Privacy

In short

SnatchMyLap is published by UniKong Co., Ltd., a company registered in Thailand ("UniKong", "we").

• You can time laps without an account. Then your rides stay on your phone.
• If you sign in, your rides are saved to your account. Only a lap you choose to post goes on the public leaderboard.
• Group voice is live between riders and is not recorded.
• No advertising networks, no analytics or crash-reporting service in the app, and we do not sell your data.
• You can delete your account, and everything kept for it, inside the app.

What the app collects

• Precise location (GPS position, speed, heading)
  When: Only while a session is running, or while the Ride screen is open waiting for a GPS lock. On Android a notification, "Timing your laps", shows while it runs, and it keeps timing with the screen off. The app never asks for background location access.
  Where it goes: Stays on your phone as a ride file. If you are signed in, a real ride (not a practice run) also sends your position to the server about every 3 seconds so your active group sees you on its live map, and the finished ride, every GPS fix in it, is saved to your account. Practice runs are never sent.
• Lap times
  When: When you ride
  Where it goes: Worked out on your phone. When a ride is saved to your account, the server times it again with its own start/finish line.
• Sign-in details
  When: When you sign in
  Where it goes: With LINE: your LINE user ID, display name, profile picture and, if LINE shares it, email address. With email: your address and a one-time code we email you. Your sign-in token is kept in the phone's secure storage.
• Profile: racing name, photo
  When: When you set them
  Where it goes: Our server. Your photo comes from your camera or photo library only when you tap to add one. If you sign in with LINE, your LINE picture is copied in as your first photo.
• Garage: bike or car, brand, model, year, power, notes, photo, a sale link
  When: When you add them
  Where it goes: Our server.
• Friends and groups
  When: When you add friends, scan a friend's QR code, create or join a group
  Where it goes: Our server keeps who is friends with whom, group names and members. The camera is used only to scan the code; the picture is not kept.
• Voice (microphone)
  When: Only after you tap Join voice and allow the microphone. Once allowed, your rides join your group's voice by themselves; you can mute or leave.
  Where it goes: Sent live, phone to phone, to the members of your active group. If two phones cannot reach each other, our relay server passes the audio along. We do not record or store it. See "Voice and network addresses" below.
• RaceBox (Bluetooth)
  When: When you connect a RaceBox GPS unit
  Where it goes: Its position and speed are treated like phone GPS. Bluetooth is used only to find and talk to the RaceBox, not to locate you. The phone remembers the unit's Bluetooth ID on the phone only.
• Rides on your phone
  When: Always, until you delete them
  Where it goes: Stay in the app's private storage. Uninstalling the app removes them.

The leaderboard and 3D replay inside the app are our website shown in the app, so the website section below applies to them too.

What the website collects

• The same account, profile, garage and posted-lap details as the app, if you sign in on the site. On the profile page you may also add a LINE id, Facebook, Instagram, WhatsApp or X handle.
• Visits: a random ID kept in your browser, with the circuit you looked at, the filters you used and when you were shown the sign-in prompt. If you are signed in we link these to your account.
• Cookies: a sign-in cookie that lasts 30 days (only after you sign in), and a short sign-in cookie that lasts 15 minutes while you sign in with LINE, Facebook or Instagram. No advertising or tracking cookies.
• Other companies' servers: pages load fonts from Google, a 3D library from the unpkg content network, and satellite pictures from Esri (ArcGIS). Those companies see your network address and browser details when they send them.
• Forms: the demo-bike page only books a seat for your signed-in account. The advertise page has no form.

Why we use it

• To time your laps, review them and keep your rides.
• To run your account, the public leaderboard, friends, groups, live map and voice.
• To send you a sign-in code by email.
• To keep the service secure and working, and to see how the website is used.

We do not use your location or rides for advertising.

Who sees what

• Anyone
  A lap you post: its time, the path of that one lap on the circuit, your racing name (your sign-in name if you have not set one), photo, the bike or car you picked, and the racer card details you filled in: number, flag, team, one-line bio, and any social handles or WhatsApp number you typed. Your racer card can also be opened by anyone who has its link.
• Signed-in riders
  Your name, photo and bike in rider search. While you ride at a circuit, your name, photo and bike on its "At the track now" list. Turn that off in the app: Garage, Privacy, Visible at the track.
• Your friends and active group
  Your position on the live map while you ride (it disappears about 2 minutes after your last report and is kept in memory only), your best lap at each circuit, and your name, photo and bike.
• Only you
  Your full rides, your email address, your LINE ID, garage notes and your other account details.

To choose the name shown on the board, set a racing name in your profile. Without one, we use the name from your sign-in.

Who we share it with

We do not sell your data. Companies that handle it for us, by role:

• Sign-in: LINE, if you sign in with LINE. Facebook or Instagram, where the website offers them. They receive the fact that you signed in to us.
• Email delivery: Amazon Web Services' email service sends your sign-in code, so it sees your address and the code.
• Voice connection: a public Google server helps phones find each other (see below). Our own relay server passes audio when phones cannot connect directly.
• Website extras: Google (fonts), unpkg (3D library) and Esri (satellite pictures), as above.
• UniKong's own systems: our servers, and UniKong's customer records system, which keeps a copy of your sign-up details (account ID, email, name, social handles you give us, and which of our sites you joined through) and the website visit records above. We may look at the public profile of a social handle you give us. This is used to run our services and understand who uses them.
• Other riders and the public, as set out in "Who sees what".

We may also disclose data where the law requires it.

Voice and network addresses

Group voice connects phones directly to each other, so the other riders in your group's voice room can see your phone's network (IP) address, and Google's public server that helps phones connect can too. Audio is encrypted on the way. We do not record it, and we do not keep it. If you do not want this, do not tap Join voice.

Like most servers, ours records the time, network address and address requested for each request, for security and troubleshooting. When you ask for a sign-in code we also keep your email and network address for about an hour to limit abuse.

How long we keep it

• Rides, posted laps, profile, garage, friends and groups: until you delete them or your account.
• Live position: not stored; gone about 2 minutes after the last report.
• Sign-in codes: 10 minutes. Sign-in on a phone or browser: 30 days, or until you sign out.
• Website visit records that are not tied to an account: kept, because we cannot tell whose they are.
• Backups: deleted data can stay in our database backups until those backups are replaced.

Your choices and deleting your data

• Delete your account: in the app, Garage, then Delete my account; or on the website, your profile. See data deletion for what goes and what to do if you cannot sign in.
• It deletes your rides, laps on the board, garage and photos, friends and groups, profile and photo, and your sign-ins and activity records. We also ask UniKong's customer records system and SnatchMyBike to forget you.
• Smaller steps: delete a single ride, take a posted lap off the board, switch off Visible at the track, or sign out.
• Permissions: you can refuse or withdraw location, microphone, camera, photos, Bluetooth and notifications in your phone's settings. The app still opens; the feature that needs it does not work.
• Copies and corrections: email us to ask for a copy of your data or to correct it.

Security

The app and website use HTTPS. Sign-in tokens are kept in your phone's secure storage, and email codes are stored only as a hash. No system is perfectly secure, and we cannot promise it.

Children

SnatchMyLap is not directed at children under 13, and we do not knowingly collect their data. If you think a child has an account, write to us and we will delete it.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

UniKong Co., Ltd., registered in Thailand.
Privacy questions and requests: [email protected]
Rules for using SnatchMyLap: Terms of use
Website: https://unikong.ai