App Privacy Policy
Race Box App Privacy Policy
Last updated: 20 October 2026
This Privacy Policy explains how the Race Box companion app (Android and iOS) and the Race Box device service handle personal data. Race Box shows live and historical motorsport data, such as Formula 1 timing, positions, lap times, pit stops, weather and race control messages, on your Race Box device and in the app.
Who we are
The data controller is Reklamos Principas, MB, Odminių g. 1A-15, LT-01122 Vilnius, Lithuania. Company code 304813538, VAT LT100011573010. Privacy contact: [email protected].
Summary
- No user accounts or logins.
- No analytics, advertising, tracking or crash-reporting tools. We do not sell or share your data for advertising.
- We process device identifiers, IP addresses, a hashed name of the Wi-Fi network your Race Box joins, and the series, drivers, teams and settings you choose.
- Your Wi-Fi password goes only from your phone to your Race Box. It never reaches our servers.
- Motorsport data comes from third-party data providers. We send no personal data to them.
Data we collect
- Race Box identifiers and technical data: Support ID, serial number, MAC address, firmware version, device status and error information.
- IP addresses of your Race Box and of the app when they connect to our servers.
- Hashed Wi-Fi network name (SSID): used to help the app find and reconnect to your Race Box. We do not store the name in readable form.
- Your preferences: followed series, drivers and teams, display layout, units, brightness and time zone.
- Support emails: your email address and message content, only if you contact us.
We do not collect your name, phone number, contacts, photos, location, payment details or advertising IDs through the app.
Why we use it and our legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Pairing and connecting your Race Box, delivering data, firmware updates | Performance of contract (Art. 6(1)(b)) |
| Showing the series, drivers and teams you follow; syncing settings between app and device | Performance of contract |
| Support and identifying your device | Legitimate interests (Art. 6(1)(f)) |
| Security and preventing misuse | Legitimate interests |
We do not use your data for advertising, profiling, or automated decisions with legal or similar effects.
Motorsport data source
Our servers retrieve race data from third-party motorsport data providers. These requests contain no personal data about you or your device.
Who we share data with
- DigitalOcean, LLC hosts our servers under a data processing agreement.
- Authorities, only where the law requires.
We share nothing else and do not sell personal data.
International transfers
Where data is processed outside the EEA, we rely on safeguards under GDPR Chapter V, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep data
| Data | Retention |
|---|---|
| Device identifiers, Wi-Fi name hash, preferences | While your Race Box uses the service; deleted within 6 months after it stops connecting |
| IP addresses in server logs | Up to 6 months |
| Support emails | As long as needed to resolve your request, no more than 6 months |
| Data stored on your phone | Until you uninstall the app |
Deleting your data
- Uninstall the app to remove data stored on your phone.
- Reset your Race Box by unplugging and plugging it back in three times within one minute.
- Email us with your Support ID and we will delete server-side data within 30 days.
Your rights
EU/EEA and UK: you can access, correct, delete, restrict or object to processing, request portability, and withdraw consent at any time. We reply within one month. You can complain to Lithuania's State Data Protection Inspectorate (vdai.lrv.lt) or your local authority.
United States, including California: you can request access to or deletion of your personal data. We do not sell or share personal data as defined by the CCPA/CPRA.
Children
Race Box is not directed at children under 13 (or the higher age required in your country). If we learn that we hold data from a child, we delete it.
Security
Connections between the app, the device and our servers use HTTPS/TLS. We apply further technical and organisational measures, and only our team has access to our servers.
Changes
We will post updates on this page with a new date. We will announce significant changes in the app.
Contact
Reklamos Principas, MB · Odminių g. 1A-15, LT-01122 Vilnius, Lithuania · [email protected]
