Privacy Policy

Last Updated: December 26, 2025

This Privacy Policy describes how Race Dashboard ("we", "our", or "us") collects, uses, and protects your personal information when you use our mobile application (the "App").

1. Information We Collect

1.1 Authentication Data

When you sign in to the App, we collect authentication information through Microsoft Azure AD B2C, including:

• OAuth access and refresh tokens
• User ID and email address
• Profile information (name, display name)

1.2 User Profile Information

To provide race management services, we collect:

• British Cycling (BC) membership number
• User display name and profile information

1.3 Event Data

As part of race management functionality, the App processes event-related data including:

• Rider information (names, bib numbers, categories, license numbers)
• Incident reports and notes
• Race results and protests
• Event assignments and schedules
• Documentation (technical guides, risk assessments, levies)

1.4 Device Information

We collect device information to ensure app functionality and security:

• Device ID and platform information
• Device model and operating system version

1.5 Location Data

The App may access location identifiers (What3Words addresses) for event locations, which are stored locally on your device.

1.6 Crash Reports and Diagnostics (optional)

To improve app stability and performance, we may collect (only if you enable "Share diagnostics" in Settings):

• Crash reports and error logs via Firebase Crashlytics
• Diagnostics/telemetry such as feature usage and error context (no advertising identifiers)

2. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to the App
• App Functionality: To enable race management features, including rider lookup, incident logging, and document access
• Offline Operation: To store event data locally so the App works without internet connectivity
• Crash Reporting/Diagnostics (optional): To identify and fix bugs and improve app stability (only when "Share diagnostics" is enabled)
• Analytics: To understand app usage patterns and improve user experience (no advertising or tracking)

3. Data Storage and Security

3.1 Encryption

We implement strong security measures to protect your data:

• All event data containing personally identifiable information (PII) is encrypted using AES-256-GCM encryption
• Authentication tokens are stored in secure platform storage (iOS Keychain / Android Keystore)
• Local databases use SQLCipher encryption with keys stored in secure storage
• All data transmission is encrypted using HTTPS/TLS

3.2 Data Retention

Event data is automatically deleted from your device 14 days after the event end date. Authentication tokens are retained until you sign out or they expire. Optional diagnostics are only sent while enabled.

3.3 Offline Storage

The App stores data locally on your device to enable offline functionality. This data is encrypted and automatically purged according to our retention policy.

4. Third-Party Services

We use the following third-party services that may collect or process your information:

4.1 Microsoft Azure AD B2C

We use Microsoft Azure AD B2C for user authentication. When you sign in, your authentication is handled by Microsoft according to their privacy policy. We receive only the information necessary to identify and authenticate you.

4.2 Firebase Crashlytics

We use Google Firebase Crashlytics to collect crash reports and diagnostics when enabled. This helps us identify and fix issues. Crash reports may include device information and error details. You can turn this off anytime in Settings > Share diagnostics.

4.3 Azure Blob Storage

Event data and documents are stored in Microsoft Azure Blob Storage. All PII data is encrypted before transmission and storage.

5. Data Sharing

We do not sell your personal information. We only share data as necessary to provide the App's functionality:

• With Microsoft Azure AD B2C for authentication
• With Azure Blob Storage for event data storage
• With Firebase Crashlytics for crash reporting
• As required by law or to protect our rights

6. Your Rights

You have the following rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Deletion: You can delete your broker account in Settings (Delete account). You can also request deletion by contacting us.
• Correction: You can update your profile information within the App
• Data Portability: You can export your event data through the App's functionality

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

7. Children's Privacy

The App is intended for use by race officials and commissaires. We do not knowingly collect personal information from children under the age of 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

This privacy policy is effective as of the date listed above and applies to all users of the Race Dashboard mobile application.