RaceHub Privacy Policy

1. Introduction

This Privacy Policy explains how RaceHub collects, uses, stores, and protects your personal information when you use our website, iOS app, and related services (the "Platform").

By using RaceHub, creating an account, or providing personal data, you agree to the practices described here. If you do not agree, please do not use the Platform.

2. Scope

This Policy applies to all users worldwide (Drivers, Teams, Managers, Guardians, and others). Where local laws apply (e.g., GDPR, UAE DPL, CCPA/CPRA), we follow them in addition to this Policy.

3. Who We Are

TheRaceHub FZ-LLC is the data controller for personal data collected through the Platform.

General contact: info@theracehub.com

Data protection contact: for GDPR- or UAE DPL-related requests, questions, or complaints, you may also reach our data protection contact at privacy@theracehub.com. Where required by law, RaceHub will appoint an EU or UK representative for users located in those regions; details will be published here once appointed.

4. What We Collect

Depending on how you use RaceHub, we may collect:

• Account data: name, email, username, password, date of birth, nationality, profile photo
• Contact data: phone, city/country, preferred contact method
• Racing profile: license, racing history, results, budgets, team/driver info
• Billing data: subscription details, invoices (payment details handled by Stripe on the web and by Apple In-App Purchase on iOS; we never store card numbers)
• Messages: in-app chats, inquiries, support tickets
• Technical data: IP, device type, browser, OS, pages visited, crash logs
• Location: city/country, approximate IP location, or precise device location (iOS app, only with your permission)
• Device permissions data: camera and photo library access (for profile or content uploads), push notification tokens
• Marketing preferences: newsletters, event sign-ups
• Third-party data: from social accounts (if connected), racing databases, organizers
• Guardian/parent data: where an account is created or managed on behalf of a minor, we also collect the guardian's or parent's name, email, and verification details
• Sensitive data: not required, and only collected with your explicit, separately captured consent where you choose to provide it

5. How We Collect Data

• Directly from you (when registering, creating a profile, messaging, or purchasing)
• From a parent or guardian (when they register or manage an account on behalf of a minor driver)
• From third parties (payment providers, racing organizers, public sources, analytics)

6. Why We Use Data & Our Legal Basis

We process personal data for the purposes below. Where GDPR or similar laws apply, each purpose relies on one of the following legal bases: performance of a contract with you, our legitimate interests (balanced against your rights), your consent, or a legal obligation.

• Provide and manage accounts and Platform access
• Enable messaging and connections between drivers and teams
• Process payments and subscriptions
• Improve services through analytics and research
• Keep the Platform secure and prevent fraud
• Comply with legal obligations
• Share marketing/promotional updates (with consent)
• Verify guardian/parent consent for minor accounts

7. Automated Processing

We may use automated tools (e.g., matching drivers and teams), but final decisions with legal or contractual effect always involve human review. You have the right to request human review of, and to object to, any automated processing that produces such effects, by contacting info@theracehub.com.

8. Cookies, Tracking & App Tracking Transparency

We use cookies and similar technologies on the website for login, security, analytics, preferences, and marketing (if enabled). You can adjust settings via your browser or our cookie banner.

On the iOS app, if RaceHub or any third-party SDK we use tracks you across other companies' apps or websites (for example, for advertising measurement), we will request your permission through Apple's App Tracking Transparency (ATT) framework before doing so. You can change this permission at any time in your device Settings > Privacy > Tracking. If we do not perform this kind of cross-app tracking, no ATT prompt will appear.

9. Sharing Data

We share data only when necessary:

• Service providers: hosting, analytics, email, payment processors (e.g., Stripe, Apple)
• Teams/Championships: if you choose to share or list with them
• Authorities: when required by law
• Business transfers: in case of merger or sale (with notice)

We never sell personal data.

Where CCPA/CPRA applies, we also do not "share" personal data for cross-context behavioral advertising.

10. International Transfers

Data may be stored or processed outside your country, including in the United Arab Emirates. When required, we use safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms recognized under applicable law.

11. Retention

We keep data only as long as needed:

• Account data: while active + up to 12 months after deletion
• Guardian/parent verification records: for as long as the minor's account is active, plus the same 12-month period
• Billing data: up to 7 years for tax/legal reasons
• Messages/logs: while needed for service and abuse prevention
• Analytics: anonymized or kept only as necessary

If you submit a deletion request before the retention period above ends, we will delete or anonymize your data unless we are legally required or permitted to retain it (for example, for tax, fraud-prevention, or dispute-resolution purposes), in which case we will tell you what is retained and why.

12. Security

We use industry-standard measures (encryption, access controls, monitoring, backups). While no system is 100% secure, we act quickly if a breach occurs. Where legally required, we will notify affected users and relevant authorities without undue delay, and in any case within the timeframe required by applicable law (for example, within 72 hours of becoming aware, under GDPR).

13. Your Rights

Depending on local law, you (or, for a minor's account, their parent/guardian) may request to:

• Access your data
• Correct or delete data
• Restrict or object to processing
• Receive a copy of your data in a portable format
• Withdraw consent (for marketing or other consent-based processing)
• Object to automated decision-making that has legal or similarly significant effects

To exercise these rights, contact info@theracehub.com. We may ask for proof of identity (or proof of guardianship, for a minor's account). If you are not satisfied with our response, you also have the right to lodge a complaint with your local data protection authority.

14. Children and Minors

RaceHub is intended for users aged 13 and older. We do not knowingly collect personal data from anyone under 13, and if we discover we have done so, we will delete it.

Because many drivers on RaceHub are junior racers, we specifically allow and support the following for users aged 13–17 ("minors"):

• A parent or legal guardian may create and manage a RaceHub account on behalf of a minor driver, including entering the minor's racing profile, results, and communications on their behalf.
• Where a minor creates their own account, we require the involvement and verifiable consent of a parent or guardian before the account is activated.
• A parent or guardian may access, review, correct, or request deletion of their minor's data at any time by contacting info@theracehub.com.
• We limit marketing communications and public-facing profile visibility for minor accounts to what is reasonably necessary for the Platform's racing and team-matching purpose.

If you believe a user under 13 has provided us personal data, please contact info@theracehub.com so we can investigate and delete it.

15. Marketing

You may receive RaceHub updates and promotions if you opt in. You can unsubscribe anytime.

16. Payments

Payments on the website are processed by Stripe. Your card details are handled directly by Stripe, not RaceHub.

Subscriptions purchased in the iOS app are processed by Apple In-App Purchase (StoreKit). RevenueCat is used to manage subscription entitlements. Apple handles your payment details; we do not receive or store card numbers. You can manage or cancel Apple subscriptions in iOS Settings. Billing records may be retained as described in Retention above.

17. Messages & User Content

• Public profile info and listings are visible to other users.
• Private messages are stored securely but may be accessed if required for legal or abuse investigations.
• You are responsible for ensuring content you post does not infringe others' rights.

18. Third-party Links

We are not responsible for third-party sites you access from RaceHub. Review their privacy notices before sharing data.

19. Data for Research & Improvement

We may anonymize or aggregate data for analytics and research. Once data is truly anonymized, it is no longer considered personal data.

20. Mobile App & Device Permissions (iOS)

The RaceHub iOS app may request the following device permissions. You can grant, deny, or later change any of these in your device Settings.

• Camera and Photo Library: to upload a profile photo or content to your racing profile or messages
• Location Services: to show your approximate or precise location to teams/organizers, where you choose to share it
• Push Notifications: to alert you to messages, team offers, and event updates
• Tracking (ATT): only requested if we use cross-app tracking; see Section 8

In line with Apple's App Store requirements, our data practices are also disclosed in the app's "App Privacy" nutrition label in the App Store listing, and our use of certain system APIs is declared in our app's privacy manifest. If anything in that label appears inconsistent with this Policy, this Policy governs and we will correct the label promptly.

21. Intellectual Property & Copyright

All content, software, branding, and design on RaceHub belong to RaceHub and are protected by law.

You may use the Platform for its intended purpose only.

Copying, modifying, or redistributing RaceHub IP without permission is not allowed and will result in legal action. RaceHub reserves all rights not expressly granted.

22. Changes to this Policy

We may update this Policy from time to time. If changes are significant, we will notify you by email or in-app, and update the "Effective date" above.

23. How to contact us

If you have questions about this Privacy Policy, wish to exercise data subject rights, or wish to make a complaint, please contact: