Privacy Policy

Data controller

Your personal data is processed by Albert Medya Yazılım ve Dijital Yayıncılık Hizmetleri A.Ş. as the data controller.

For anything about this notice or your personal data, contact us at support@albertsoftware.com.

Data we process

• Account and sign-in data: when you sign in with Apple, the user identifier Apple assigns to you, your e-mail address (which may be an address created by Apple's Hide My Email) and the name Apple shares at your first sign-in; when you sign in with Google, the user identifier Google assigns to you, your e-mail address and the name on your Google account.
• Guest use: if you use the app without signing in, an anonymous account is created for you. It holds only your language preference and device name.
• Profile data: your display name, handle, city, the sports you race in, gender, birth year, default visibility for your plans and language preference. Your birth year is used to work out your age group; your profile never shows your birth year, only your age group.
• Plans and calendar: the events you plan to attend and the visibility you choose for each plan (participants, followers or only me); the secret key of your personal calendar feed link.
• Device calendar: if you allow it, the app adds your plans to your device calendar. Nothing in your calendar is read or sent to us.
• Location: if you allow it, the app reads your device's approximate location to show races and clubs near you and to pick the city you are in. It is rounded to about 10 km and sent to our server only for that request; it is not stored and never shows on your profile. You can turn location off any time in your device settings.
• Social and community data: the people you follow and who follow you, people you block, the communities you are a member of, announcements you write if you are a club admin, and reports you make (the reason and your optional note).
• Race results: results we import from the public pages of organisers and timing companies (such as name, bib number, times, category and ranking); name-match suggestions shown to you; your result claims, any statement you add to them, and review decisions on them.
• Notifications: when you allow notifications, your device's notification registration (Firebase Cloud Messaging token) and platform (iOS, Android). You can turn notifications off any time in your device settings.
• Support messages: the subject and description you send from Settings › Support, the e-mail address you optionally give for a reply, the app version and platform (iOS, Android).
• Session and technical data: device name, when sessions were started and last used, hashed values of session refresh tokens; in server logs, IP address and technical details of each request.

How we collect data

We collect data electronically: some when you enter it in the app, some from Apple or Google when you sign in with them, and some automatically while you use the app (session records and server logs).

We import race results by automated means from the public pages of organisers and timing companies. People named in these results do not have to be Raceport members.

Purposes

• To create your account, recognise you and manage your sessions.
• To provide your profile, plans, follows and community features with the visibility you choose.
• To show race calendars and results; to suggest results that may be yours, review result claims, and build your career and personal bests from approved results.
• To provide the personal calendar feed and, if you wish, add your plans to your device calendar.
• To apply your blocks, review reports, and act against content and users that break the rules.
• To keep the service secure, prevent abuse and fix errors.
• To meet our legal obligations, respond to requests from competent authorities, and protect our rights in possible disputes.
• To answer your requests and support questions.

Name-match suggestions are only a hint. Whether a result is linked to you is decided by an editor who reviews your claim, not automatically.

Legal bases

Account, profile, plan, follow, community, calendar and result-claim data are processed because they are necessary to enter into and perform the terms of use between you and us, under KVKK Art. 5/2(c) (GDPR Art. 6/1(b)).

Race results imported from public sources, name-match suggestions, session records, server logs and security processing are necessary for our legitimate interests, provided they do not harm your fundamental rights and freedoms, under KVKK Art. 5/2(f) (GDPR Art. 6/1(f)).

Report and moderation records and review records of result claims are kept because they are necessary to establish, exercise or defend a right, under KVKK Art. 5/2(e) (GDPR Art. 6/1(f)).

Data needed to meet retention and notification obligations set by law is processed under KVKK Art. 5/2(ç) (GDPR Art. 6/1(c)).

If any processing does not rest on one of these bases, or a transfer abroad requires explicit consent, we will ask for your explicit consent separately. You can withdraw your consent at any time (KVKK Art. 5/1, GDPR Art. 6/1(a)).

Adding your plans to your device calendar happens only with the permission you give through your device's operating system. You can withdraw this permission at any time in your device settings.

Who we share data with

• Other users: your profile (display name, handle, city, sports and age group), your approved results and your follower counts are visible to other users of the app. Your plans are shown according to the visibility you choose for each. You and the people you block do not see each other.
• Calendar link: anyone who has your personal calendar feed link can see the plans in it. Do not share the link with anyone.
• Club announcements: announcements you write as a club admin are published under the community's name, not yours.
• Service providers: the companies that provide our server hosting and infrastructure process data only on our behalf and on our instructions.
• Google (Firebase Cloud Messaging): to deliver notifications to your device. The notification content and your device's notification registration pass through Google's servers.
• Apple and Google: to sign you in and, for Sign in with Apple, to revoke sign-in authorisation when you delete your account. Sign in with Apple and sign-in with Google each run on the provider's own systems under its own privacy policy.
• Organisers and timing companies: when a result claim needs verifying, we may contact the organiser or timing company of that race about the result in question.
• Competent authorities: courts and other competent public authorities, when required by law.

Transfers abroad

If the servers of our hosting and infrastructure providers are located outside Türkiye, your data will be transferred abroad.

Any such transfer is made in line with KVKK Art. 9: based on an adequacy decision for the destination country where one exists, otherwise with one of the appropriate safeguards, such as the standard contract set by the Personal Data Protection Board. If neither is possible, data is transferred only in the exceptional cases the law permits.

Ads, tracking and sale of data

Raceport has no ads. We do not use third-party analytics, advertising or tracking tools (SDKs), and we do not track you across other apps or websites.

We do not sell or rent your personal data.

Retention

We keep your personal data for as long as the purpose it is processed for requires, and for the periods set by applicable law.

When these periods end, the data is deleted, destroyed or anonymised in line with KVKK Art. 7 and the related regulation.

What is deleted when you delete your account, and what is kept and why, is explained on the Account Deletion page. Copies in backups are deleted automatically when the backups reach the end of their own retention cycle.

Your rights

Under KVKK Art. 11, you can apply to us to:

• find out whether your personal data is processed,
• request information about it if it is,
• find out the purpose of processing and whether the data is used for that purpose,
• know the third parties in Türkiye or abroad to whom it is transferred,
• have it corrected if it is incomplete or inaccurate,
• have it deleted or destroyed under the conditions of KVKK Art. 7,
• have any correction, deletion or destruction notified to the third parties to whom the data was transferred,
• object to an outcome against you that results solely from automated analysis of your data,
• claim compensation if you suffer damage because your data was processed unlawfully.

Where EU data protection law applies to you, you also have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object to processing, to withdraw consent, and to lodge a complaint with the supervisory authority in your country.

You can use these rights even if you are not a Raceport member, if your name appears in a race result we imported from a public source.

How to apply

You can send your application by e-mail to support@albertsoftware.com.

Please state your full name, your Turkish ID number if you are a Turkish citizen (or your nationality and passport number if not), your address for notifications, your e-mail address if you have one, and your request. We may ask for more information to verify your identity and your link to the account.

We will conclude your application free of charge within thirty days at the latest, depending on the nature of the request. If the request involves an additional cost, we may charge the fee set in the tariff of the Personal Data Protection Board.

If your application is rejected, you find our answer insufficient, or we do not answer in time, you can file a complaint with the Personal Data Protection Board within thirty days of learning our answer and in any case within sixty days of your application.

Security

We take appropriate technical and organisational measures to protect your data, as required by KVKK Art. 12.

On our servers we store session refresh tokens only as hashed values; session data in the app is kept in your device's secure storage.

Access to data is limited to authorised people who need it for their work.

If your data is obtained by others unlawfully, we will notify you and the Personal Data Protection Board as soon as possible.

Children

Raceport membership is for people aged 18 and over. We do not knowingly allow anyone under 18 to become a member or knowingly collect profile data from them.

If we learn that an account belongs to someone under 18, we will delete it. You can tell us about such a case at support@albertsoftware.com.

Changes

We may update this notice to reflect changes in the service or the law. The current version is always published in the app and on this page; the date of the last update is shown at the top.

We will also announce significant changes in the app.

Contact

Albert Medya Yazılım ve Dijital Yayıncılık Hizmetleri A.Ş.

E-mail: support@albertsoftware.com