Privacy Policy

Trialoop — Effective: February 22, 2026 · Last updated: February 23, 2026

1. Introduction

Welcome to Trialoop ("we," "us," or the "Company"). Trialoop is a motorcycle trial race management application that enables marshals to score riders, spectators to view live leaderboards, and organizers to manage races.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Trialoop mobile application (com.trialoop.trialoop_marshal) and related services.

We are committed to complying with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy legislation. We continuously review our practices to align with these regulations.

2. Data Controller

Trialoop acts as the Data Controller for personal data collected through the App. For data protection inquiries: contact@trialoop.com.

3. Data We Collect

3.1 Account Data (Organizer Mode Only)

Data TypeDetails
Email addressRequired for account creation and authentication
PasswordHashed via Supabase Auth — never stored in plain text

Account creation is required only for Organizer mode. Marshals and spectators can use the App without an account.

3.2 Device Information

Data TypeDetails
Device identifierUsed for marshal device binding to ensure scoring integrity
Device model and OS versionUsed for compatibility checks and troubleshooting

3.3 Race Data

Data TypeDetails
Race scoresEntered by marshals, stored on our server
Offline score cacheTemporarily stored locally in SQLite for offline functionality

3.4 Location Data

Approximate or precise location is used during race registration and for the Friends Race feature (voluntary sharing between friends). Location is never collected in the background.

Precise GPS location (city and country) is also collected at first app launch and periodically during use to generate aggregated usage statistics — this helps us understand where Trialoop is used worldwide. This data is stored on our servers and associated with your device identifier.

3.5 Biometric Data

Face ID / fingerprint — processed entirely on your device by the operating system. We never receive, transmit, or store your biometric data.

4. Hardware Features We Access

FeaturePurposeRequired?
CameraQR code scanning for rider identificationNo (marshals only)
NFCNFC tag reading for rider identificationNo (marshals only)
BluetoothConnection to label printerNo (printing only)
LocationRegistration, Friends Race & usage analyticsNo (on request)
BiometricsSecuring Organizer modeNo (organizers only)

5. How We Use Your Data

We process your data solely to provide the race management service. We do not use your data for advertising, user profiling, or selling to third parties.

6. Data Sharing and Third Parties

We use Supabase as our data processor (database hosting). No data is shared with advertising networks, analytics providers, or data brokers.

7. Data Retention

Data TypeRetention Period
Organizer account dataUntil account deletion + up to 30 days for backup removal
Race scoresAs required by federation regulations (typically up to 5 years)
Device binding dataUntil the device binding is revoked
Location data (Friends Race)Real-time only — not retained
Location data (usage analytics)Until device de-registration or account deletion
Biometric dataNever stored by us (on-device only)

8. Data Security

9. Your Rights (GDPR)

RightDescription
AccessRequest a copy of the personal data we hold about you
RectificationRequest correction of inaccurate data
ErasureRequest deletion of your account directly from your profile or by emailing contact@trialoop.com
RestrictionRequest limitation of processing
Data PortabilityDownload a copy of your data directly from your profile (structured JSON format)
ObjectObject to processing based on legitimate interests
Withdraw ConsentWithdraw consent at any time

To exercise these rights: log in to your profile or email contact@trialoop.com. We respond within 30 days.

10. Account Deletion

You can request account deletion directly from your profile page (section Privacy & Personal Data). Your request will be processed within 15 days. We reserve the right to contact you beforehand — for example to verify your identity or handle specific cases (e.g. if you are a federation organiser). You may cancel your request at any time during that period.

You may also submit your request by email to contact@trialoop.com with subject "Account Deletion Request".

11. Children's Privacy

The App is not directed at children under 16. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy. The "Last Updated" date will be modified accordingly. For material changes, we will notify you through the App.

13. Contact Us