Legal

Privacy Policy

How we handle your data.

The short version

We collect the data you give us (your account info and the runs you log), plus the minimum technical data we need to keep the service running and improving. We don't sell your data. You can export or delete your data at any time. We use a small number of trusted vendors to run things like billing, email, and AI extraction — each one is contractually bound to protect your information.

1. Who we are

Drag Race Logbook Pro ("we," "us," or "the Service") helps drag racers log, analyze, and predict performance. This policy covers the Service everywhere it runs: the website at dragracelogbook.ai and the Drag Race Logbook apps for iOS and Android. All three share a single account and database, so the practices below apply identically to each. Contact: privacy@dragracelogbook.com.

2. What we collect

Account information

Email address, display name, password (stored as a salted hash — we never see your plaintext password), and optional profile fields like competition number and avatar. If you sign in with Google or Apple instead of a password, we receive your email address and name from that provider and never see the credentials you use with them. Signing in with Apple's "Hide My Email" gives us only the relay address Apple generates.

Racing data you create

Cars, tracks (custom ones you add), individual run records (ET, MPH, reaction time, weather, notes), uploaded photos (time slips, weather readouts, gauge clusters), and AI-extracted values from those photos.

Billing information

On the web, payment is processed by Stripe and we receive a Stripe customer ID, subscription status, and the plan you're on. In the iOS and Android apps, subscriptions are purchased through Apple's App Store or Google Play and managed for us by RevenueCat; we receive an anonymous subscriber ID, which products you own, and whether the subscription is active. We never see or store your card details in either case — those live only with Stripe (PCI DSS Level 1 certified), Apple, or Google.

Technical data

Standard server logs (IP address, user agent, requested URL, timestamp) and basic analytics (which pages are visited, how the app is used). We use this to keep the service running and to fix bugs. The mobile apps contain no advertising or third-party analytics SDKs.

Device permissions (iOS and Android apps)

The mobile apps ask for three device permissions, each only at the moment you use the feature that needs it. You can decline any of them and keep using the rest of the app.

  • Location — used to work out which track in the directory is closest to you, so Race Mode can pick today's track without you scrolling several hundred entries. Your location never leaves your device. The comparison happens entirely on the phone; we do not transmit, log, or store your coordinates. Weather look-ups send the coordinates of the track you selected — published, public venue locations — never yours.
  • Camera — used only when you photograph a time slip or logbook page to scan it. We do not access the camera at any other time.
  • Photo library — used only to let you pick an existing photo of a time slip to scan. We read the image you choose and nothing else.

3. How we use your data

  • To run the Service: show you your runs, generate predictions, calculate density altitude, etc.
  • To communicate: transactional emails (account verification, password resets, billing receipts). We do not send marketing emails unless you opt in.
  • To improve the Service: aggregate, de-identified usage patterns help us improve AI extraction accuracy and the user experience.
  • To prevent abuse: rate limiting, fraud detection, and security monitoring.

4. Service providers we use

We use the following processors to operate the Service. Each one receives only the data needed for their function and is bound by their own privacy commitments.

  • Stripe — payment processing and subscription management on the web.
  • RevenueCat, Apple, and Google — subscription purchase and entitlement management in the iOS and Android apps. Apple and Google process the payment itself; RevenueCat records which subscription you hold.
  • Blink Platform — application hosting, authentication, database, and storage.
  • OpenAI — AI extraction of time slips, logbook pages, weather photos, and gauge readings. Uploaded images are sent to OpenAI for extraction; OpenAI does not train on data submitted through their API.
  • NOAA / National Weather Service and Open-Meteo — public weather observations and historical data. We send the track's coordinates only; no personal data is shared.
  • Email delivery vendor — for transactional email (verification, receipts, password resets).

5. What we don't do

  • We do not sell your personal data to anyone.
  • We do not share your run data with advertisers.
  • We do not use your logged runs to train third-party AI models.
  • We do not track you across other websites for advertising purposes.

6. Your rights

Regardless of where you live, you can:

  • Access — see all data we hold about you (Profile → Account).
  • Export — download your full run history as CSV at any time (Runs → Export).
  • Correct — edit any field on any run, car, or track.
  • Delete — request account deletion via privacy@dragracelogbook.com. We will delete your account and associated data within 30 days, except where retention is legally required (e.g. financial records for tax purposes).
  • Object / restrict / port — if you're in the EU/UK, you have additional rights under GDPR. Email us to exercise them.
  • California residents — under CCPA, you have the right to know, delete, and opt out of sale. We do not sell personal data.

7. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except for billing records (kept up to 7 years for tax compliance) and minimal logs needed to prevent abuse.

8. Children

The Service is not directed at children under 13. We do not knowingly collect data from anyone under 13. Junior dragster racers under 13 should use the Service through a parent or guardian's account.

9. International transfers

The Service is operated from the United States. If you access the Service from elsewhere, your data is transferred to and stored in the United States. By using the Service, you consent to this transfer.

10. Security

We use industry-standard security practices: TLS for all data in transit, encryption at rest, password hashing with modern KDFs, and regular security review. No system is perfectly secure, but we work hard to protect your data.

11. Cookies

We use a small number of essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. By using the Service you accept our use of these essential cookies.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email at least 30 days before they take effect. The "Last updated" date at the top will always reflect the current version.

13. Contact

Questions about this policy or how we handle your data? Email privacy@dragracelogbook.com.