Privacy Policy

Last updated: 7 April 2026

Flying Start is developed by Flying Start ("we", "us", "our"). We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

This policy covers the Flying Start: Race Timer app (including the Apple Watch companion), the Flying Start: Race Officer app, and the associated web services at flyingstart.app and rc.flyingstart.app. These are collectively referred to as "the Apps".

The Apps offer features that work entirely on your device and optional connected features that require an account and transmit data to our servers. This policy covers both.

1. Account & Authentication

Some features — such as joining a sailing club, entering races, and receiving race notifications — require you to create an account. When you sign up we collect:

• Email address — used to identify your account, send password resets, and deliver race-related notifications you have subscribed to.
• Password — stored in hashed form by our authentication provider (Supabase). We never have access to your plaintext password.

You may also sign in via a magic link sent to your email. You can use the App's timer and GPS instruments without creating an account.

2. Racer Profile & Competitor Data

When you join a club or enter a race, we store the information you provide:

• Sail number, boat class, and boat name
• Helm name and crew name
• Handicap ratings (e.g. PY, IRC, PHRF)
• Club membership and role (e.g. member, officer)

This data is visible to race officers and other members of your club to facilitate race management and results publication.

3. Location & GPS Data

On-Device Processing

Flying Start uses your device's GPS to provide sailing instruments including speed over ground, course over ground, distance to the start line, and time-to-line calculations. This processing happens entirely on your device.

Race GPS Data

When you select “Track My Race” and start a countdown, Flying Start records your GPS position throughout the race. This data includes latitude, longitude, timestamp, speed, course, and accuracy for each recorded point. Your race GPS data is used in two ways:

• Live tracking — During the race, your position is broadcast approximately every 3 seconds so spectators and race officials can follow in real time. This live data is not stored after the race ends.
• Race replay — After the race, your full GPS track is uploaded to our servers for post-race review, start accuracy scoring, and race replay features accessible to club members. Uploaded tracks are associated with your account, the race, and your competitor record. GPS tracks are automatically deleted after 2 years. You can also delete your tracks or your entire account at any time (see section 19).

GPS track recording happens automatically during races. You can disable all GPS features in Settings → Navigation → “Disable All GPS Features”.

Timing Prediction Improvement

Your uploaded GPS tracks may also include additional sailing metrics such as filtered speed, heading, distance to the start line, and time-to-line predictions. This data is used in aggregate to train and improve the timing prediction algorithms that benefit all users. No personal identification is used in model training — data is anonymised before processing. You can disable this via Settings → Navigation → “Improve Timing Predictions”.

Disabling Location

You can disable all GPS features at any time via Settings → Navigation → “Disable All GPS Features”, or via iOS Settings → Privacy & Security → Location Services. Without location access, the timer and manual race features remain fully functional.

4. Push Notifications

If you opt in to notifications, we store your device's push notification token so we can deliver race-related alerts (e.g. race starting, results published, course changes, notice board updates). We store:

• Device token (provided by Apple Push Notification service)
• Platform and environment identifiers
• Your notification subscription preferences (which clubs, series, or races you follow)

You can manage or disable notifications at any time via iOS Settings or within the App.

5. Race Results & Performance Data

Race results — including finishing position, elapsed and corrected times, points, and status (e.g. DNS, DNF, OCS) — are stored on our servers when entered by race officers. Results may be published to club members and, where the club chooses, made publicly available.

On your device, we also store personal performance metrics such as start quality ratings, maximum speed, and race history. This local data syncs to your iCloud account if iCloud is enabled (see section 8).

6. Crew Sync

Flying Start's crew sync feature connects multiple devices on the same boat using Apple's MultipeerConnectivity framework over local Bluetooth and Wi-Fi. Race timing data and display state are shared directly between paired devices. No crew sync data passes through our servers.

7. Apple Watch

The Apple Watch companion app communicates with your iPhone via Apple's WatchConnectivity framework. All data transfer occurs directly between your paired devices. No Watch data passes through our servers.

8. iCloud Sync

If you are signed into iCloud on your device, race records, start lines, and settings may sync across your Apple devices using Apple's CloudKit framework. This data is stored in your personal iCloud account and is subject to Apple's Privacy Policy. We cannot read, access, or modify your iCloud data.

9. Feedback & Suggestions

If you submit feedback or feature suggestions through the App or our feedback site, we store the content of your submission, your account identifier, and any votes or comments. This helps us prioritise improvements. Feedback may be displayed publicly (without your email) on our roadmap.

10. Race Committee & Club Administration

Club officers and administrators use Flying Start: Race Officer and our Race Committee web dashboard to manage races, competitors, and results. Administrative actions (such as amending results) are recorded in an audit log that includes the officer's user ID, the change made, and when it was made. This ensures transparency and accountability in race management.

10a. Audio Recording (Race Officer)

Flying Start: Race Officer can record audio during races so race officers can replay finish calls and verify results. Audio recordings are stored locally on the device and are not uploaded to our servers. Recordings are associated with a specific race and can be deleted at any time within the app. Microphone access can be revoked via iOS Settings → Privacy & Security → Microphone.

10b. Bluetooth & Marine Instruments

The Apps can connect to external marine instruments (e.g. wind sensors) via Bluetooth. Instrument data (wind speed, direction, heading) is processed on your device for real-time display and is not transmitted to our servers. Bluetooth access can be revoked via iOS Settings → Privacy & Security → Bluetooth.

11. Subscription & Payment Data

Subscription purchases are processed entirely by Apple through the App Store. We do not collect or store payment information. Apple provides us with anonymised purchase receipts to verify your subscription status.

12. How We Use Your Data

We use the data described above to:

• Provide and operate the App's features — race timing, GPS instruments, results, and notifications
• Facilitate club and race management for sailing organisations
• Improve the App through aggregated, anonymised analysis of usage patterns (e.g. how many races are run, GPS tracks uploaded, clubs active)
• Train and improve timing prediction algorithms using anonymised, aggregated GPS and sailing metrics
• Send you transactional communications related to your account and races you participate in
• Maintain platform security and enforce our Terms of Use

We do not use your data for advertising, behavioural profiling, or sale to third parties.

13. Data We Do Not Collect

• We do not use third-party analytics, tracking, or advertising SDKs
• We do not collect device identifiers or fingerprints
• We do not use cookies or tracking pixels in the App
• We do not serve advertisements
• We do not sell data of any kind

14. Marketing Website Analytics

Our marketing website (flyingstart.app) collects anonymous page view statistics to help us understand how visitors use the site. This is entirely separate from the App and works as follows:

• No cookies — we do not set or read any cookies for analytics purposes
• No personal data stored — we generate a temporary, non-reversible hash from your IP address, browser type, and today's date. This hash rotates daily and cannot be used to identify you
• No cross-site tracking — analytics are limited to the marketing website. The App, RC Admin, and Community sites are not tracked
• No third-party services — all data is processed on our own servers and stored in our own database. No data is sent to Google, Facebook, or any other analytics provider
• Data collected: page visited, referrer domain, device type (mobile/desktop), country, and whether you clicked a link to the App Store or other Flying Start products
• Retention: raw event data is automatically deleted after 90 days. Aggregated daily summaries (with no visitor-level detail) are retained for trend analysis

15. Data Sharing & Third-Party Services

We use the following third-party services to operate the App:

• Supabase (database and authentication) — your account data, competitor profiles, GPS tracks, race results, and push tokens are stored in our Supabase-hosted PostgreSQL database. Supabase's privacy policy: supabase.com/privacy
• Apple Push Notification service (APNs) — used to deliver push notifications to your device
• Apple CloudKit / iCloud — used for optional cross-device sync of local race data
• Netlify — hosts our website and serverless functions, including the live race tracking relay
• Resend — used to deliver transactional emails such as magic link sign-in and race notifications. Resend's privacy policy: resend.com/legal/privacy-policy

We do not share your personal data with any other third parties, except as required by law.

16. Data Security

Access to your data is protected by row-level security policies that ensure you can only access data within clubs and races you belong to. All data in transit is encrypted via TLS. Passwords are hashed and never stored in plaintext. Administrative access to the platform is restricted to authorised personnel.

17. Data Retention

• Local data: Stored on your device. Deleting the App removes all local data. iCloud data can be managed via Settings → Apple ID → iCloud → Manage Storage.
• Server data: Your account, competitor profiles, and race results are retained for as long as your account is active. GPS tracks are automatically deleted after 2 years. Anonymised ML training data derived from GPS tracks is retained indefinitely as it contains no personal information. You may request deletion of your account and associated data at any time (see section 19), or delete your account directly from within the App or Race Committee dashboard.
• Push tokens: Automatically removed when they become invalid or when you uninstall the App.
• Audit logs: Retained for the operational life of the club for transparency and dispute resolution.

18. Children's Privacy

Flying Start does not knowingly collect personal data from children under 13 (or the applicable age in your jurisdiction). If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

19. Your Rights

Depending on your jurisdiction (including under UK GDPR and EU GDPR), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time (e.g. for push notifications or live tracking)

To exercise any of these rights, you can delete your account directly from Settings within the App or the Race Committee dashboard, or contact us at support@flyingstart.app. We will respond within 30 days.

20. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your data on the following bases:

• Contract: Processing necessary to provide the services you signed up for (account management, race entry, results)
• Legitimate interest: Platform security, fraud prevention, aggregated analytics to improve the service
• Consent: Push notifications, live position broadcasting, GPS track upload — each of which you can disable

21. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will notify you via the App or email. Continued use of the App after changes constitutes acceptance.

22. Contact

Questions about this privacy policy? Contact us at support@flyingstart.app.