Privacy Policy
Tidel is a motocross lap timer. It records where you ride, so it can tell you how fast you rode. This page says exactly what that means for your data.
The short version. Your sessions are private by default and nobody else can see them. There are no ads, no trackers and no third-party analytics in the app at all. Tidel does store your sessions on its own server so they survive a new phone — and you can delete all of it, permanently, at any time.
On this page
1. Who is responsible
The app is Tidel. The developer and data controller is Magnus Linnerud Støme, Norway. For anything on this page, write to post@tidel.no.
2. What Tidel collects, and why
“Sent to the server” below means Tidel’s own cloud, which exists so your history survives a lost or replaced phone. Nothing in this table is sold, and nothing is used for advertising.
| Data | Why | Sent to server |
|---|---|---|
| Precise location (GPS) Position, speed, timestamp along the ride |
Timing laps, drawing your line on the map, recognising which track you are on | Yes — compressed, in a private file only your account can open |
| Lap and session data Lap times, sector times, distance, speed, session name, notes, bike, conditions |
The analysis itself | Yes |
| Heart rate (iOS) | Shown per lap and in the analysis. Read from Apple Health for rides you already recorded with a watch | Yes — inside the same private session file |
| Workouts from Apple Health (iOS) Workout, route, heart rate, distance |
Turning a ride you recorded on a watch into lap data | Yes, once imported as a session |
| External GPS telemetry RaceBox: position at 25 Hz, altitude, accuracy, satellites, heading, G-force, gyro |
Higher-resolution analysis when you use an external receiver | Yes, as part of the session |
| External device identity Model, serial number and Bluetooth id of a paired RaceBox |
Recognising the box between sessions, and tagging which device recorded what | Yes, in your own settings |
| Rider name (optional) | Shown on your own session cards and in anything you choose to share | Yes, if you enter one |
| Account identifier A random id, plus an 8-character share code |
Owning your data, and letting a friend add you | Yes |
| Email address | Only if you sign in to the web version. The app itself never asks for one | Yes, if you provide one |
| Usage events An event name from a fixed list (e.g. “an import finished”), a number or error code, plus app version, platform, language and a random identifier for your installation |
Finding out which parts break, and on which platform. The events never contain lap times, positions, names, track names or notes. They are not linked to your account — no user id is stored with them — but they are tied to a random identifier for your installation, so one crash on one phone can be told apart from a hundred crashes everywhere. That makes them pseudonymous rather than anonymous, and we treat them as personal data. Switch them off under More → Feedback and nothing is sent | Yes, without your identity |
| Feedback you send The text you write, the category you picked, an optional contact address, any session data you tick to attach, plus app version, platform and language |
Answering you and fixing what you reported. Sent only when you press Send under More → Feedback. Unlike usage events this is linked to your account, so we can look into what actually happened on it — please do not put anyone else’s personal details into the message | Yes, when you send it |
| Camera | Scanning a friend’s QR share code. Frames are read in memory and never stored | No — nowhere, ever |
Location, specifically
Tidel uses precise location because a lap time is meaningless without it: the app has to know where the finish line is and when you crossed it, to within a few metres.
Tidel does not request background location. On Android, recording runs in a foreground service with a permanent notification so you can see it is running. On iOS, location is used while the app is in use. If a future version needs background location, this page and the app’s permission prompts will say so before it is turned on.
What Tidel deliberately does not do
- No advertising, and no advertising identifiers.
- No third-party analytics, crash-reporting or attribution SDKs. There is no Google Analytics, Firebase, Crashlytics, Sentry, Amplitude, Mixpanel, AppsFlyer or anything similar, and no data goes to any company other than the two processors listed below. Tidel does record its own error reports — the message, the file and the line number — on Tidel’s own server, so a crash nobody reports still gets fixed. They contain no lap times, no positions, no names and no notes, and the same switch under More → Feedback turns them off.
- No selling of data, to anyone, for any purpose.
- No advertising identifier, and no hardware identifier. We never read the IDFA, the Android advertising id, IMEI, MAC address or serial number, and we do not collect your phone model. Usage events do carry an identifier the app generated at random for this installation, plus platform, app version and language. It belongs to nobody but this copy of Tidel, it disappears if you reinstall, and it is deleted when you delete your account.
- No public leaderboard you end up on without asking.
3. What never leaves your phone
- Your rider profile — age, weight and resting heart rate, if you enter them. Used to estimate training load locally. Never uploaded.
- Your profile picture.
- Camera frames from QR scanning.
- Local backups that the app writes to its own folder so an app update cannot cost you your history. Be aware of one thing: these files contain your sessions, and therefore heart rate if you have imported any. They live in the app’s own documents folder, which means they are included in an iCloud or Android device backup if you have that turned on — and on iPhone it is on by default. If you would rather your heart rate never reached iCloud, turn Tidel off in Settings → Apple ID → iCloud → iCloud Backup. The manual export under More → Backup goes only where you choose to save it.
4. Your account
Tidel creates an anonymous account for you the first time it needs one. There is no sign-up form, no email and no password. The account is what owns your sessions, and it is what makes it possible to move to a new phone without losing them.
If you use the web version, you can attach an email address and a password to that same account. Doing so does not create a second account and does not move your data — it is the same account, now with a way to sign in.
5. Sharing, and who else processes data
What you share yourself
You can send a session as a file or as a share code, and you can share a record with friends inside the app. That happens only when you choose it, to the people you choose. Your sessions are private by default.
Processors, and where the data goes
| Who | What for | Where, and on what safeguard |
|---|---|---|
| Supabase Inc. (database, file storage, sign-in) |
Stores your account, sessions, laps and raw GPS files on Tidel’s behalf | Your data is stored in the European Union (Ireland) and is not replicated outside it. Supabase Inc. is established in the United States, and its operations staff may access the infrastructure from there. That access is covered by the EU Standard Contractual Clauses, together with encryption in transit and at rest. |
| Esri Inc. (satellite imagery) |
Serves the map tiles behind the track map | Tiles are fetched from Esri’s servers in the United States. Tidel sends only the coordinates of the map square you are looking at — never your account, your name or your ride — but like any web request it carries your device’s IP address, which Esri may log. That is a transfer to a third country, made on the basis of the EU Standard Contractual Clauses. Turn the satellite background off in the app and the request is never made. |
Both are bound by a written data processing agreement. They may only process your data on Tidel’s documented instructions, may not use it for their own purposes, and are required to give it the same or an equal level of protection as this policy promises. Neither may sell it, share it onward, or use it for advertising or profiling. No other company receives your data. Apple Health and Google Play are not processors for Tidel — Health is a source you import from, and Play is a distribution channel.
We will disclose data to a public authority only where we are legally obliged to, and only to the extent of that obligation.
6. The public track catalogue
This is the one part that is genuinely public, so it is worth reading. Tidel keeps a shared catalogue of motocross tracks: name, position, outline, finish line and sector boundaries. Ride somewhere that is not in it yet and the track is added, so the next rider finds it.
Your ride is not part of that. What goes into the catalogue is the geometry of the track — never your GPS trace, your lap times, your heart rate or your account. One thing does travel with it: if you have entered a rider name, it is stored as a credit on the tracks you add, and other riders can see it. Leave the rider name blank under More → Rider and nothing identifying you is published at all. Deleting your account removes the credit from every track you added.
Track geometry stays in the catalogue when you delete your account, with the link to you removed. If one rider leaving erased the track, it would break it for everyone else who rides there.
7. How the data is kept
- Everything sent to or from the server travels over HTTPS/TLS.
- Raw GPS files live in a private storage bucket. Access is bound to the account that owns them — there is no public link to a session file.
- The database enforces access per row, in the database itself, not in the app. Your sessions are readable by your account and no other.
- Once a session file is uploaded it is immutable: the server refuses changes that would shrink or overwrite a recorded ride.
8. Retention and deletion
Sessions are kept until you delete them, because the whole point of the app is comparing this season to the last one. You can delete a single session at any time from inside the app.
Deleting the whole account
You can start this in the app under More → Your account → Delete my account, or from tidel.no/delete-account if you no longer have the app installed.
- The account is locked for writing immediately.
- There is a 7-day grace period during which you can undo it.
- After that, the following is permanently deleted: your profile, all sessions, laps and records, your settings, your friendships, and every raw GPS file you have uploaded.
- What remains: public track geometry, with your name and account removed from it, as described in section 6. Nothing else. Usage events tied to your installation are deleted along with everything else, and any feedback you sent is stripped of the link to your account.
Deletion is real deletion, not deactivation.
9. Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction, and a copy in a portable format. Two of these you can do yourself, immediately: the app can export your entire history as a file under More → Backup, and it can delete your account as described above. For anything else, write to post@tidel.no.
The legal basis for processing is the performance of the service you asked for, and your consent for optional items such as Apple Health access and usage statistics — both of which you can withdraw at any time, in the app or in your phone’s settings.
If you believe your data is handled wrongly you can complain to the Norwegian Data Protection Authority (Datatilsynet).
10. Children
Motocross riders are often young, and Tidel is usable by anyone who rides. The app does not ask for a date of birth, does not profile users, shows no advertising, and has no public social feed. It is not directed at children under 13, and if a parent or guardian wants an account removed, one email to post@tidel.no is enough.
11. Changes
If this policy changes, the date at the top changes with it. If a change actually affects what is collected or where it goes, the app will say so rather than quietly updating a web page.
12. Contact
Magnus Linnerud Støme · Tidel · Norway
post@tidel.no