follows and blocks.

A few things work differently:

• Track photos you contributed that were approved for a track’s page stay on that page, no longer linked to you. Email us if you want one removed.
• Feedback you sent us is kept so we can act on it, no longer linked to your account.
• Backups of our database roll off on a fixed schedule. Deleted information is gone from them within 30 days.
• Analytics events stay in PostHog under your user ID. Once your account is deleted that ID matches nothing we hold, but the events are pseudonymous, not anonymous, so we still treat them as personal data. Email us and we will delete them.
• We may keep limited records where the law requires it or to resolve a dispute.

Data is encrypted in transit, and our database and file storage are encrypted at rest. Database access rules limit each user to what they are allowed to see. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects it.

MXN Karting is not directed at children under 13, and you must be at least 13 to create an account; sign-up asks for your date of birth and refuses anyone younger. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

We are based in the United States, and our service providers may process your information in the United States and other countries. By using the Service you understand that your information will be transferred to and processed there.

If we change this policy, we will update the date at the top of this page, and for material changes we will let you know in the app or by email before they take effect.

Questions or requests about your privacy: support@mxnkarting.com. See also our Support page.