Effective date: 10 September 2026 Last updated: 10 September 2026
Questions, or a request about your data? [email protected]
Kartix turns a photograph of a karting lap-time sheet into permanent, searchable data, and can time your laps from your phone. This policy explains what it uses, why, and what you can do about it. It covers the Kartix app for iPhone. Our other apps each have their own policy — see all policies.
1. What Kartix uses, at a glance
| Data | Why | Required? |
|---|---|---|
| Email address | So your account exists and your laps survive a new phone | Yes |
| Display name and username | Shown on your profile, and beside your lap times on leaderboards if you leave them on | Yes |
| Photographs of lap sheets | Read by an AI model to extract the lap times — this is what the app is for | Only when you scan |
| A coarse position when you scan | To suggest which circuit you are at, instead of making you find it in a list | No — decline and pick it yourself |
| A precise GPS trace while you record | To time your laps without a printed sheet, and to draw your racing line | No — recording is optional and only runs when you start it |
| Lap times, circuits, kart classes, personal bests | It is the app | Yes |
| Week streak and session history | Streaks, reminders and your trend over time | Yes |
| Subscription status | To switch Premium on. We never see your card | Only if you subscribe |
| Usage events and crash reports | To find out what is broken and what nobody uses | No — see §4 |
| A push token | To send the two notifications Kartix sends | No — only if you allow notifications |
What Kartix does not use: advertising identifiers, contacts, your photo library beyond the images you pick, your microphone, your health data, or your browsing on other apps and sites. Kartix shows no advertising — see §6.
Recording only runs while you have it running. Kartix does not follow your location in the background at any other time. If you allowed "Always", that permission exists so a recording survives your phone locking in your pocket during a session — not so the app can watch you the rest of the week.
2. Who is responsible for your data
2.1 The data controller is:
Dexlin Av. del Mediterráneo, Loc 4 29670 Marbella, Málaga, Spain [email protected]
2.2 We are not required to appoint a Data Protection Officer; the contact address above reaches the person responsible.
2.3 Kartix's servers and database are hosted in Europe (Google Cloud
europe-west2, London). See §11 for the providers that are not.
2.4 Nothing about your laps is decided by the app on your device. Personal bests, quotas and leaderboard entries are written by our servers, and the access rules are enforced there — so another driver cannot read your sessions even with a modified copy of the app.
3. Why we are allowed to use it (EU/UK legal bases)
| What | Basis |
|---|---|
| Your account, your laps, your sessions | Contract — you asked us to keep them, and the app does not work without them |
| Reading a photographed sheet | Contract — it is the service you asked for |
| Keeping the service working, preventing abuse, fixing crashes | Legitimate interests — ours in running a working app, balanced against your interest in not being surprised |
| Location, both the coarse one and the recording trace | Consent — asked for separately, refusable, and withdrawable in system settings at any time |
| Notifications | Consent |
| Usage analytics | Consent |
| Appearing on a leaderboard | Consent — one switch in your profile, off at any time |
| Records of purchases | Legal obligation — tax and accounting |
Withdrawing consent does not undo what was done while it was given, and it does not affect anything relying on a different basis above.
4. Who else sees your data
Only the companies that run the parts of Kartix we do not. Each acts on our instructions and may not use your data for its own purposes.
| Who | What they get | What for |
|---|---|---|
| Google Firebase | Your account, laps, photographs and traces | Sign-in, database, file storage, the servers the app calls |
| Google Gemini | The photograph of a lap sheet | Reading the lap times off it |
| RevenueCat | An anonymous customer id and your subscription status | Knowing whether Premium is active |
| PostHog | Usage events and crashes, tied to your account id | Finding out what is broken and what nobody uses |
| Apple | Payment details, which we never see; push tokens | Payments, notifications, distributing the app |
Session replay is not enabled. PostHog is installed but does not record your screen.
Other drivers see only what you choose to show them: your display name and your best lap at a circuit, if Public leaderboards is on in your profile, and whatever you put in a group you have joined. A GPS trace is never shown to anybody but you — not on a leaderboard, not in a group, and not in a share card.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
5. Payments and subscriptions
Premium is sold by Apple, not by us. They take the payment and we never see your card number.
We receive, through RevenueCat, an anonymous customer identifier and whether a subscription is active, so the app knows to switch Premium on. Refunds are handled by Apple under their own policies; the Manage Subscription screen in your profile is the route to both.
6. Advertising
Kartix contains no advertising, and no advertising SDK. It does not read your device's advertising identifier, it will never ask you for tracking permission, and nothing in it is funded by anybody other than the people who subscribe.
7. Children
Kartix is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has an account, write to [email protected] and we will remove it.
8. How long we keep it
| What | How long |
|---|---|
| Your account, laps and personal bests | Until you delete them, or delete your account |
| A photographed sheet | With the session it produced — deleting the session deletes it |
| A GPS trace | With the heat it produced — deleting the heat deletes it |
| Usage events | 12 months |
| Purchase records | 6 years, because tax law says so |
| Backups | Up to 30 days after deletion, then gone |
9. Deleting your account
Ask at [email protected] and we will erase everything in §1 within 30 days, including your laps, your photographs and your GPS traces. Purchase records survive only where tax law requires them, and are kept for nothing else.
Deleting the app from your phone does not delete your account, and does not cancel a subscription — cancel that in your Apple account settings.
10. Your rights
If you are in the UK or EU, you have the right to:
- access the data we hold about you, and get a copy;
- rectify anything wrong;
- erase it;
- restrict how we use it;
- object to processing based on legitimate interests;
- port it to another service in a machine-readable form;
- withdraw consent at any time, for location, notifications, analytics or leaderboards.
All of them are free to exercise. Write to [email protected] and we will answer within 30 days.
If you think we have got it wrong, you can complain to your local supervisory authority — in Spain the Agencia Española de Protección de Datos (aepd.es), in the UK the Information Commissioner's Office (ico.org.uk).
If you are in California, you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for asking. As above: we do not sell or share personal information, so there is nothing to opt out of.
11. International transfers
Our database and file storage are in the European Union. Some of the providers in §4 are United States companies and may process data there. Where they do, the transfer relies on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
12. Security
Everything in transit is encrypted. Access to your laps is enforced by server-side rules rather than by the app, so it holds even against a modified client, and the collections that decide what you are entitled to are writable only by our servers.
No system is perfect and we will not pretend otherwise. If you find a problem, please tell us at [email protected] before telling anyone else, and we will credit you if you would like us to.
13. Changes to this policy
If we change this in a way that matters, we will say so in the app before it takes effect, and update the date at the top. Smaller corrections are made quietly and the date still moves.
14. Contact
Dexlin Av. del Mediterráneo, Loc 4 29670 Marbella, Málaga, Spain
Privacy and data requests — [email protected] Anything else — [email protected]
Like Pokicar's, this policy is provided in plain English on purpose. If any part of it is unclear, that is a fault worth reporting, and the address above will reach us.