Privacy Policy

Introduction

Trofii LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Information We Collect

Account Information

• Email address
• Username
• Password (encrypted)
• Phone number (optional, required for race event entry)
• Profile photo and banner image (optional)
• City or preferred location (optional)
• Racing motto or bio (optional)

Vehicle Information

You may add vehicles to your garage, including make, model, year, trim, color, horsepower, weight, drivetrain, transmission type, and modifications. Vehicle photos you upload are stored on our servers.

Location & GPS Data

Our app uses GPS technology to track racing performance. Location data is collected when you actively start a race session. Depending on your GPS source, data may be collected at varying frequencies:

• Phone GPS: 1–10Hz sampling using your device's built-in sensors
• Dragy™ devices: 10Hz GPS sampling via Bluetooth
• Racebox™ devices: 25Hz GPS sampling with IMU (accelerometer and gyroscope) data via Bluetooth

GPS data collected includes latitude, longitude, altitude, speed, heading, accuracy metrics, and satellite count. If you enable the "Nearby Racers" feature, your approximate location may be shared with other users within a configurable radius (5–100 miles). You can disable this feature entirely in your privacy settings.

Background location access may be used on iOS to maintain GPS accuracy during active race sessions. We do not track your location when you are not actively using the app's racing features.

Performance & Race Data

• Race times (0-60, 60ft, 330ft, 1/8 mile, 1/4 mile, and custom distances)
• Speed measurements and top speed
• Acceleration and g-force data
• GPS coordinate traces during race sessions
• OBD-II vehicle telemetry (RPM, throttle position, engine temperature, etc.) when connected to a compatible adapter

Media

Photos and videos you upload (profile images, car photos, race recordings, social feed posts) are stored on our cloud infrastructure. We may create multiple size variants of uploaded images for optimal display.

Social & Community Data

• Direct messages sent and received
• Social feed posts, comments, likes, and reposts
• Friend and follower relationships
• Group memberships and activity
• Callout (racing challenge) history
• Prediction and coin activity within groups

Device & Usage Information

• Device model, operating system, and version
• App version and build number
• Push notification tokens
• Analytics events (screen views, feature usage)

How We Use Your Information

• To provide, maintain, and improve the Service
• To calculate and display your performance metrics and race results
• To populate leaderboards, rankings, and group standings
• To connect you with other racers, enable messaging, callouts, and social features
• To power the "Nearby Racers" feature (if enabled)
• To send push notifications about race results, messages, friend requests, group activity, and other updates
• To process and manage subscriptions and in-app purchases
• To analyze usage patterns and improve the app experience
• To respond to support requests and feedback

Third-Party Services

We use the following third-party services to operate the Service:

• Google Firebase: Analytics, push notifications, and cloud messaging
• Mapbox: Map rendering and location display
• Cloudflare: Media storage and content delivery
• Expo: Push notification delivery
• Apple App Store & Google Play: Subscription and purchase processing
• Google & Apple: Sign in with Google or Apple, if you choose to use it
• Sentry: Crash and error reports, so we can fix problems in the app
• Twilio: Delivery of the text messages described below
• Resend: Delivery of our emails, such as signed tech cards and account messages
• Dropbox: Only when a track chooses to keep copies of its signed tech cards in its own Dropbox

These services may collect and process data according to their own privacy policies. We encourage you to review those policies.

Data Sharing & Visibility

Certain data is visible to other users depending on your privacy settings:

• Public by default: Username, avatar, city, and leaderboard entries
• Controllable: Race history, profile stats, social lists (friends/followers), car garage details
• Restricted: You can set your account to private (requiring follow approval), control who can message you or send you callouts, and configure default post visibility

We do not sell your personal information to third parties. We may share anonymized, aggregated data for analytics and research purposes.

Events, Tech Cards & Track Results

When you sign a track's tech card or release on Trofii, we collect what that track asks for, such as your name, address, phone number, email, racing license number, your car's details and number, and your signature. We also record when you signed and the IP address and device you signed from, so the signed copy can be verified.

We share your tech card and the signed release with the track or event organizer running the event. They can see it in their Trofii portal, and they may receive it by email or keep copies in their own storage. Once they have it, the track's own policies also apply.

When a track's timing system sends its results to Trofii, we receive every pass at that event, including car numbers, classes and times. If you add your car number at the event, your passes are added to your account. We also collect race results that tracks publish themselves, which can include racers' names, hometowns and cars, and show them as racing records. To ask us to correct or remove a result about you, contact us through our support page.

Text Messages

If a track's crew signs you up for Trofii at an event, or you give us your mobile number, we may text you about your account, like the link to finish setting it up. How often depends on what you do, and message and data rates may apply. Reply STOP anytime to stop our texts, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Your mobile number and your agreement to get our texts are never shared with anyone else.

Bluetooth & Hardware Permissions

If you connect external GPS devices (such as Dragy or Racebox) or OBD-II adapters, the app requires Bluetooth permissions to scan for and communicate with these devices. Connection details (such as your last-used device) may be saved locally on your device for automatic reconnection. We do not transmit Bluetooth device identifiers to our servers.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted passwords and secure API communications. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your account data and race history for as long as your account is active. If you delete your account, we will remove your personal information from our servers within 30 days, except where retention is required by law. Anonymized or aggregated data (such as leaderboard records) may be retained indefinitely.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your race data
• Opt out of push notifications (per category in app settings)
• Opt out of marketing communications
• Control the visibility of your profile, race history, and social information through in-app privacy settings
• Disable the "Nearby Racers" feature

To exercise any of these rights, contact us through our support page or use the relevant controls within the app's settings.

Children's Privacy

Trofii is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If we discover that a user is under 18, we will promptly delete their account and associated data.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us through our support page.

International Users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing your data is your consent (provided at account creation) and our legitimate interest in providing the Service.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and where appropriate, sending a push notification or email.

Contact Us

If you have questions about this Privacy Policy, please contact us through our support page.