← Back to GP Data

Privacy Policy

Last updated: October 9, 2026

This policy covers GP Data (data.gpmech.com and the installed app), provided by GP Mechatronics ("we", "us"). Questions: support@gpmech.com.

1. What stays on your device

Everything you analyse is stored in your browser's own storage on the device you use, and processed there:

• the data files you open, and logs made from them (including GPS read from GoPro videos);
• videos, and any copy of a video the app keeps so it opens without being picked again;
• sessions, events, notes and photos, vehicles, riders and setups, simulations, and the tracks you create or edit;
• your settings.

We know race data is private, which is why the app works this way: it never touches our servers. You control it. Clear Site Data (User → Site Storage) removes it from the browser, and backups go only where you choose to save them: a file on your device, or your own Google Drive. Because we never have a copy, we can't recover it for you. Keep backups.

The shared track list (start/finish lines, splits and corners for known circuits) is downloaded from our site along with the app. Nothing about your use of it is sent back.

2. What we collect, and why

Only if you create an account (for Pro):

• Your email address, to sign you in (we email you a one-time code) and to contact you about your account or subscription.
• Your name, if you give one: it's shown as the author of your notes, on the devices you sign in on.
• Your plan: whether you have Pro, until when, and how it was granted.
• A Stripe customer reference, linking your account to your subscription.

We use these only to provide the service: signing in, unlocking Pro, and billing. We don't use them for marketing without your permission.

3. Services that handle requests for us

Some services the app relies on necessarily see requests from your device, which include your IP address:

• Hosting: Cloudflare serves the app, and keeps short-lived request logs for security and reliability.
• Accounts and Pro: Supabase stores the account details above and serves the Pro features to signed-in subscribers. Account data is stored in the United States.
• Sign-in emails: our email provider delivers the one-time codes.
• Payments: Stripe processes payments and keeps billing records, under Stripe's Privacy Policy.
• Maps: map images are loaded from OpenStreetMap, CARTO and Esri. Like any map on the web, this tells them the area being shown (such as the circuit you're looking at) and your IP address, but nothing of your data.
• Google Drive (optional): only if you connect it. The app then signs in with Google and can see only the files it creates in your Drive, or files you pick.

4. Future changes

Today, nothing you analyse leaves your device, on any plan.

• Pro: your race data will always stay private to your device. We won't collect, share or sell it.
• The free plan: in the future it may include features that send some data to us, for example anonymised or aggregated data used to improve or support the free service. If that happens, we'll update this policy and tell you before it takes effect; it will apply only to data from then on, never to data you already have; and you'll have the choices the law where you live gives you, such as opting out. Upgrading to Pro will always keep your data fully private.
• Any feature that would send your data somewhere on your behalf, such as sharing or cloud sync, will be one you choose to switch on.

5. How long we keep it

Account details are kept while your account exists. Delete My Account (User → Account) cancels any subscription and deletes your account and its details straight away. Stripe keeps records of past payments for as long as tax and financial law require. Service providers' request logs are kept for short periods under their own policies.

6. Your choices and rights

Wherever you live, you can ask to see, correct, export or delete the personal data we hold about you, and you can delete your account at any time from the app. Data on your device is yours to manage directly. To exercise a right, or if you have a concern, email support@gpmech.com. You may also complain to your local data protection authority.

7. Security

Connections are encrypted (HTTPS). Account data is protected by access rules so each account can read only its own plan, and payment details stay with Stripe. Your race data's security is that of your own device and browser.

8. Children

GP Data isn't meant for children under 16. Don't create an account if you are under 16.

9. Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes we'll also let you know in the app, or by email if you have an account, before they take effect.

Terms of Service