Privacy Policy

1. Data we collect

• Account data — email address, optional display name and profile image (from Google/Apple if you sign in with them), role (user/admin), and minor/guardian flags.
• Profile facts — answers you give in onboarding or that our AI extracts from your messages (chassis, engine class, series, experience, goals, home track, etc.).
• Setups + sessions — the structured and free-text content you choose to log in the app.
• Chat — threads, messages, model used, and aggregate token counts.
• Media — photos you upload to attach to setups or sessions, stored in Cloudflare R2.
• Usage + telemetry — error reports and product-event counters. We avoid sending your name or email to error-tracking tools; we only associate them with an opaque user id.
• Location (optional) — a home track or ZIP you set voluntarily. We do not require GPS and do not passively collect precise location.

2. How we use your data

• To run the Service and provide the features you request.
• To power the AI assistant. Your profile facts and recent messages are sent to our AI provider (currently xAI Grok, with optional fallbacks) so the model can respond to you. Each reply includes a Data Sent panel so you can see what was shared.
• To fetch weather for tracks or ZIPs you have set, via Open-Meteo — no account data is sent with these queries.
• To send transactional emails (magic-link sign-ins, account changes) through Resend. Marketing emails only go to users who have opted in.
• To monitor reliability and improve the Service using Sentry and PostHog. We redact email, passwords, tokens, and API keys from telemetry properties server-side.

3. Processors and sub-processors

We rely on a small number of providers to operate the Service:

• Railway — application hosting and managed Postgres.
• Cloudflare — CDN + R2 object storage for media.
• xAI — AI model, Files, and Collections APIs (managed retrieval).
• Stripe — payments for Plus and Unlimited. Stripe collects and stores your card details; we never see or store them. We keep only your Stripe customer and subscription ids, the plan, and its renewal date.
• Resend — transactional email delivery.
• Google / Apple — federated sign-in (only when you choose those options).
• Sentry — error monitoring. Only the opaque user id is attached to reports by default.
• PostHog — product analytics. Captured server-side; PII properties are redacted before send.
• Google Analytics— site traffic and referral measurement (GA4). Loaded site-wide via gtag; see Google's privacy policy for how Google processes measurement data.
• Open-Meteo — weather data for optional snapshots.

4. AI training

We do not use your content to train AI models by default. You can opt in via the AI Training toggle on your Profile page; you can revoke the consent at any time and we will stop including your content in any new training sets from that point on.

5. Ads (Free tier only)

On the Free tier we may show sponsored cards between sessions, setup lists, or message threads, clearly labelled Sponsored. Ads are never injected into AI replies. Ad targeting is based on keywords in your active thread and the tier you are on — we do not sell your data to advertisers.

6. Retention

• Profile facts are retained for the life of your account and are editable from the Profile page. They are not individually deletable; full account deletion removes them.
• Chat messages are retained for 12 months on Free and indefinitely on paid tiers (configurable at the account level).
• Media uploads remain available for reanalysis for 3 days, then move to weekly archives (still viewable).
• Data logger files are kept permanently. When you analyse a data-logger export (the CSV and, if you add it, the original .xrk file), we keep those files and a short summary of the session (racer name, session and vehicle labels, date, lap counts, best lap) even after your account is deleted. They are not linked to your account once it is deleted, are never shown to other users, and are never sent to AI models in raw form. To ask for a specific file to be removed, contact us.
• Billing records (invoices and payments) are kept by Stripe for as long as tax and accounting law requires, even after account deletion.
• Database backups are retained for at least 30 days; backup copies of your account are removed on the same 30-day schedule as the live record after a deletion request completes.

7. Your rights

You can:

• Access and correct your data by editing profile facts, setups, and sessions in the app.
• Export a JSON copy of your data from Profile → Danger zone → Download data export.
• Delete your account from Profile → Danger zone → Delete my account. This opens a 30-day grace period during which your account is inaccessible; after the grace period personal data is hard-deleted and de-identified aggregates may be retained.
• Withdraw optional consents (marketing, AI training) at any time on the Profile page.
• Where applicable under GDPR, CCPA, or similar laws, you may also request restriction, portability, or filing a complaint with your local data-protection authority. Contact us first so we can respond directly.

8. Children and guardians

KartBrain accounts are only available to users 13 or older. Drivers under 13 may use KartBrain through a parent or legal guardian who maintains the account and accepts these terms on their behalf (COPPA). Our onboarding flow enforces this and records the guardian relationship.

9. Security

We use TLS in transit, signed URLs for media access, and scoped database credentials. No online service is perfectly secure. Report suspected issues to the email below; we disclose material breaches to affected users without undue delay.

10. International transfers

Our processors may store or process data in the United States or other countries. Where required, we will put in place appropriate safeguards (such as Standard Contractual Clauses) before transfers out of your region.

11. Changes to this policy

We may update this policy. The version at the top of this page will change and signed-in users will be re-prompted to review the updated policy before continuing.

12. Contact

For privacy questions, exports, or deletion requests that the in-app flow can't handle, write to [email protected].