Privacy Policy
Last updated: April 27, 2026. This policy is provided in good faith and may not constitute legal advice for your jurisdiction.
1. Who we are
Rolls & Digs ("we", "us") is operated by Technooptics LLC. For privacy questions: privacy@rollsanddigs.com.
2. What we collect
- Account data: email, handle, display name, avatar, OAuth provider identifiers.
- Garage data: cars, mods, photos, notes you choose to enter.
- Race telemetry: GPS lat/lng/speed/heading samples during a race, timestamps, device accuracy.
- Device & technical data: app version, OS, browser, IP address (kept for security), crash diagnostics.
- Payment data: handled directly by Stripe - we never see card numbers.
- Cookies: strictly necessary always; analytics & personalisation only with your consent.
3. Lawful bases (UK / EU)
We process personal data on the bases of (i) contract - to provide the service you signed up for; (ii) consent - for optional cookies, marketing, and precise location; (iii) legitimate interests - to keep the service safe and improve it; (iv) legal obligation - to meet tax, accounting, and law-enforcement requirements.
4. Location
Location is the most sensitive thing we touch. We only sample your location while a race is active, while you opt in to nearby station/shop discovery, or to surface events near you. We never sell location data and never share precise location with third parties.
5. Sharing
Service providers we use: Supabase (database, auth, storage), Vercel (hosting), Stripe (payments), Anthropic (Bella AI assistant - chat content is sent to process your message). We do not sell your personal data.
6. International transfers
Our infrastructure is hosted in the United States. Where you are located in the UK, EEA, Switzerland, or another region with cross-border restrictions, transfers happen under Standard Contractual Clauses or equivalent safeguards.
7. Retention
Account data is retained while your account is active. Race telemetry is retained as long as the parent race exists; deleting a race removes the trace. Closing your account removes personal data within 30 days, except where retention is required by law (tax records, fraud prevention).
8. Your rights
Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, LGPD, PIPEDA, etc.), you may have rights to access, port, correct, restrict, object to processing of, or delete your personal data, plus the right to withdraw consent at any time. Email privacy@rollsanddigs.com or use the in-app controls. You also have the right to lodge a complaint with your local supervisory authority.
California residents (CCPA/CPRA): we do not "sell" or "share" personal information as those terms are defined under the CCPA. You have the right to know, delete, correct, and limit use of sensitive personal information.
9. Children
The service is intended for adults aged 18+. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK).
10. Cookies
Our cookie banner gives you per-category control. "Strictly necessary" cookies are required for the service to function. Analytics and personalisation cookies are off until you opt in.
11. Changes
We will notify you of material changes by email or in-app. Your continued use after a change constitutes acceptance of the updated policy.
12. Contact
privacy@rollsanddigs.com · Technooptics LLC
