Privacy Policy

SetPurple ("we," "us," or "our") is a mobile-first racing intelligence app for kart racers. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the SetPurple app or website (collectively, the "Service"), you agree to this policy.

1. Information We Collect

Account information. When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Apple or Google, we receive limited profile information from those providers in accordance with their privacy policies.

Session and telemetry data. When you connect your AiM MyChron data logger, the app downloads your session files directly from the device over your local WiFi network. Your raw session files (.xrk) are processed on your device; only structured, derived data (corner metrics, lap times, GPS coordinates, speed traces, and related performance data) is uploaded to our servers, hosted on Amazon Web Services (AWS). Raw binary session files are never transmitted to SetPurple.

Setup and driver notes. Any session notes, setup changes, or observations you enter in the app are stored on our servers and used to provide personalized insights.

Location data. Your phone's location is never collected, logged, or transmitted by SetPurple. GPS data in your sessions is telemetry recorded by the MyChron device during your race — it comes from the logger, not your phone's GPS chip. This data is used to identify the track and to fetch contextual weather information for that session.

To communicate with your MyChron over WiFi, the app requests the following system permissions depending on your device:

• iOS — Location When In Use: iOS requires this as a system precondition to join the MyChron's WiFi network. The location value is never read, stored, or transmitted. This is "When In Use" only — never "Always" or background.
• Android 13 and later — Nearby Devices: The modern Android permission for connecting to nearby WiFi accessories. It carries no location wording and is explicitly flagged as never used for location.
• Android 10–12 — Location While Using the App: A legacy OS requirement for joining a WiFi network on older Android versions. The location value is never read, stored, or transmitted.

No background location or background network access is requested or used on any platform.

Device and usage data. We collect standard device identifiers, operating system version, app version, and crash reports to diagnose issues and improve the Service.

Communications. If you contact us for support, we retain that correspondence.

2. How We Use Your Information

• To generate session insight summaries and corner-level analysis.
• To compare your sessions over time and provide contextual feedback and insights.
• To fetch weather data for the location and time of each session.
• To maintain your account and authenticate your identity.
• To improve the accuracy of corner detection and track maps.
• To operate, maintain, and improve the Service.
• To respond to your support requests.
• To comply with legal obligations.

We use the Anthropic Claude API to generate plain-language insights from your structured session data. Structured session metrics (not raw files) are sent to Anthropic's API for this purpose. Anthropic's use of data submitted via API is governed by Anthropic's Privacy Policy.

3. Data Sharing

We do not sell your personal information. We do not share your data with third parties for their own marketing purposes. We share data only as follows:

• Service providers. We use third-party vendors to operate the Service, including Amazon Web Services (AWS) for cloud hosting and data storage, as well as weather APIs and analytics providers. These vendors process data only on our behalf and under our instructions.
• AI processing. Structured session metrics are sent to Anthropic's API to generate insights. See Section 2 above.
• Sharing you initiate. If you choose to share a session or lap with another user, that user will be able to view a browser-rendered version of the shared content. Raw telemetry data is never made available for download by other users.
• Community benchmarks (opt-in). If you explicitly opt in to public sharing, aggregate and anonymized metrics from your sessions may contribute to community benchmark data visible to other SetPurple users. You can withdraw this consent at any time in Settings.
• Legal requirements. We may disclose information if required by law, court order, or to protect the safety of our users or the public.
• Business transfers. If SetPurple is acquired or merged, your data may transfer to the successor entity, subject to equivalent privacy protections.

4. Data Retention

We retain your account data and session data for as long as your account is active. If you delete your account, we will delete your personal information and session data within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as fraud prevention). Anonymized, aggregated data that cannot identify you may be retained indefinitely for product improvement.

5. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time (such as opting out of public benchmarks).

To exercise any of these rights, contact us at support@setpurple.com. We will respond within 30 days. We do not discriminate against users who exercise their privacy rights.

6. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly. Users between 13 and 18 should use the Service only with parental or guardian consent.

7. Security

We use industry-standard technical and organizational measures to protect your data, including encrypted transmission (TLS), encrypted storage, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable steps to protect your information.

8. Third-Party Services

The Service may integrate with or link to third-party services (such as Apple Sign-In, Google Sign-In, and weather data providers). This policy does not cover those services. We encourage you to review the privacy policies of any third-party services you use in connection with SetPurple.

9. International Data Transfers

SetPurple is operated in the United States. If you use the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure your data receives an adequate level of protection wherever it is processed.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell; the right to delete your personal information; the right to opt out of the sale of personal information (we do not sell personal information); and the right to non-discrimination. To make a request, contact us at support@setpurple.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top and, where appropriate, by in-app notification or email. Continued use of the Service after any update constitutes acceptance of the revised policy.