Privacy Policy

Who controls the data

A team or club (the customer) uses MyRaceDay to manage its program. The team is the controller of its roster and operational data; MyRaceDay acts as a processor that stores and processes that data on the team's behalf. Requests about a specific person's data are handled by that person's team administrator, with our support.

Information we collect

• Account information for staff who sign in: name, email, and authentication identifiers (for example, a Google sign-in or an email and password).
• Roster information entered by team staff: rider, coach, board-member, and parent/guardian names and contacts; grade, school, division, and category; ride-group and time-trial assignments; and optional medical/emergency flags kept in a restricted area.
• Activity information generated by using the app: practice attendance, ride-group moves, timing results, schedule RSVPs, and similar records.
• Technical information such as device and log data needed to operate and secure the service.

Children's data and consent

Team rosters include minors. Roster information is entered and managed by the team's adult staff. When an account holder adds or links a rider who is a minor, they confirm they are that rider's parent or guardian and consent to MyRaceDay storing the rider's information for team operations. We record the version of the Terms and Privacy Policy each account holder accepts. We do not use roster data for advertising and we do not sell it.

A child under 13 may only be added or have an account with verifiable parent/guardian consent on file. Sensitive medical and emergency information is stored separately, excluded from default views, reports, exports, and public/shareable links, and is restricted to a team's administrators and the staff a team explicitly authorizes, plus the rider's own linked guardians. Contact details are visible only to the rider's team staff, the rider, and the rider's linked guardians, not to other families.

How we use information

• To provide and operate the features the team uses.
• To authenticate users and secure accounts and data.
• To send service communications (for example, sign-in verification, invitations, and notifications the team enables).
• To support, maintain, debug, and improve the service.

We do not sell personal information, and we do not use it for third-party advertising.

How information is shared

We share data only with service providers that help us run MyRaceDay, under agreements that limit their use of it: hosting and database (Supabase), application delivery (Cloudflare), authentication (Google sign-in, when used), and email delivery (our email provider), plus payment processing if and when paid plans are enabled. Data is scoped to the team that owns it; another team or organization cannot see a team's roster. We may disclose information if required by law or to protect rights and safety.

Security

We use encryption in transit, row-level access controls that scope data to a team's members, and least-privilege access for sensitive records. No system is perfectly secure, but we work to protect your information and to limit who can see it.

Retention and deletion

We keep data while a team's account is active and as needed to provide the service. When a person is marked inactive (for example, a rider who leaves or graduates), we keep their name and non-sensitive participation history (such as results, ride-group history, and attendance counts), and we automatically remove their sensitive information - medical and emergency details, address, phone, and date of birth - about 13 months after they become inactive.

You may request an export or full deletion of your information at any time using the form below. We honor verified deletion requests within 30 days, subject to legal retention obligations. A team administrator can also action these requests directly.

Your choices

Staff can review and update their account details when signed in. For roster records, contact your team administrator, who can correct or remove information. You may also contact us at the address below and we will route your request to the right team or handle it directly where appropriate.

Changes to this policy

We may update this policy as the product evolves. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

Contact

Questions about this policy or your data: support@myraceday.app.