POLICY
1. About us
TrailCore Radar is a GPS tracking application for athletes during races and sporting events. It is a free, amateur project, developed and maintained by a private individual on a personal basis, with no profit motive and no affiliation, sponsorship or collaboration with sports federations, event organisers, or public or private institutions.
Data controller for personal data processed through the TrailCore Radar platform and app: the maintainer of the TrailCore Radar project, reachable at [email protected].
GPS tracking is provided for informational and organisational purposes only. Location data is indicative and may be subject to inaccuracies due to environmental conditions, network coverage or device limitations. It does not constitute a certified emergency location system. In the event of a real emergency, always contact your local emergency services (eg. 112, 911, 120, 000, etc.). TrailCore Radar does not replace official rescue systems in any way.
The user is solely responsible for their own safety during sporting events, for assessing real conditions on the ground, and for complying with applicable regulations. Use of the application implies full acceptance of this limitation of liability.
2. Data collected
We collect only what is needed for tracking during an active session started by the user (coded race, organiser event, or free ride/training from the app):
- GPS location — latitude, longitude, altitude, speed, estimated accuracy and timestamp. Foreground and background while tracking is on.
- Battery level — sent with location to monitor device status.
- Name — from in-app profile / session join.
- Phone number — required in app to join a coded race; optional on some free rides if omitted. Sent to our server; visible to the organiser and authorised staff (not to generic spectators on the map). Used for SOS, alerts and organiser contact.
- Email — only if provided at join or in organiser pre-registration lists.
- Technical join data — device id, platform (iOS/Android), app/OS version, permission snapshot (diagnostics).
- Push tokens (FCM/APNs) — if notifications are allowed, for organiser/athlete alerts.
- SOS — type, optional message, location, optional geotagged photo and SOS status timeline.
Not sent to our server: optional emergency contacts (phones/email) saved in Settings stay on the device only for local calls or email by the athlete.
3. Purposes and recipients
- Show athlete position and status on the live map to the organiser, staff and spectators with the authorised code or link (phone number only to organiser/staff).
- Handle SOS and alerts (stopped, signal lost) via email and push to staff.
- Route statistics and event support.
We do not use data for ads or commercial profiling. We do not sell lists to third parties.
4. Background location
GPS is collected in the background, screen off or app not in foreground only while a tracking session started manually by the user is active.
This supports live position for the whole session (race or ride). A system notification shows tracking is active; the user can stop it in the app.
We do not collect background location outside an active session.
TrailCore Radar collects location data for real-time GPS tracking in the background for the duration of the sports session started by the user.
5. Retention and hosting
- GPS tracks — on the live map for the session; on automatic archive, history and GPS points are removed from the service (typically within 24 hours of the last update when all athletes have finished, or when a temporary/guest outing expires, or within about 20 days of event creation if it stays active). Technical ingest batches may be purged within 7 days.
- Name, phone and join metadata may remain linked to the event until the event is deleted or you request erasure at [email protected].
- Data is hosted in the European Union (Render.com, Ireland).
6. Event organisers
The organiser chooses whether to use TrailCore Radar and informs participants in their rules or communications, with a link to this policy. Pre-race lists (name, email, etc.) uploaded by the organiser remain the organiser's responsibility regarding lawful basis with their entrants.
We do not provide a standard processor agreement (DPA) for every event; for specific needs contact [email protected].
7. Technical providers
We use providers that process limited necessary data, e.g.:
- hosting (Render, EU);
- transactional email;
- push notifications (Google Firebase / Apple Push Notification service);
- SMS to race staff (only if configured by the organiser, e.g. Twilio).
We do not use advertising or behavioural analytics SDKs.
8. Your rights
Under the GDPR you may request:
- access, rectification or erasure of your data;
- restriction or objection where applicable;
- a complaint to your supervisory authority.
Contact: [email protected].
9. Security
App–server traffic uses HTTPS/WSS. Organiser access is authenticated; spectator maps use a code/link distributed by the organiser.