Welcome to MyLMU ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection when you use our service for tracking Le Mans Ultimate (LMU) race statistics.

Desktop Application Permissions

The Sync Agent operates locally on your computer. It only monitors the folder you select, and it uploads files using encrypted connections to MyLMU. You can pause syncing, switch folders, or uninstall the app at any time, which immediately stops monitoring.

Diagnostic logs remain on your device unless you choose to send them to support. If you share logs with us we treat them as personal data and handle them according to this Privacy Policy.

Information We Collect

Account Information

When you create an account, we collect:

Email address (used for authentication and communication)
Password (stored securely using industry-standard encryption)
In-game driver name (required to match your race data)

Sync Agent (Desktop Application)

If you install the optional MyLMU Sync Agent for Windows, we collect additional information so the app can monitor your LMU Results folder and upload races securely:

The folder path you authorize the app to watch and related file metadata (names, hashes, sizes, timestamps, and upload status)
Basic device information such as Windows version, architecture, and locale for compatibility checks
Diagnostic logs and error reports, which may include anonymized telemetry about syncing activity
A random device identifier used solely for delivering updates and preventing duplicate uploads

The Sync Agent only monitors the folder you explicitly choose and does not scan other directories on your computer.

Race Data and Telemetry

When you upload or import race results from XML files, we collect and store:

Race results (track name, car name, session type, positions, lap times)
Lap-by-lap telemetry (sector times, fuel consumption, speeds, positions)
Race metadata (date, duration, laps completed, pit stops, tire compounds)
Original XML file paths (for duplicate detection)

Technical Information

We automatically collect certain technical information:

IP address and browser information (used for security and service optimization)
Authentication cookies (managed by Supabase for session management)
Usage data (pages visited, features used - if analytics are enabled)
For Sync Agent users: anonymized update checks containing your current app version, OS information, and device identifier so we can deliver new releases

GitHub Releases

The Sync Agent checks GitHub for updates. When this happens we share the app version, OS information, and a random identifier to determine if an update is available and to download the correct installer. No race data is transmitted during update checks.

How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: To provide, maintain, and improve our race tracking and analytics services
Authentication: To verify your identity and secure your account
Data Processing: To parse XML race files, extract statistics, and generate insights
Automatic Sync: To detect new LMU race files via the Sync Agent, upload them to MyLMU, and prevent duplicate imports
Personalization: To display your race history, preferences, and statistics in your chosen units
Communication: To send account-related notifications, password resets, and service updates
Security: To detect and prevent fraud, unauthorized access, and other security threats
Legal Compliance: To comply with applicable laws, regulations, and legal processes

Third-Party Services

Supabase

We use Supabase for authentication, database storage, and backend services. Supabase handles your authentication credentials securely and stores your data in their PostgreSQL database. Please refer to Supabase's Privacy Policy for details on how they process your data.

Google Gemini AI (Optional)

If AI insights are enabled, we may use Google Gemini AI to analyze your race performance and generate insights. Race data sent to Gemini is processed according to Google's Privacy Policy. You can disable AI insights at any time through your settings.

Data Storage and Security

We implement industry-standard security measures to protect your data:

All data is stored in Supabase's secure, encrypted databases
Passwords are hashed and never stored in plain text
Row Level Security (RLS) ensures users can only access their own data
HTTPS encryption for all data transmission
Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We use cookies managed by Supabase for authentication and session management. These cookies are essential for the service to function properly. For more detailed information, please see our Cookie Policy.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of all personal data we hold about you
Correction: Update or correct inaccurate information through your dashboard settings
Deletion: Request deletion of your account and associated data
Data Portability: Export your race data in a structured format
Opt-Out: Disable AI insights or other optional features at any time
Cookie Management: Control cookie preferences through your browser settings

To exercise these rights, please contact us through the support channels available in your dashboard, or delete your account directly through the settings page.

We retain your data for as long as your account is active or as needed to provide you with services. If you delete your account:

Your account information, race data, and telemetry will be permanently deleted
This deletion is typically completed within 30 days
Some data may be retained longer if required by law or for legitimate business purposes
Local Sync Agent logs remain on your device until you delete them; if you have shared logs with support they will be removed once the issue is resolved unless we are legally required to keep them longer

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your data to these countries.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us through the support channels available in your dashboard settings.