Privacy
Policy.

Pitbox is a real-time sim racing companion app for iPhone, developed and operated by Pitbox Racing Ltd, registered in England and Wales, headquartered in London, United Kingdom.

Pitbox is available to users in the United Kingdom and the European Union. This policy complies with both UK GDPR and EU GDPR as applicable to your region.

By using the App, you agree to the practices described here. If you do not agree, please discontinue use of the App.

Pitbox receives data broadcast by your sim racing game over your local Wi-Fi network via UDP. The App processes this data in real time to power your driver dashboard. During an active session, telemetry data is stored locally on your device only. When a session ends, anonymised telemetry data — linked solely to a random identifier, never to your identity — is uploaded to our secure servers to power app features and improvements. This data contains no personally identifiable information.

In addition, we collect anonymous, non-identifiable data to help us understand how the App is used and to improve the experience for all users:

• Crash reports — automatically collected via Firebase Crashlytics when the App crashes. These contain technical diagnostic information (device model, iOS version, app version, stack trace) but no personal information.
• Anonymous usage data — aggregated, non-identifiable data about how features are used, collected to help us prioritise improvements and deliver better experiences. This data cannot be traced back to you individually.

Game data received via UDP is used to power the App's real-time dashboard and, once a session ends, is uploaded in anonymised form to improve features across the platform. It is never used to identify you individually.

Anonymous data we collect is used to:

• Diagnose and fix crashes quickly so the App remains stable
• Understand which features are most valuable to drivers
• Inform decisions about new features and improvements
• Monitor overall App health and performance

We do not use any data for advertising, profiling, or any commercial purpose beyond building a better product.

Pitbox uses the following third-party services. Each operates under its own privacy policy and data processing terms:

• Firebase Crashlytics (Google) — crash reporting and diagnostics. Data is anonymised and used solely to identify and fix technical issues. Firebase Privacy Policy →
• Firebase Firestore (Google) — stores anonymous, non-identifiable session metadata and app state. No personal information is stored. Firebase Privacy Policy →
• Firebase Storage (Google) — stores anonymised session telemetry data linked only to a random identifier. No personal information is stored. Firebase Privacy Policy →
• RevenueCat — manages in-app subscriptions and purchase validation. RevenueCat may process transaction data such as purchase history and subscription status to verify entitlements. No payment card data is handled by RevenueCat directly. RevenueCat Privacy Policy →

Firebase services are operated by Google LLC and may process data in the United States. RevenueCat Inc. is based in the United States. Where required, appropriate safeguards under UK GDPR and EU GDPR — including Standard Contractual Clauses — are in place.

We do not sell, rent, or share personally identifiable data with third parties.

Anonymous diagnostic and usage data is shared with Firebase (Google) as described above. Beyond this, data may be disclosed only in the following circumstances:

• Legal obligation — where required by law, court order, or regulatory authority
• Business transfers — in the event of a merger or acquisition, you will be notified before any data transfer occurs

During an active session, telemetry data is held locally on your device only. Once a session ends and data is uploaded, anonymised telemetry is retained on our servers for as long as it is needed to power app features and improvements. Because this data is linked only to a random identifier and cannot be traced back to you, erasure requests for telemetry data cannot be fulfilled on a per-user basis.

Anonymous crash and usage data held by Firebase is retained in accordance with Google's standard retention policies, typically no longer than 90 days for crash reports.

If you contact us for support and share personal information such as your email address, we retain that correspondence for up to 24 months, after which it is deleted.

Depending on your location, you have rights under UK GDPR (if you are in the United Kingdom) or EU GDPR (if you are in the European Union). These include the right to:

• Access — request a copy of personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests

Because the App does not collect personally identifiable data, most of these rights apply primarily to any personal information you have shared with us directly (such as support emails). To exercise any right, contact us at the address below.

UK users may lodge a complaint with the Information Commissioner's Office (ICO).
EU users may contact the data protection authority in their EU member state.

Pitbox is not directed at children under 13 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the date above and, where changes are significant, notify you via the App. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

For privacy questions or to exercise your data rights:

• Company  Pitbox Racing Ltd
• Registered in  England & Wales
• Location  London, United Kingdom
• Email  soufiane@pitboxapp.com
• Website  pitboxapp.com

We aim to respond to all privacy enquiries within 30 days.