VRacer Privacy Policy

Last updated 26th February 2026

This privacy policy outlines how Velocity Software Ltd uses and protects the information you provide when using VRacer.

We collect various types of data to improve your user experience, including but not limited to the following:

• Personal Information: Provided voluntarily by you, this may include your user name, country of residence, a brief biography, and any racing clubs or series you belong to. You are not required to provide this information, but some features may be limited without it.
• Race Data: This includes both user-input information like your finishing position and session type, as well as electronically captured data such as CAN and OBD2 sensor readings.
• Images: Captured from your camera reel/photo library or via your device's camera for profile pictures and vehicle images, subject to your granting camera and/or photo library permissions.
• GPS and Position Information: Geographical location data is collected via your device’s GPS to provide and improve location-based functionalities within the app. By enabling location permissions, you consent to this collection. We collect location data only while you are using the app, and only when you have granted location permissions.

Your data is used to enhance and personalize your experience within the app. By using VRacer, you acknowledge we will collect and use information as described in this Privacy Policy. Where required by law, we will request your consent for specific processing activities (for example, enabling location permissions or receiving marketing emails).

Where the GDPR applies, we process personal data under one or more of the following legal bases:

• Performance of a contract: to provide VRacer features you request (accounts, session recording, leaderboards, track features).
   
• Legitimate interests: to secure and improve VRacer, prevent fraud/abuse, maintain service reliability, and understand usage patterns.
   
• Consent: where you choose to enable optional features (for example, certain location permissions, marketing communications, or optional data sharing settings).
   
• Legal obligations: where required to comply with applicable laws.
   

We may collect and process technical and usage information to help secure VRacer and prevent abuse, fraud, and unauthorised access. This may include log data such as IP address, device identifiers, timestamps, app events, approximate location derived from IP, and actions taken within the app.

We use this information to detect suspicious activity (for example, automated scraping, attempts to bypass access controls, or misuse of accounts), to apply rate limits, to troubleshoot issues, and to enforce our Terms of Service.

We may create and use aggregated and/or anonymised data to understand how VRacer is used, improve features, develop new functionality, and support reporting and analytics (for example, aggregated performance statistics, track usage trends, reliability metrics, and safety/quality insights).

Aggregated/anonymised data is processed in a way intended to prevent it from reasonably identifying an individual. If you delete your account, aggregated/anonymised data may remain because it cannot reasonably be linked back to you.

You have the right to access, correct, or delete your personal data at any time. You can also object to our processing of your personal data and request data portability.

You have the right to delete yourself, or request that we delete personal data that we have collected and stored.

Personal Information

If you have a VRacer account, you may update, amend, or delete your information at any time by signing in and visiting the account settings section that allows you to manage your personal information. 

You can also amend privacy settings for your account, or for individual sessions, in order to limit privacy of your personal data.

Account Deletion

You may choose to delete account information, permanently deleting personal information. This can be done by selecting 'Delete Account' from the in-app settings menu. It is a non-reversible and permanent operation.

Retained Information

Information that has been publicly shared to other users via VRacer or other platforms, such as Facebook, or other platforms may remain in the public domain and be visible to other users after your account has been deleted.

Deletion Process

When a user initiates a deletion, we will delete your personal data from our active systems and take steps to remove it from backups in accordance with our retention schedules.

Owing to backup storage and caching mechanisms, complete deletion of your personal data and system logs may take up to 90 days. Furthermore, we reserve the right to maintain specific data in instances where legitimate reasons such as security, fraud prevention, or regulatory compliance necessitates it.

Also note: security and fraud-prevention logs may be retained for longer where necessary to protect VRacer, comply with legal obligations, or resolve disputes.

We are committed to safeguarding your data and employ a range of robust security measures:

• Encryption: We utilize industry-standard cloud services that automatically encrypt data at rest and while in transit.
• Security Audits: Our team conducts periodic security reviews to ensure that our data protection measures remain effective and up-to-date.
• Secure Infrastructure: We choose infrastructure providers renowned for their secure servers, global presence, and adherence to stringent security protocols.

While we implement rigorous measures to protect your data, no method is entirely foolproof. Thus, we encourage our users to be proactive in their digital safety, such as by adopting strong, unique passwords.

We keep your data only for as long as is necessary for the purposes laid out in this Privacy Policy.

We may share your data with trusted third-party service providers (“processors”) who help us operate and improve VRacer (for example, cloud hosting, analytics, email delivery, and payment processing). These providers are only permitted to process your data on our instructions and for the purposes described in this Privacy Policy.

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, and security of VRacer, our users, or others.

During the initial setup, the app will guide you through various privacy settings. Understanding these settings is crucial for maintaining your desired level of privacy.

We comply with all applicable privacy regulations including, but not limited to, the General Data Protection Regulation (GDPR) for our European users.

We use third-party service providers to help operate VRacer, such as cloud infrastructure hosting, analytics, crash/error reporting, email delivery, and payment processing. These providers may process personal data on our behalf for the purposes described in this Privacy Policy.

Where practical, we aim to minimise the personal data shared with these providers.

Velocity Software Ltd is based in New Zealand. Your information may be processed and stored in New Zealand and other countries where we or our service providers operate. Where required, we take steps designed to ensure appropriate safeguards are in place for international transfers.

The VRacer mobile app does not use cookies.

Our website may use functional cookies and similar technologies (such as local storage) to remember your preferences and settings (for example, language, display options, or other local configuration). These are used to support core site functionality and improve your experience.
We may also use cookies or similar technologies for website analytics, where enabled, to understand how the website is used and to improve performance.

You can control cookies through your browser settings; disabling functional cookies may affect website functionality.

In the unlikely event of a data breach, we will notify affected users within 72 hours and take all necessary steps to minimize the impact and prevent future occurrences.

Users have the option to opt-out of non-essential data collection during the setup process and can change their preferences at any time in the settings.

This app is not intended for users under the age of 18, and we do not knowingly collect data from children.