Privacy Policy

Effective date: June 11, 2026 · Last updated: October 12, 2026

RACEMEASURE LLC, a Florida, USA company, develops and operates G-Box Lap Timer and the G-Box product for track days, lap timing, GPS telemetry, race analysis, and optional onboard video recording.

Data the App Uses

G-Box may process:

How Data Is Used

Data is used to operate the app: recording sessions, calculating laps, displaying maps and charts, saving telemetry, managing local sessions, recording video, and uploading selected materials for server-side processing.

If you create an account and publish a leaderboard lap, RACEMEASURE LLC may display the submitted driver name, car, track, lap time, class, power estimate, source, and data quality information so other users can view rankings.

Storage and Uploads

Session data is stored on the device. Video and telemetry are uploaded only when the user starts an upload or processing action. Uploaded data may be processed on the G-Box server to create or manage session results and video.

Browser leaderboard calculation can be used without registration. Publishing to the online leaderboard requires an account and consent to this Privacy Policy and the Terms of Service.

Sharing Sessions Through the G-Box Server

Session sharing is optional. Nothing is uploaded unless you choose Send to G-Box server for a session or a lap. G-Box then uploads a session package: lap times and telemetry, including the GPS route with precise coordinates, OBD and motion data, the track, driver and car names shown in the session and, only if you choose With video, the recorded video with its audio.

You choose who can see it. A private link can be opened by anyone you send it to and is not listed in the app. A public session is listed in the app for its track together with the driver and car names, lap time and date, and any G-Box user can download it. No account, email address or phone number is required: each phone uses a random identifier, which the server stores only as a hash so that users can hide a driver. A hash of the network address is stored with each upload and report to limit abuse.

Shared packages are stored in DigitalOcean Spaces in Amsterdam, Netherlands, and delivered through the G-Box server and, for users in Russia, our Russian application edge. Sessions are deleted automatically 360 days after upload, and unfinished uploads after 48 hours. The phone that sent a session keeps its delete key, so you can remove the session from the server at any time under LOAD → From G-Box server → My uploads. Public sessions reported by several users are hidden until reviewed. Shared sessions are used only to deliver them to the people you share them with, never for advertising or tracking.

Native Android Publication and Content Safety

Android-specific clarification, October 13, 2026. For publication from the native G-Box Android app, this section clarifies the account requirements described above. You do not need a G-Box account, email address or password to submit a leaderboard result or share a session from Android. Website registration is a separate service. Random installation identifiers and private ownership tokens support upload ownership and deletion; they are not a user-facing login account or advertising identity.

When you confirm a leaderboard submission, Android sends the displayed driver name, car, result information and available source telemetry to the G-Box leaderboard services. Published results are visible to other users. When sharing a session, you choose public or private-link access and whether to include video and its audio. Other users can download a shared package, import it into their session library and open compatible included video when video access is available in the app. A private link is unlisted, but anyone who obtains the link can download the package; access is not limited to named recipients.

The Android Safety screen lets you report shared sessions, leaderboard results and their uploader or public driver identity. A shared-session report identifies the selected session and, for an uploader report, its public uploader identifier, and sends the selected reason and any short comment you enter. The session-sharing service records the report time and a hash derived from the request's network address to limit duplicate reports and abuse. Reported shared content may become unavailable under that service's existing moderation process.

An Android leaderboard or AI-response report sends a report identifier, the selected result, public driver or AI-response identifier, any supporting result identifier and display label, the reason, your optional short comment, the app version and a random reporting-installation identifier separate from your AI-credit wallet. The report service uses keyed hashes of that installation identifier and the request's network address for abuse prevention, rather than storing the raw installation identifier or address in its report database. It keeps the report fields, creation/update times, review status and any moderation note for handling the complaint. These Android reports become eligible for removal after 90 days. Cleanup takes place when report or moderation requests are processed, so older records may remain until the next cleanup and removal is not guaranteed at the exact expiry time. This separate report route does not automatically delete results or ban users globally. Its retention rule does not replace the existing shared-session report process.

You can report a selected AI analysis or AI Help response from within the Android app. The report identifies the selected response using its job, request or local-result identifier. You may separately choose to include a displayed excerpt of up to 500 characters; the excerpt is not attached by default. The confirmation shows the information to be sent. Reporting does not automatically attach the full conversation, telemetry files, GPS route, video, audio or contact details, and does not require a new AI analysis request.

Reports are used for content review and abuse prevention. Do not include ownership tokens, purchase tokens, device activation codes or unnecessary personal information in a report.

You can also block a session uploader or a leaderboard driver and review or remove individual blocks, or clear all blocks, in Safety. The Android app stores the block type, public identity, display label, known session or result identifiers and block time in its local app data. Session-uploader and leaderboard-driver identities are separate and are not automatically combined. A leaderboard driver identity is derived from the displayed name, not a verified account, so names that normalize to the same identity can be covered by the same block. Blocks hide matching entries from your remote-session or leaderboard lists; session blocks also prevent opening or downloading matching shared-session links in that installation. Blocks are not sent to the G-Box server, do not remove content for other people and do not delete files you already imported.

Before sharing a session publicly or by private link, or submitting a leaderboard result, Android asks you to accept the current sharing rules and Terms and acknowledge this Privacy Policy. The app records the accepted rules version and the time of your explicit acceptance locally; it does not send this acceptance record to the G-Box server or create an account. A changed required version asks you again. Acceptance alone does not upload content, and cancelling the confirmation stops the pending publication action. This acceptance is separate from AI data-sharing and optional analytics choices.

You can remove your own shared uploads under LOAD → From G-Box server → My uploads. This stops new downloads from the service but cannot erase copies other people already downloaded. For questions about a report or a request concerning server-held data, contact support@racemeasureapp.com and identify the relevant session without sending private ownership or purchase credentials. The other storage, deletion and contact provisions in this Policy continue to apply.

Optional AI Driving Coach

AI Driving Coach is optional. Data is sent only after you select a lap, request AI analysis, and explicitly allow data sharing. Declining or withdrawing consent does not affect local sessions, maps, charts, or video.

For a requested analysis, G-Box sends the selected lap's telemetry, including precise GPS coordinates, speed, motion and acceleration data, lap and session measurements, and the track name to the G-Box server operated by RACEMEASURE LLC. These data are used to prepare the requested coaching report and manage the related AI-credit transaction.

Before an external AI request is made, G-Box removes precise GPS coordinates, the track name, and internal session identifiers. Depending on the selected provider, processed lap-relative telemetry and calculated driving metrics are then sent to OpenAI or Anthropic solely to generate the requested report. AI Driving Coach does not send video, audio, driver name, email address, or precise location to an external AI provider.

RACEMEASURE LLC requires service providers that receive user data to protect it to the same or an equivalent level as described in this Policy, to use it only to provide the requested service, and not to sell it.

AI Storage and Retention

Precise GPS coordinates and the track name are processed transiently by the G-Box server and are not retained after the request is completed. The generated report, pseudonymous AI-credit wallet identifier, AI request identifier, credit balance and ledger, and App Store or Google Play purchase and product verification records may be retained as needed to preserve purchased credits, replay a completed report without charging twice, process refunds, prevent fraud, provide support, and meet accounting or legal obligations. RACEMEASURE LLC does not receive payment-card details from Apple or Google. Google Play subscription purchase tokens are stored encrypted to verify renewals, and a purchase-token hash is used to prevent duplicate delivery. Restoring Pro access on another installation does not move or recreate previously purchased AI credits in a different wallet.

OpenAI API requests are sent with store: false. OpenAI or Anthropic may temporarily retain processed telemetry and generated responses for up to 30 days under the standard API retention practices applicable to the selected service and account, including for safety or abuse monitoring. If a shorter retention period or zero-retention arrangement applies, that shorter period governs; data may be kept longer only when required by law or necessary to investigate abuse. Reports cached on the device remain until the app's local data is removed.

Server diagnostics may retain the sanitized AI request, lap-relative telemetry, calculated metrics, generated response, error information and, for AI Help, the question and conversation context you submit. These records support troubleshooting and service reliability. Diagnostic logs rotate by the number of newer records rather than a fixed number of days; older entries can remain until replaced or removed following an applicable deletion request. This diagnostic retention is separate from the transient processing of precise GPS coordinates described above.

Android Maps, Device Data and Purchases

The Android app uses Google Maps to display maps. The Maps SDK can send device and operating-system metadata, IP addresses, a Maps-specific pseudonymous identifier, SDK crash information and map interactions such as panning and zooming to Google. Google uses this information to operate and improve its services. These SDK data flows are separate from G-Box's optional first-party usage analytics. See Google Maps SDK data disclosure and Google's Privacy Policy.

Google Play handles Android purchase checkout. G-Box sends the product identifier, purchase token and a pseudonymous AI-credit wallet identifier to its server to verify a purchase with Google, deliver the applicable access and credits, and prevent fraud or duplicate delivery. The wallet identifier is not an advertising identifier. A support email draft can include the Android device model, operating-system version and app version; you choose whether to send it in your email app.

AI Consent, Withdrawal, and Deletion

On iPhone, you may withdraw consent from the AI Coach screen by opening DATA SHARING and selecting Revoke Consent; this prevents new AI uploads. On Android, the app asks you to confirm before sending each AI analysis request, and you can cancel that confirmation to keep the request local. Stopping future uploads does not reverse a completed request and does not automatically delete an existing report or server diagnostic record.

To request access, correction, or deletion of server-side AI request or report data, email support@racemeasureapp.com and include the AI Support ID if shown in your app and the approximate request date. If available, you may also include the related App Store transaction or Google Play order identifier. Do not send a Google purchase token or a device activation code in a support email. Eligible data will be removed from active systems. Purchase, credit-ledger, fraud-prevention, security, accounting, or legal records may be retained where necessary or required by law.

G-Box Hardware Order Requests

When you submit a G-Box hardware order request, RACEMEASURE LLC collects the name, email address, optional phone number, quantity, shipping address, optional order notes, and consent record entered in the form. This information is used to review availability, calculate shipping and applicable taxes, contact you, arrange payment, fulfill the order, provide support, and maintain business records required by law.

Order requests are saved in protected server storage and sent to the RACEMEASURE LLC support mailbox. Order information is retained for fulfillment, customer support, fraud prevention, accounting, and legal obligations. You may request access, correction, or deletion by contacting support, subject to records we must retain by law.

Website Analytics

This website uses Cloudflare Web Analytics to measure aggregate page views and website performance. According to Cloudflare, this service does not use cookies or local storage, does not track individual visitors, and does not collect or use visitors' personal data. Learn more in the Cloudflare Web Analytics documentation and Cloudflare Privacy Policy.

Data Sharing

G-Box does not sell personal data. Data may be processed by hosting and server infrastructure used for upload, processing, and hardware order features. The data flow and service providers used for optional AI analysis are described in Optional AI Driving Coach. After you approve an order, only the information needed to complete payment or delivery may be shared with the applicable payment, shipping, or fulfillment provider. Sessions you share through the G-Box server are available to anyone with the link or, if you make them public, to all G-Box users, as described in Sharing Sessions Through the G-Box Server. Data may also be disclosed when required by law.

Security

Local data is stored in the device storage available to the app. In public production releases, video, telemetry, AI analysis, purchase-verification, and status requests are transmitted over HTTPS/TLS.

Deletion

Users can delete local sessions, telemetry, and video in the app when those controls are available. Sessions you shared through the G-Box server can be removed in the app under My uploads and are deleted automatically after 360 days. To request deletion of other data uploaded to the server or submitted with a hardware order request, contact support. Some transaction records may be retained when required for accounting, fraud prevention, warranty, or legal compliance.

Children

G-Box is intended for track day, training, and motorsport users. The app is not directed to children.

Contact

RACEMEASURE LLC
8380 NW 25TH CT, Sunrise, FL 33322, United States

Email: support@racemeasureapp.com

Phone: +1 954 459 3962

Optional app usage analytics

G-Box asks for your permission before sending product usage analytics. You can decline without losing any app features, or turn sharing off later in Settings → Privacy. Turning it off stops collection and sending and clears unsent events from your phone.

On iPhone, with permission, we collect the names of visited screens and selected actions, recording/import/export outcomes, chosen overlay template, export duration, app and OS versions and iPhone model. Each app visit has a random session token. From app version 2.7.1, each installation also has a random analytics ID, so we can count unique users; it is created only after you allow sharing, is not derived from your device or linked to your profile or account, and is deleted from your phone when you turn sharing off. We do not use an advertising identifier. These records are not linked to your profile or account. We do not include names, typed text, routes, coordinates, driving telemetry, photos or video in these events.

Events are sent directly over HTTPS to our DigitalOcean server in Amsterdam, Netherlands, and are not routed through our Russian application edge. This endpoint does not retain client IP addresses in its application or web access logs. Product events are retained for up to 30 days; an offline queue on your phone is limited to 300 events and seven days. We use these statistics only to understand app usage, failures and export performance, not for advertising or tracking across other companies’ apps and websites. The reports are available only to authorized administrators.

Already received events expire automatically within 30 days. No additional permissions, registration or advertising tracking consent is required for this optional first-party feature.

In the current Android release, first-party usage event uploading is disabled. If you allow usage analytics, a local buffer may record screen/action events, app and Android versions, device model and a random visit identifier; it is limited to 300 events and seven days and is cleared when you withdraw permission. These local events are not currently sent to G-Box. This does not disable Google Maps SDK processing described above.