TrackByte Privacy Policy
Last updated: 16 September 2026
TrackByte is made by KraftByte. It turns your iPhone into a lap timer, data logger, video recorder and post-session driving coach. This policy explains what TrackByte reads, what stays on your phone, what reaches our servers, and what you can do about it.
The short version
- Your sessions are private by default. Sharing is something you do explicitly, one session at a time.
- Location, video and audio never leave your phone. TrackByte reads them constantly while you drive and uploads none of them.
- Nothing in TrackByte tracks you across other apps or websites, and nothing in it is used for advertising.
- Delete means delete: deleting your account removes everything we hold about you, including backup copies.
What TrackByte reads on your phone
TrackByte asks iOS for these permissions. Each is used only for what is stated.
| Permission | Why |
|---|---|
| Location (including in the background) | To recognise which circuit you are at and to time your laps, including with the screen locked in your pocket. |
| Motion | To keep lap timing accurate between GPS fixes. |
| Camera | To record session video, when you choose to mount the phone. |
| Microphone | To record the sound in your session video, so you can hear the car when you review a lap. The sound is stored with the video on the phone and is not sent to KraftByte. |
| Bluetooth | To connect to an external GPS receiver you have paired. |
All of this is processed on the phone. Positions, video and audio are stored on the phone and are not sent to KraftByte.
What TrackByte reads on your Apple Watch
If you use the Apple Watch companion, and only if you turn it on, TrackByte reads heart rate and wrist motion during a session.
- Wrist motion is used as a steering-input proxy and is cross-checked against the car’s motion. It is never uploaded.
- Heart rate is used to show which corners work you hardest and how your composure holds across a stint. It is coaching, not health advice.
- Heart-rate data stays on your phone unless you also turn on “Back up to my account”, a separate switch. If you do, your heart-rate trace for each session is stored against your account so it survives a change of phone. It is visible only to you, is never shown on leaderboards or in shared sessions, and is never used for advertising.
- Turning either switch off stops future collection and stops previously recorded sessions being analysed.
TrackByte reads your heart rate from Apple Health and writes nothing back: no workout is saved and no Health record is created. TrackByte does not store your Apple Health data on our servers.
What reaches our servers
You can use TrackByte’s timer, coach, video and history without an account. Nothing is uploaded until you sign in.
If you sign in (with Apple or Google), TrackByte stores on our servers:
- Your email address and an account identifier, from the sign-in provider, so you can find your account and we can tell yours from others.
- Your name, only if you switch on “show my real name”. It is off by default; otherwise other drivers see a handle you choose.
- Your garage: the cars you add.
- Your sessions and laps: dates, circuit, car, lap and sector times, and the session digest the coach produced. Not the position trace, video or audio, and not the shape of a circuit you mapped yourself. Every session is stored as private to you unless you share it, so signing in backs them up without making any of them visible to anyone else.
- What you post to clubs and the feed: comments, join requests and messages, who you follow, and any reports or blocks you make.
- Your heart-rate traces, only under “Back up to my account”, as above.
We use this to sync your history between your devices, to run clubs, leaderboards and the feed, and to produce your post-session debrief. We do not sell it, do not share it with advertisers, and do not use it to build a profile of you for any purpose other than showing you your own driving.
Our servers are hosted by Supabase in Mumbai, India (AWS ap-south-1).
What stays on your phone
Video, sound, the position trace behind a replay and circuits you map yourself are never uploaded. TrackByte also keeps a short log on the phone of which screens and buttons were used, with a random number made on the phone and no account, location or lap data in it, so the app can be improved. That log is not sent anywhere, and it is removed when you delete the app.
Sharing and leaderboards
Every session is private when it is recorded. You can share a session with friends, with a club, or publicly, and you can change or withdraw that at any time. Leaderboard entries carry your handle, your car class, your tyre category and the timing source used — and nothing about your heart rate.
Reporting and blocking
You can report any comment or message, and block any driver. A report sends the item and its author to us for review; objectionable content is removed within 24 hours. Blocking hides that driver’s posts, comments and messages from you and stops them commenting on your sessions. The driver is not told.
Deleting your data
- Delete a session in the app to remove it from your phone and, if it was synced, from our servers.
- Delete your account from the sign-in screen. This removes your account, garage, sessions, laps, posts, club memberships and any heart-rate backups from our servers immediately. You can choose to erase the phone’s local copy at the same time. There is no retention period and no soft delete.
Children
TrackByte is for licensed drivers on closed circuits and is not directed at children under 13.
Changes
If this policy changes in a way that affects what is collected or how it is used, the app will tell you before the change takes effect.
This website
trackbyte.app is separate from the app and collects much less.
- Analytics. Cloudflare Web Analytics counts page visits without cookies and without collecting anything that identifies you.
- Backups. Our database is backed up every night and backups are kept for 14 days, so anything deleted from TrackByte leaves the backups within 14 days.
Contact
KraftByte. For anything about your personal data, email connect@kraftbyte.com. For other questions, open an issue at https://github.com/kraftbyte/trackbyte-legal/issues — issues are public, so do not put personal details in one.