Privacy
Policy

Summary

LapSmith is a motorsport telemetry app. It records and analyzes track-session data such as GPS location, speed, lap timing, connected-device telemetry, video references and optional heart rate. We use this data to provide the app features you choose, synchronize your account data, help you share with friends when you enable sharing, maintain leaderboards when you opt in, and diagnose app issues.

Data we collect

Permissions

LapSmith asks for runtime permissions only when needed for app features. Location is used during track sessions, including while a session is active and the phone is locked if you grant background location permission. Bluetooth is used to find and connect supported GPS, OBD, camera and heart-rate devices. Camera access is used for phone-camera recording and friend-code scanning. Microphone access is used only when phone-camera audio recording is enabled. Local network and Wi-Fi access are used to communicate with GoPro cameras. Notifications may be used for active session and export status.

How we use data

• Provide live timing, lap analysis, coaching, track maps, session history and video overlays.
• Connect to devices you choose, such as GPS receivers, OBD adapters, action cameras (GoPro and DJI) and heart-rate monitors.
• Sync settings, overlay layouts, session metadata and telemetry to your signed-in account.
• Support friends, profile lookup, data-share grants and leaderboards when you use those community features.
• Send service, security, support or launch communications when you request them.
• Measure app reliability and performance, investigate crashes and prevent abuse.
• Comply with legal obligations and enforce our rights.

How data is shared

We share data only as needed to operate LapSmith, provide features you enable, or meet legal requirements.

• Service providers: Firebase/Google services provide authentication, cloud storage, database, crash reporting, analytics, performance monitoring and abuse-prevention services. Google Sign-In and Apple Sign-In process sign-in information when you use those providers. Map providers may receive technical requests needed to load maps.
• Friends and community: Your public profile is visible to signed-in users. If you turn on a data-share grant, the selected friend can read the shared sessions and telemetry covered by that grant. If you opt in to public leaderboards, your leaderboard row may be visible publicly.
• Devices you connect: LapSmith communicates with nearby devices you choose, including Bluetooth devices and action cameras over the local Wi-Fi network or USB, to provide the connected feature.
• Support workflows: Bug report metadata and bundles may be routed through our issue, email or webhook tools so we can investigate and respond.
• Legal or safety reasons: We may disclose data if required by law, to protect users or the service, or as part of a merger, acquisition or similar transaction with appropriate notice where required.

We do not sell your personal or sensitive user data, and we do not share session telemetry with advertisers.

Retention

Local sessions, videos, exports, settings and diagnostic logs stay on your device until you delete them in the app, clear app data or uninstall the app. Signed-in cloud data is kept while your account is active or until you delete the relevant data or request account deletion. Bug reports are kept for as long as needed to investigate and resolve the issue, maintain service reliability and satisfy legal or security needs.

When data is deleted, backup copies or service logs may persist for a limited period before they are overwritten or removed through our providers' normal retention processes.

Account deletion and data requests

You can delete individual sessions, settings, profiles and shared data from the app where those controls are available. To request deletion of your LapSmith account and associated cloud data, email admin@lapsmith.app from the email address linked to your account and include "LapSmith account deletion request" in the subject.

After verifying the request, we will delete or de-identify account data that is not required for legal, security, fraud-prevention or dispute-resolution purposes. This section can also be used for access, correction or other privacy requests.

Security

We use technical and organizational measures designed to protect user data, including encrypted network transport, Firebase security rules, account-scoped storage paths and App Check where available. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

LapSmith is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to LapSmith, contact us and we will take appropriate action.

International processing

LapSmith and its service providers may process data in countries other than where you live. Where required, we rely on appropriate safeguards for cross-border processing.

Changes to this policy

We may update this policy as LapSmith changes. The updated version will be posted on this page with a new "Last updated" date.