Privacy Policy

1. Who handles your data

The data controller is Bruno Amaro dos Santos, responsible for DoChron (“we”). For any privacy matter, including contacting the data protection officer, write to privacidade@dochron.com.br.

2. Data we collect

• Account and sign-in: email, name, nickname and profile photo, if you provide them, and the identifier of the Apple or Google account used to sign in. With Sign in with Apple, the email may be a relay address created by Apple.
• Preferences and equipment: language, units, disciplines (kart or motorcycle), the equipment you use, notification settings, vehicles and classes.
• Sessions and telemetry: date, track, laps, times and equipment model, and the channels recorded by the equipment at 10 samples per second, such as GPS position, altitude, speed, accelerations, gyroscope, RPM, gear, throttle, brake, steering and water temperature, when available.
• Groups, shares and sends: groups you belong to, rankings, links you create and sessions you send or receive.
• Purchases: plan, status of the subscription, the free trial and track passes, and the customer identifier at RevenueCat. We do not receive your card details: payment happens in the App Store or Google Play.
• Device and access: device model, operating system, app version, notification token and, in sign-in sessions, IP address and device name.
• App usage and errors: screens opened, taps and usage events (for example, “session opened” or “link shared”), crash reports and performance data.
• Support: whatever you write to us by email or WhatsApp.

3. What stays only on your device

The original files from your equipment (AiM XRK and XRZ, GoPro videos and GPS) stay on your phone and are not sent to our server. The app keeps them for up to 90 days so you can reprocess a session. On the import website, Race Studio files are read in your browser; only processed telemetry is sent.

The app asks for some permissions only so it can work: Bluetooth, Wi-Fi and local network to connect to the equipment; location, which iPhone and Android require to find the equipment's Wi-Fi (the app does not use this permission to record where you are); camera and photos, only when you pick an image to share, which is put together on the device itself; and notifications, if you allow them.

4. What we use data for

• providing the service: importing, analyzing and showing your sessions, groups, comparisons and the Replay 3D;
• drawing track and corner maps and calculating your relative position at a track, with aggregated data from many drivers;
• unlocking and checking Pro, the free trial and track passes;
• sending the sign-in code and the notifications you turn on;
• support, preventing fraud and abuse, and security;
• improving the product with usage metrics and crash reports;
• meeting legal obligations and defending rights.

5. Legal bases

We process data to perform our contract with you (art. 7, V, of the LGPD), for legitimate interest in metrics, security, fraud prevention and service improvement (art. 7, IX), to meet legal obligations (art. 7, II), to exercise rights in legal proceedings (art. 7, VI) and with your consent when we ask for it, as with notifications and analytics cookies on the import website (art. 7, I).

We do not sell personal data, we do not use your data for advertising and we do not track you across other companies' apps or websites.

6. What other people see

• Share link: anyone with the link sees your name and photo, the vehicle, the track, the date, the lap times and the racing line and speed of the best lap, until you turn the link off.
• Groups: members see your best lap in the group ranking and the charts of the sessions you share in the group. The invite link shows only initials and positions, without times.
• Sending a session: the recipient sees your name and photo and, once they accept, the session becomes theirs.
• Relative position: you see which band you are in at a track; it only appears with at least 8 drivers, and nobody sees names, times or the list of others. There is no public ranking.
• Our team: may see the racing line of sessions at tracks not yet in the catalog to map the track, and a lap may be used as the track's reference line.

7. Who we share data with

We use providers that process data on our behalf, each with only what it needs for its job:

• Apple: Sign in with Apple, App Store purchases and notification delivery on iPhone;
• Google: Sign in with Google, Google Play purchases, notification delivery on Android (Firebase Cloud Messaging) and satellite imagery for maps (Google Maps Platform, requested by our server, not by your device);
• Expo: sending push notifications;
• RevenueCat: subscription and track pass status;
• Resend: sending the sign-in email;
• PostHog: usage metrics for the app and the import website;
• Sentry: crash and performance reports;
• Cloudflare Turnstile: bot check at sign-in on the import website;
• hosting and storage providers: servers, database and backups.

8. Other disclosures and international transfers

We may disclose data to authorities when required by law or court order, or to defend rights.

Some providers process data outside Brazil, for example in the United States. In those cases, the transfer follows art. 33 of the LGPD, with safeguards such as contractual clauses and these providers' data protection policies.

9. How long we keep data

We keep data while your account exists. When you delete your account, access is cut off immediately and the data is permanently deleted within 30 days, with these exceptions:

• an irreversible code (hash) of your email and your Apple or Google accounts, kept only to prevent a new free trial;
• a track reference line that came from one of your laps stays on the track map, without your name;
• sessions you sent that another driver accepted belong to them;
• purchase records stay with Apple and Google, under their rules;
• usage metrics and crash reports stay with the providers for their retention period, linked only to an internal identifier that no longer points to you;
• data the law requires us to keep, for the legal period.

10. Security

We use encrypted connections (HTTPS), store sign-in tokens only as hashes and limit access to data to those who need it. No system is completely secure; if a security incident creates a relevant risk for you, we will notify you and Brazil's National Data Protection Authority (ANPD), as the LGPD requires.

11. Your rights

You can ask for confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, deletion, information about who we share data with, and withdraw consent (art. 18 of the LGPD).

To delete your account, see dochron.com/en/delete-account. Name and preferences can be corrected in the app itself. For other requests, write to privacidade@dochron.com.br from your account email; we reply within 15 days. You can also file a complaint with the ANPD.

12. Cookies and local storage

dochron.com website: no advertising cookies. We may use Plausible, which counts visits without cookies. Your theme choice is stored only in your browser.

Import website: uses necessary cookies to keep you signed in. Analytics cookies (PostHog) are only used if you accept them in the cookie notice.

App: stores on the device the data it needs to work offline, such as downloaded sessions, preferences and the sign-in session.

13. Children and teenagers

DoChron is not intended for children under 13. Teenagers aged 13 to 17 only use DoChron with the permission and supervision of a parent or legal guardian, who can exercise the rights above on their behalf. If we learn that an account belongs to someone under 13, we will delete it.

14. Changes to this policy

We may update this policy. The date of the last update is at the top of the page, and we will announce relevant changes in the app or by email. If there is any difference between translations, the Portuguese version prevails.

15. Contact

Controller: Bruno Amaro dos Santos. Privacy and data protection officer: privacidade@dochron.com.br. WhatsApp support in the app (Profile › Settings) and through the “Support” link in this website's footer, Monday to Friday, 9 am to 6 pm (Brasília time).