Privacy Policy
Effective July 21, 2026
This policy explains how Race Poke handles information in its mobile app, website, and supporting services.
Information we process
Race Poke processes your phone number, username, optional profile photo, comments, likes, mentions, and in-app alert read state, Terms and age confirmation, selected race reminders and participation, friend relationships, notification preferences, registered push tokens and delivery status, blocks, reports, support messages, and basic security and service logs.
Phone numbers and OTP
Your +1 US or Canadian phone number identifies your account and is sent to our SMS provider to deliver one-time codes. Race Poke verifies the codes and does not use SMS for race reminders or promotional campaigns.
Contact discovery
If you explicitly choose Sync contacts and grant contact access, the app reads contact names and phone numbers. Names and contact IDs stay on your device. The app normalizes and deduplicates +1 phone numbers, pairs them with random lookup IDs, and sends batches for a transient account match. Submitted contact numbers are not stored, logged, or used to build an address book.
Push notifications
Race Poke stores an Expo push token, device platform, app version, notification preferences, and delivery status to send race reminders and the friend updates you enable, including friendship, like, comment, mention, interest, and racing activity. Notification payloads contain routing identifiers and no phone number or contact data. Apple or Google may process notifications through their platform services.
Friends, alerts, blocks, and reports
Race Poke stores friend relationships, feed likes and comments, comment mentions, in-app alert and read state, and safety choices. App invitations are prepared on your device and opened in your messaging app; Race Poke does not record the recipient or whether you send them. Reports may include a copy of reported content and optional details; moderation records may be retained after account deletion in anonymized form when needed for safety and legal obligations.
Profile photos
If you choose a profile photo, the app sends a cropped copy to Race Poke. Location and other embedded metadata are removed, Google Cloud Vision screens the image for explicit or violent content, and the approved image is stored in cloud storage for display to Race Poke users. The original photo remains in your library.
How we use information
We use information to authenticate users, operate reminders and social features, personalize the service, prevent abuse, respond to support and safety issues, maintain reliability, and comply with law. Race Poke does not sell personal information or use third-party advertising or cross-app tracking SDKs.
Service providers
We disclose only the information needed for providers to perform services on our behalf, including cloud hosting and database infrastructure, Twilio for SMS OTP delivery, Expo Push Service, Apple Push Notification service, Firebase Cloud Messaging, and app distribution platforms. Each provider may use that information only to perform those services for Race Poke, is required by contract to protect it to at least the standard described in this policy, and may not sell it or use it for its own advertising. Race Poke does not share user data with any parent, subsidiary, or other related entity.
Retention and security
Live account data, profile photos, likes, comments, mentions, and in-app alert state are kept while your account is active or until the underlying activity is removed. Expired OTP records are removed within 24 hours; contact-match quota counters within 7 days; notification delivery history and stale disabled push devices after 90 days; and support or race-feedback messages after one year. Resolved or dismissed moderation reports may be retained in access-controlled form for up to two years; open cases may remain until resolved. General service logs and encrypted backups are configured to expire within 30 days. A legal preservation requirement may extend a specific record. We use access controls and encryption in transit, but no system can guarantee absolute security.
Deletion and choices
You can replace or remove your profile photo, delete your comments, change social push preferences, revoke system permissions, block or unblock users, log out, and permanently delete your account in Settings. Deletion requires a fresh OTP and immediately removes live profile photos, comments, likes, reminders, friendships, and device data. Reports are de-identified when necessary for safety, and residual encrypted backups expire within 30 days. See the account deletion instructions.
Geography and age
Race Poke v1 is intended for adults aged 18 or older in the United States and Canada. The service is not directed to children.
Contact
Privacy or data requests may be sent to racedeadlines@gmail.com. Include your username but never include an OTP code.