Privacy Policy

SB Racing (“we”, “us”, or “the Club”) operates the SB Racing mobile app and website (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

• Account information — When you create a membership account we collect your name, email address, and password (stored securely by our authentication provider).
• Location data — When you start a ride in the app we collect precise location (GPS) to record your track, distance, elevation, and moving time. Location is only collected while a ride is actively recording and after you explicitly tap “Start Ride”. You can stop tracking at any time.
• Ride data — Tracks, distance, elevation gain/loss, timestamps, and any notes or ratings you add to a ride.
• Camera (QR codes) — When you choose Scan QR code on a poker-run event, the app uses the device camera only to read checkpoint QR codes so we can open the correct stop and draw your card. We do not record video, store camera frames, or upload photos from this feature. Camera access is used only while the scanner is open and stops when you close it or after a successful scan.
• Device & push tokens — We store a device push-notification token so we can send ride reminders, event updates, and club announcements. You can disable notifications in your device settings.
• Usage data — Basic technical information such as device type, operating system version, and app version to help us improve the Service.
• Merch / orders — If you place an order through the merch section we collect the information needed to fulfil that order (name, shipping address, email).

2. How We Use Your Information

• To provide and improve the ride-tracking, membership, events, and community features of the Service.
• To show your rides on the map, calculate statistics, and let you export GPX/GeoJSON.
• To send push notifications about events, group rides, and club news (only if you have granted permission).
• To communicate with you about your account or membership.
• To process and fulfil merch orders.
• To maintain the security and integrity of the Service.

3. Legal Basis & Sharing

We process personal data based on your consent (location, camera for QR scanning, notifications) and our legitimate interest in operating a club membership and ride-tracking service.

We do not sell your personal information.

We use the following service providers who process data on our behalf:

• Supabase — authentication, database, and file storage (hosting in secure cloud infrastructure).
• Apple / Google — push notification delivery when you use the iOS or Android app.
• Any payment processor used for merch (if applicable) will receive only the data required to complete the transaction.

4. Location Data Specifically

Precise location is used only for ride recording. Tracking begins only after you tap “Start Ride” and ends when you tap “Stop”. While a ride is in progress the app may continue recording in the background so that your full track is saved even if the screen is locked. A clear Stop control is always available.

You can revoke location permission at any time in your device Settings. The rest of the app continues to work without location access.

4A. Camera & QR Codes

Camera access is used only when you open the in-app QR scanner (for example, Scan QR code on a poker-run event). The camera reads the code so the app can open the correct checkpoint. We do not save, upload, or share camera images or video from this feature.

You can deny or revoke camera permission in your device Settings. You can still use the rest of the app; you would need another way to open a checkpoint link (for example, scanning with the system camera app if the QR encodes a normal web link).

5. Data Retention

• Account and profile data are kept while your account is active.
• Ride data is kept until you delete the ride or delete your account.
• Push tokens are removed when you uninstall the app or revoke notification permission.
• After account deletion we remove or anonymize personal data within a reasonable period (normally within 30 days), except where we are required to retain it by law.

6. Your Rights & Account Deletion

You may request access to, correction of, or deletion of the personal data we hold about you.

Account deletion: Logged-in members can initiate permanent account deletion from the Members area of the app. This deletes your authentication record and associated profile and ride data. You may also email us to request deletion.

Residents of Canada (including Alberta) have rights under applicable privacy legislation. Contact us using the details below to exercise those rights.

7. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Security

We use industry-standard measures (encrypted connections, secure authentication providers, access controls) to protect your data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version in the app and update the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

SB Racing
Medicine Hat, Alberta, Canada
Email: [email protected]