Privacy Statement

The data controller is KSR20, based in the Netherlands. For any privacy questions, contact us at hello@ksr20.com.

We collect only the data needed to run KartLog:

• Account data: email address, password hash (handled by our authentication provider), and optional profile information such as name, kart brand and driver weight.
• Setup data: everything you enter into a setup: track, date, session, weather, chassis settings, gearing, tyres, lap times, driver feedback and comments.
• Weather snapshots: when you fetch weather from OpenWeather, we store the location, timestamp and the weather values returned.
• Social data: friend connections, shared setups and comments you choose to exchange with other users.
• Payment data: subscription status and payment references are handled by Mollie. We do not store full payment card details.
• Technical data: authentication tokens and basic request logs needed to keep the service secure and available.

• To provide your personal kart setup logbook and let you compare, share and export your setups.
• To manage your account, subscription and access to paid features.
• To keep the app secure, diagnose errors and prevent abuse.
• To communicate with you about your account, payments or support requests.

We do not sell your personal data and we do not use it for advertising profiles.

We rely on a small number of third-party services to run KartLog:

• Lovable Cloud: hosts the application, database, authentication and storage on our behalf.
• Mollie: processes subscription payments.
• OpenWeather: provides the optional weather data you can pull into a setup.

Each subprocessor only receives the data needed to perform its service. We do not authorise them to use your data for their own purposes.

KartLog does not use analytics or advertising cookies. We only use the essential authentication cookies and local storage needed to keep you signed in and to save the app to your home screen.

We keep your data for as long as your account is active. If you delete your account, we remove your personal data and setup records within 30 days, unless we are legally required to keep something longer.

You can manage most of your data directly inside the app. You also have the right to:

• Access, correct or delete your personal data.
• Export your setups.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, email us at hello@ksr20.com.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), row-level access controls in the database, authenticated access to your setups, and role-based access for admin functions. No system is completely secure, so we encourage you to use a strong password and keep your sign-in details private.

The KartLog application is built and hosted using the Lovable platform. Lovable provides the underlying infrastructure, database and authentication capabilities. This privacy statement describes how KSR20 uses that platform and your data; it is not a certification or independent review by Lovable.

We may update this statement from time to time. The latest version will always be available at this page. We will notify you of material changes via the app or by email.

For privacy questions or data requests, contact KSR20 at hello@ksr20.com.