Legal
Privacy Policy
Last updated: September 2026
This Privacy Policy explains how LetsRace (“LetsRace”, “we”, “us”, “our”) collects, uses and protects personal data when you use our website and app.
The data controller is Lukasz Andrzej Kordowicz, trading as LetsRace (contact: office@lrace.pro). As controller, we determine how and why your personal data is processed.
1. Account data
- Username
- Avatar
- Plan
- Subscription status
2. Precise location
- Latitude and longitude
- Altitude where available
- Heading
- Speed
- Accuracy
- Timestamps
LetsRace may process precise location data during navigation, route recording, timed runs, checkpoint verification, speed measurement and telemetry.
Location permission is required for certain features. You can control location permissions at any time through your device settings.
3. Route data
- Start
- Finish
- Checkpoints
- Route geometry
- Route distance
- Route creator
4. Run data
- Start time
- Finish time
- Final time
- Checkpoint splits
- Ranking
- Personal best
5. Telemetry
- GPS samples
- Live speed
- Average speed
- Top speed
- Route progress
- GPS accuracy
- Signal quality
- Abnormal GPS events
6. Private race data
- Race creator
- Invited participants
- Route
- Date and time
- Invite code
- Results
- Race status
7. Payment-related data
- Plan
- Subscription status
- Payment status
- Transaction identifiers
- Activation fee status
- Private race fee status
8. Technical data
- Device
- Operating system
- App version
- IP address
- Crash logs
- Diagnostics
- Security logs
9. Purposes
- Providing routes
- Recording runs and calculating times
- Live telemetry
- Rankings
- Subscriptions
- Private races
- Fraud prevention and anti-cheat
- Security
- Technical support
- Legal compliance
10. Telemetry retention
Detailed GPS and telemetry data is intended to be kept for approximately 30 days. After that, we keep only reduced data where appropriate:
- Final time
- Checkpoint splits
- Average speed
- Top speed
- Ranking
- Route
- Run date
Longer retention may apply where legal or technical requirements make it necessary.
11. Public data
Public rankings may display your username, route, final time and ranking position. Detailed telemetry does not automatically become public.
12. Private race privacy
Private race information does not appear publicly. It is available only to the creator, invited participants and authorized users.
13. Security
- Encrypted connections
- Access controls
- Restricted admin access
- Authentication
- Monitoring and logging
- Backups
- Other security measures
No online service can guarantee absolute security.
14. Your rights
Depending on where you live, you may have the right to:
- Access your data
- Correct your data
- Delete your data
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent
- Complain to a regulator
- Request review of certain automated decisions
15. Regional addenda
EU / EEA — Under the GDPR you have the rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and the right to lodge a complaint with your local supervisory authority.
United Kingdom — Under the UK GDPR you have equivalent rights and may complain to the Information Commissioner’s Office.
California — Under the CCPA/CPRA you have the right to know, access, delete and correct personal information and to opt out of sale or sharing where applicable. Precise geolocation is sensitive personal information; you may limit its use where applicable.
United States — Residents of other states may have additional rights under their state laws.
Brazil — Under the LGPD you have the rights of confirmation, access, correction, anonymization, portability, deletion, information about sharing and revocation of consent.
United Arab Emirates — LetsRace consumer services are currently not offered or made available for use within the United Arab Emirates. Limited technical information may be processed to determine regional availability. This does not remove any legal obligations that may still apply.
Other countries — Where local law provides stronger mandatory rights, those rights apply.
16. Account deletion
When you delete your account, eligible personal data is deleted or anonymized. Financial, security and legal records may be retained where required. Public leaderboard results may be anonymized rather than removed.
17. Cookies and local storage
We use cookies, localStorage, session storage and similar technologies. Non-essential technologies are used only with consent where legally required. See our Cookie Policy.
18. Third-party providers
We may use third-party providers for hosting, authentication, payments, mapping, analytics, communications, security and infrastructure.
Payments: our order process is conducted by our online reseller Paddle.com, which acts as Merchant of Record for all our orders. Paddle receives and processes the personal data needed to complete your purchase, manage subscriptions, process payments, handle tax compliance and invoicing, and deal with returns and customer service inquiries. Paddle's handling of your data is described in Paddle's Buyer Terms and privacy documentation at paddle.com.
We may also share data with professional advisers (legal, accounting) and with authorities where required by law.
19. International transfers
Data may be processed in multiple countries. Where required, legally recognised transfer safeguards will be used.
Operator details
The operator and seller of LetsRace is Lukasz Andrzej Kordowicz, trading as LetsRace. By using the service you contract with Lukasz Andrzej Kordowicz.
Contact: office@lrace.pro
