Privacy Policy
Tidel is a motocross lap timer. It records where you ride, so it can tell you how fast you rode. This page says exactly what that means for your data.
The short version. Your sessions are private by default and nobody else can see them. The one thing that is shared on its own is your best lap time on the track’s list — that is on by default, and you turn it off for one session while reviewing it, or for good under More → Privacy (section 5). There are no ads, no trackers and no third-party analytics in the app at all. Tidel does store your sessions on its own server so they survive a new phone — and you can delete all of it, permanently, at any time.
On this page
1. Who is responsible
The app is Tidel. The developer and data controller is Magnus Linnerud Støme, Norway. For anything on this page, write to post@tidel.no.
2. What Tidel collects, and why
“Sent to the server” below means Tidel’s own cloud, which exists so your history survives a lost or replaced phone. Nothing in this table is sold, and nothing is used for advertising.
| Data | Why | Sent to server |
|---|---|---|
| Precise location (GPS) Position, speed, timestamp along the ride |
Timing laps, drawing your line on the map, recognising which track you are on | Yes — compressed, in a private file only your account can open |
| Lap and session data Lap times, sector times, distance, speed, session name, notes, bike, conditions |
The analysis itself | Yes |
| Heart rate (iOS) | Shown per lap and in the analysis. Read from Apple Health for rides you already recorded with a watch | Yes — inside the same private session file |
| Workouts from Apple Health (iOS) Workout, route, heart rate, distance |
Turning a ride you recorded on a watch into lap data | Yes, once imported as a session |
| External GPS telemetry RaceBox: position at 25 Hz, altitude, accuracy, satellites, heading, G-force, gyro |
Higher-resolution analysis when you use an external receiver | Yes, as part of the session |
| External device identity Model, serial number and Bluetooth id of a paired RaceBox |
Recognising the box between sessions, and tagging which device recorded what | Yes, in your own settings |
| Rider name (optional) | Shown on your own session cards and in anything you choose to share | Yes, if you enter one |
| Account identifier A random id, plus an 8-character share code |
Owning your data, and letting a friend add you | Yes |
| Email address | Only if you sign in to the web version. The app itself never asks for one | Yes, if you provide one |
| Usage events An event name from a fixed list (e.g. “an import finished”), a number or error code, plus app version, platform, language and a random identifier for your installation |
Finding out which parts break, and on which platform. The events never contain lap times, positions, names, track names or notes. They are not linked to your account — no user id is stored with them — but they are tied to a random identifier for your installation, so one crash on one phone can be told apart from a hundred crashes everywhere. That makes them pseudonymous rather than anonymous, and we treat them as personal data. Switch them off under More → Feedback and nothing is sent | Yes, without your identity |
| Feedback you send The text you write, the category you picked, an optional contact address, any session data you tick to attach, plus app version, platform and language |
Answering you and fixing what you reported. Sent only when you press Send under More → Feedback. Unlike usage events this is linked to your account, so we can look into what actually happened on it — please do not put anyone else’s personal details into the message | Yes, when you send it |
| Camera | Scanning a friend’s QR share code. Frames are read in memory and never stored | No — nowhere, ever |
Location, specifically
Tidel uses precise location because a lap time is meaningless without it: the app has to know where the finish line is and when you crossed it, to within a few metres.
Tidel does not request background location. On Android, recording runs in a foreground service with a permanent notification so you can see it is running. On iOS, location is used while the app is in use. If a future version needs background location, this page and the app’s permission prompts will say so before it is turned on.
What Tidel deliberately does not do
- No advertising, and no advertising identifiers.
- No third-party analytics, crash-reporting or attribution SDKs. There is no Google Analytics, Firebase, Crashlytics, Sentry, Amplitude, Mixpanel, AppsFlyer or anything similar, and no data goes to any company other than the three processors listed below. Tidel does record its own error reports — the message, the file and the line number — on Tidel’s own server, so a crash nobody reports still gets fixed. They contain no lap times, no positions, no names and no notes, and the same switch under More → Feedback turns them off.
- No selling of data, to anyone, for any purpose.
- No advertising identifier, and no hardware identifier. We never read the IDFA, the Android advertising id, IMEI, MAC address or serial number, and we do not collect your phone model. Usage events do carry an identifier the app generated at random for this installation, plus platform, app version and language. It belongs to nobody but this copy of Tidel, it disappears if you reinstall, and it is deleted when you delete your account.
- No public leaderboard other than the track’s own — and you can turn that off. Your best lap time on a track is shared on that track’s list by default. You turn it off for one session while reviewing that session, or for good under More → Privacy. The session itself stays private. See section 5.
3. What never leaves your phone
- Your rider profile — age, weight and resting heart rate, if you enter them. Used to estimate training load locally. Never uploaded.
- Your profile picture.
- Camera frames from QR scanning.
- Local backups that the app writes to its own folder so an app update cannot cost you your history. Be aware of one thing: these files contain your sessions, and therefore heart rate if you have imported any. They live in the app’s own documents folder, which means they are included in an iCloud or Android device backup if you have that turned on — and on iPhone it is on by default. If you would rather your heart rate never reached iCloud, turn Tidel off in Settings → Apple ID → iCloud → iCloud Backup. The manual export under More → Backup goes only where you choose to save it.
4. Your account
Tidel creates an anonymous account for you the first time it needs one. There is no sign-up form, no email and no password. The account is what owns your sessions, and it is what makes it possible to move to a new phone without losing them.
If you use the web version, you can attach an email address and a password to that same account. Doing so does not create a second account and does not move your data — it is the same account, now with a way to sign in.
5. Sharing, and who else processes data
What you share yourself
You can send a session as a file or as a share code, and you can share a record with friends inside the app. That happens only when you choose it, to the people you choose. Your sessions are private by default. The one exception — the one thing shared without you doing anything — is the best lap time on the track’s list, right below.
Your best lap on the track’s list
Your best lap time on a track is shared on that track’s list by default. When you review a session in the app, the switch “Share my best lap on the track’s list” is on. Turn it off for that session and the time does not appear on the list; a time already there is removed on the next sync. You can always open the session again and change your mind. Whether you appear with your full name or just an initial is controlled under More → Privacy (“Show full name on lists”, on by default); if you do not want to share lap times at all, turn off “Share my records” in the same place. What is shared on the list is the time, the date and the racing line of that one lap — never your heart rate, never a whole session and never location outside the lap. The session itself remains private by default.
Training sessions (coach events)
If you join a training session, the coach of that session sees your name, your group and your attendance. If you choose phone recording for a heat, the coach sees your lap times from that heat — the number of laps, the times, any section times and speed, and the data quality. The coach never sees your GPS track, your heart rate or your other sessions, and cannot open your activity. If you also choose “Phone + map line”, a simplified map line of your best lap in the heat is shared — visible to the coach and the others taking part in the same session, never to anyone outside it. You can leave the session, or withdraw a result or a map line, at any time; it then disappears at the coach’s end too. “Take part without recording” is always a full option.
If you use a watch or another GPS device instead of the phone, exactly the same information is shared; we only label the numbers with where they came from. You always start the watch yourself — Tidel never starts your equipment for you.
The group result list
The coach can let participants into the result list for their own group. When it is on — it is off by default — you see names, lap times and section times for the others who rode the heat in your group, and they see yours. These are the same numbers the coach sees: laps, times, section times, average speed and lap length — never GPS tracks and never heart rate. When it is off you see anonymous numbers only: how many have data, the median, the best time in the heat and your own position, without names.
Processors, and where the data goes
| Who | What for | Where, and on what safeguard |
|---|---|---|
| Supabase Inc. (database, file storage, sign-in) |
Stores your account, sessions, laps and raw GPS files on Tidel’s behalf | Your data is stored in the European Union (Ireland) and is not replicated outside it. Supabase Inc. is established in the United States, and its operations staff may access the infrastructure from there. That access is covered by the EU Standard Contractual Clauses, together with encryption in transit and at rest. |
| Esri Inc. (satellite imagery) |
Serves the map tiles behind the track map | Tiles are fetched from Esri’s servers in the United States. Tidel sends only the coordinates of the map square you are looking at — never your account, your name or your ride — but like any web request it carries your device’s IP address, which Esri may log. That is a transfer to a third country, made on the basis of the EU Standard Contractual Clauses. Turn the satellite background off in the app and the request is never made. |
| GitHub Inc. (static file hosting) |
Serves versjon.json, which the app checks for a newer beta |
The file is fetched from GitHub Pages in the United States, at most once a day. The request carries no account, no identifier and no lap times — only your device’s IP address, which GitHub may log as part of ordinary server operation. That is a transfer to a third country, made on the basis of the EU Standard Contractual Clauses. |
All three are bound by a written data processing agreement. They may only process your data on Tidel’s documented instructions, may not use it for their own purposes, and are required to give it the same or an equal level of protection as this policy promises. None may sell it, share it onward, or use it for advertising or profiling. No other company receives your data. Apple Health and Google Play are not processors for Tidel — Health is a source you import from, and Play is a distribution channel.
We will disclose data to a public authority only where we are legally obliged to, and only to the extent of that obligation.
6. The public track catalogue
This is the one part that is genuinely public, so it is worth reading. Tidel keeps a shared catalogue of motocross tracks: name, position, outline, finish line and sector boundaries. Ride somewhere that is not in it yet and the track is added, so the next rider finds it.
Your ride is not part of that. What goes into the catalogue is the geometry of the track — never your GPS trace, your lap times, your heart rate or your account. One thing does travel with it: if you have entered a rider name, it is stored as a credit on the tracks you add, and other riders can see it. Leave the rider name blank under More → Rider and nothing identifying you is published at all. Deleting your account removes the credit from every track you added.
Track geometry stays in the catalogue when you delete your account, with the link to you removed. If one rider leaving erased the track, it would break it for everyone else who rides there.
7. How the data is kept
- Everything sent to or from the server travels over HTTPS/TLS.
- Raw GPS files live in a private storage bucket. Access is bound to the account that owns them — there is no public link to a session file.
- The database enforces access per row, in the database itself, not in the app. Your sessions are readable by your account and no other.
- Once a session file is uploaded it is immutable: the server refuses changes that would shrink or overwrite a recorded ride.
8. Retention and deletion
Sessions are kept until you delete them, because the whole point of the app is comparing this season to the last one. You can delete a single session at any time from inside the app.
Deleting the whole account
You can start this in the app under More → Your account → Delete my account, or from tidel.no/delete-account if you no longer have the app installed.
- The account is locked for writing immediately.
- There is a 7-day grace period during which you can undo it.
- After that, the following is permanently deleted: your profile, all sessions, laps and records, your settings, your friendships, and every raw GPS file you have uploaded.
- What remains: public track geometry, with your name and account removed from it, as described in section 6. Nothing else. Usage events tied to your installation are deleted along with everything else, and any feedback you sent is stripped of the link to your account.
Deletion is real deletion, not deactivation.
Training sessions
If you leave a training session, or withdraw a result or a map line, it disappears immediately at the coach’s end and from the group result list. If the coach deletes the session, or you delete your account, it goes with the deletion described above. Your own sessions in the app are untouched by this: a training session can never delete, change or open an activity you own. How long a training session — and what has been shared in it — is kept when nobody withdraws has not yet been decided. We will update this section, and the date at the top, as soon as it has.
9. Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction, and a copy in a portable format. Two of these you can do yourself, immediately: the app can export your entire history as a file under More → Backup, and it can delete your account as described above. For anything else, write to post@tidel.no.
The legal basis for processing is the performance of the service you asked for, and your consent for optional items such as Apple Health access and usage statistics — both of which you can withdraw at any time, in the app or in your phone’s settings.
If you believe your data is handled wrongly you can complain to the Norwegian Data Protection Authority (Datatilsynet).
10. Children
Motocross riders are often young, and Tidel is usable by anyone who rides. The app does not ask for a date of birth, does not profile users, shows no advertising, and has no public social feed. It is not directed at children under 13, and if a parent or guardian wants an account removed, one email to post@tidel.no is enough.
One thing a parent should know: the best lap time on a track is shared on that track’s list by default, along with the name entered in the app (section 5). It is turned off for a single session while reviewing that session, or for good under More → Privacy — which is also where you choose full name or just an initial. Nothing else from the session is shared: not the track log, not heart rate, and no position outside the lap itself.
Training sessions are for adult participants during the pilot phase. Proper support for guardian consent must be in place before they are used by children and young riders, and Tidel will say so clearly in the app when that changes.
11. Changes
If this policy changes, the date at the top changes with it. If a change actually affects what is collected or where it goes, the app will say so rather than quietly updating a web page.
12. Contact
Magnus Linnerud Støme · Tidel · Norway
post@tidel.no