Privacy Policy

Effective date: 7 August 2026

This policy explains how the MADAY Racing mobile app handles your information. The app is published by MADAY Racing Ltd (“we”, “us”).

Short version

The app runs on your phone and everything you enter — gear setups, weather points, notes — is stored on your device. We hold no user accounts of our own and we never sell or share your personal data.

Two features send data off the phone, and both are described in full below:

  • Weather. Your location is sent to a weather service to fetch local conditions.
  • TEAM. When you open a team session, your data is shared through our cloud with the mechanics you invite. It is encrypted on your phone before it leaves, with a key that only travels inside the QR code you show them — so the server stores unreadable ciphertext, and we cannot read it.

What the app stores on your device

  • Your settings, preferences, gear setups, saved weather points and notes, saved locally using standard Android/iOS storage.
  • A subscription status flag, stored locally so the app knows your subscription is active. MADAY Racing is a paid app on both platforms; there is no free tier.
  • If you have unlocked the app with an activation code: the e-mail address from your Apple or Google sign-in, and the date the code runs out. Both stay on your phone (see Activation codes below).
  • If you have used TEAM: an anonymous identifier issued by our cloud provider, so the session can tell one participant from another. It is not linked to your name, e-mail or phone number.

You can clear all of it at any time by uninstalling the app or clearing app data in your phone settings.

Backup of your own data

The app can keep a backup of your data in your own cloud account — iCloud on iPhone and iPad, Google Drive on Android — so it survives changing or losing your phone. The backup is encrypted on your device before it is uploaded and is stored in your personal account, not ours. We have no access to it and no copy of it. You control it entirely through your Apple or Google account.

TEAM sessions

TEAM lets you share your live data with up to two mechanics while you are working together.

  • Nothing is shared until you create a team. Outside a live session the app sends none of your data to our cloud.
  • While a session is open, the following is stored in our cloud (Supabase, servers in the EU): your saved weather points and setups, the live values everyone is looking at (weather readings, the place name and which point is your reference), and the list of members with the names they type for themselves. A running count of screen-capture ATTEMPTS is kept alongside each member, so you can see it. No image of your data is ever produced — the capture itself is blocked (see Screenshots below).
  • All of it is encrypted on the phone before it is sent. The key is generated for that one session and travels only inside the QR code you show your mechanics. It is never sent to the server. Neither we, nor our cloud provider, nor anyone who obtained the stored data could read it.
  • The session also records plain timestamps of when each part last changed. These contain none of your data.
  • When you end the session, the record is deleted from the cloud and the session data is erased from the mechanics’ phones. What was created during the session stays with you, on your phone and in your own backup. Removing a mechanic from the team cuts their access immediately and erases the session data from their phone in the same way.
  • A mechanic who joins by scanning your code gets access to that session only. They never gain access to the app itself, and they can only delete points that were created during the session — never your history.

Location

The Power module uses your location to fetch local weather for the track you are at. Your coordinates are sent to a weather service (Open-Meteo) and, to show the place name, to your phone’s map service. These lookups are not linked to your identity and we never receive or store your location. In a team session the location used is always the rider’s, never the mechanics’.

You can refuse the location permission and still use the rest of the app, and you can type the weather values in by hand.

Camera

The camera is used for one thing only: scanning the QR code that joins a team session, and the code of a MADAY weather station. No photographs are taken, stored or sent anywhere.

Screenshots in a team session

A rider’s setup data is their livelihood, so while a phone is working as a mechanic in your team, screen capture is blocked on that phone. On both iPhone and Android the resulting image is blank, and screen recording is blocked as well.

On iPhone the app is additionally told that a capture was attempted. When that happens the mechanic is reminded the data is not theirs to keep, and you are told somebody tried, so you can decide whether that person stays in your team. Only attempts made while this app is on screen are counted, and no image of your data is ever produced.

Weather station

If you pair a MADAY weather station, it talks to your phone over Bluetooth. Its readings are handled like any other weather values in the app — and, in a team session, shared with your team the same way.

Payments and subscriptions

MADAY Racing is sold as an in-app subscription through the Apple App Store (iPhone and iPad) and Google Play (Android). Apple or Google processes the payment and tells the app whether your subscription is active. We never see your card details. See Apple’s and Google’s own privacy policies for how they handle that information.

Activation codes and signing in

An annual plan bought outside the app is unlocked with an activation code. Because a code is issued to one person, the app asks you to sign in once with Apple or Google so it can confirm the code was issued to you.

  • The only thing taken from that sign-in is your e-mail address, and it is used for that one purpose.
  • The check runs entirely on your phone, against a key built into the app. There is no server and no request over the internet.
  • Your e-mail address and the date the code runs out are stored on your device only. We never receive either of them.
  • If you subscribe through the App Store or Google Play instead, no sign-in is asked for and no e-mail address is involved at all.

Who else is involved

  • Supabase — hosts the cloud used by TEAM sessions (EU region). It stores only encrypted data it cannot read.
  • Open-Meteo — provides the weather readings for the coordinates sent to it.
  • Apple / Google — handle payments, confirm your e-mail address when you redeem an activation code, and host your own backup in your own account.

We do not use advertising, analytics or tracking of any kind.

Keeping your data — and the limits of what we can promise

We have built this app to protect your data as well as we know how: everything is encrypted before it leaves your phone, team sessions are deleted when they end, and your backup lives in your own cloud account where only you control it.

Even so, no software and no phone is perfect. Devices are lost, damaged and wiped; cloud accounts get closed or run out of space; operating systems change; connections drop mid-save; and any program can contain a fault. The app is provided “as is”, and to the fullest extent permitted by law we accept no liability for any loss, corruption or unavailability of your data, or for any loss of time, results, earnings or opportunity arising from it. Your data is your responsibility: keep your own copies of anything you cannot afford to lose, and check that your backup is switched on.

Nothing here limits any liability that cannot be limited or excluded by law.

If you do not accept this, please do not use the app.

Children

The app is intended for adult speedway riders, mechanics and team staff. It is not directed at children under 13.

Your rights (UK GDPR)

Outside a live team session we hold nothing of yours on our side. During a session we hold only ciphertext we cannot read, and it is deleted when the session ends. If you want everything wiped, end any open team session, then uninstall the app or clear app data in your phone settings; to remove the backup, delete it in your own iCloud or Google Drive account.

Changes

If we ever change how the app handles data, we will update this page and the effective date above before the change ships.

Contact

Questions about this policy: office@maday-racing.co.uk

MADAY Racing

Unit C5, Lincoln Park
Buckingham Industrial Estate
Borough Road
Brackley, NN13 7BE