AutoX Live
Privacy Policy
AutoX Live is an independent app for iPhone and Android for following autocross timing results and posting times to community leaderboards. It has no ads and no analytics or tracking SDKs. This page explains the little data it does handle.
What stays on your phone
Pinned drivers, nicknames, the car you mark as "me", hidden leaderboards, and your other settings are stored only on your device. If you use the Apple Watch app, the phone copies the current event, your pins, nicknames and "me" car straight to your paired watch so it can show your times. They are never sent to us, except for the pins and the "me" car when you turn on notifications, as described below. The watch fetches results from our server without a device ID.
What is sent to our server
- A random device ID. The first time you open the app it generates a random identifier and stores it in your device's Keychain. It is sent with the app's requests to our server so the server can tell which leaderboards and times are yours to edit or delete. It is not derived from your name, Apple ID, or hardware, and it is never shown to other users. The server keeps a record of each device ID with the first and most recent time it was used.
- Your Apple sign-in. Posting requires signing in with Apple; browsing does not. When you sign in we store the identifier Apple gives this app for your Apple ID, a username (filled in from the name you share with Apple, or one you choose), and your email address or, if you hide it, Apple's private relay address. They let you edit your posts from any phone you sign in on, and are never shown to other users.
- What you post. Leaderboards you create and times you post, including the name or nickname, vehicle, and notes you type in. Everything you post is public and visible to anyone using the app or the leaderboard website.
- Reports. If you report a leaderboard or a time, we store the reason you wrote along with your device ID.
- Blocks. If you block a poster, we store that your device ID blocked theirs so the server can leave their leaderboards and times out of what it sends you. Blocking also files a report. The person you blocked is not told.
- Joined leaderboards. If you add an unlisted leaderboard with a join code, we store that your device ID joined it so the server keeps sending it to you. Unlisted leaderboards are left out of the app's list, but they are not private: anyone who has the join code can see what is posted to them, and some are shown on the leaderboard website.
- TrackAddict logs. If you import a TrackAddict CSV to post a time, the file is sent to our server only to read its lap times. It is processed in memory and is not saved. Note that these files contain GPS data recorded by TrackAddict.
- Proof photos. If you post a time by typing it in instead of importing a log, you choose one photo from your library to show the time, such as a TrackAddict screenshot or a picture of a timing display. The app only receives the photo you pick, and removes its location and camera details before sending it. The photo and the time are stored on our server until we review them. Only the app's maintainer sees the photo; it is never shown to other users, and it is deleted as soon as the time is approved or turned down, or when you withdraw it.
- Notifications. If you turn on notifications for your times or your friends' times, the app sends our server the push token Apple issues for your phone, which kinds you turned on, the car numbers you marked as "me" or pinned in events from yesterday on, and the names of the drivers you last marked, so the server can tell you when one of them posts a time. Our server sends each notification through Apple's push service. Turning both kinds off deletes all of this from our server, and car numbers for past events are deleted the day after the event.
- Standard server logs. Like any web service, our server and its hosting provider may log your IP address and the time of each request. These logs are used only to keep the service running and to investigate abuse.
The Android app
AutoX Live for Android is a read-only version of the app, downloaded from this site rather than an app store. It sends our server the same things the iOS app does, as described above, except that it has no Apple sign-in, no notifications and no posting, so it never sends a push token, a TrackAddict log or a proof photo. Its random device ID is kept in the app's private storage and included in Android's backup of the app, so reinstalling keeps your joined leaderboards and blocks. When it opens, at most every few hours, it also asks our server for the latest version number and, if you choose to update, downloads the new app file from our server. That check sends only the standard request details described below, not your device ID.
What we do not do
We do not collect your location, contacts, or advertising identifier, and the app cannot see your photo library beyond a proof photo you choose to send. We do not sell or share data with advertisers or data brokers, and we do not track you across other apps or websites.
Timing results
Event results shown in the app come from publicly available timing services and club result pages. AutoX Live is not affiliated with, or endorsed by, any event organizer, club, or timing provider. Names and car descriptions that appear in those results are published by those sources, not by us.
Deleting your data
You can delete leaderboards you created and times you posted from inside the app, and withdraw a time that is still waiting for review, which deletes its photo. Delete Account on the Setup tab removes your account, every leaderboard you created along with the times on it, every time you posted, and anything you had waiting for review. If you were banned from posting, we keep Apple's identifier for your Apple ID so the ban stays in place. Posts made before sign-in existed, from a phone that never signed in, can only be edited from that phone; if you want those removed, or want anything else deleted, email us and we will take care of it.
Children
AutoX Live is not directed at children under 13 and we do not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.
Contact
Questions or requests: romangarms@gmail.com