Who we are
Purple Lap is made by Ivies (“we”, “us”). We decide how the personal data described here is used, which makes us responsible for it: its controller, or “data fiduciary” under India’s Digital Personal Data Protection Act, 2023. You can reach us at hello@theivies.in.
What stays on your phone
Purple Lap works without an account and without a connection. This is stored only on your phone, in the app’s private storage, and we can’t see it:
- Your sessions: the GPS points recorded during a run, ride or walk (position, time, accuracy and speed), with distance and duration.
- Your circuits and laps: the routes you’ve made into circuits, their sectors, and every lap and sector time.
- Privacy zones: the places you’ve chosen to hide, such as home or work.
- Your settings: sport, engineer, units, display name, race number and colour.
- Crash reports: if the app closes unexpectedly, it saves the error with your phone’s make, model and Android version. It stays on your phone unless you choose to share it with us.
The app’s data isn’t included in your phone’s Google backup, so it doesn’t follow you to a new phone. Settings → Privacy & data → Export my data saves all of it as a file you can keep.
Location
Purple Lap uses your phone’s precise location only while you’re recording a session, and when you add a privacy zone at the spot you’re standing. While a session is recording, Android shows a notification, and timing carries on with the screen off. Purple Lap doesn’t ask for “all the time” location and doesn’t follow you when you aren’t recording.
Your recorded GPS points never leave your phone unless you export them yourself. A circuit’s route goes online only if you share that circuit with friends.
You can turn location off for Purple Lap at any time in Android’s settings. You won’t be able to record sessions without it.
Online features (optional)
Friends, shared circuits, leaderboards and Grand Prix weekends need our servers. They stay off until you turn on Settings → Online → Online profile, or go online to accept a friend’s invite. Then we store:
An account for your phone
The app creates it for you. There’s no email address, phone number or password to enter: the account is a random ID and a random secret, kept in your phone’s secure storage. We use the ID to recognise your phone, and nothing else about you is attached to it.
Your profile
Your display name, race number and colour. Your friends can see them, and so can anyone who has your invite code.
Friends and invites
Who your friends are and when you became friends, and your current invite code, which expires after 7 days. Anyone with your code can add you as a friend, so send it only to people you want on your grid. Removing a friend removes you from each other’s grids and gives you a new code, so they can’t use your old one to add you again.
Circuits you share
Only when you tap share: the circuit’s name, sport, length, sector lines, starting point and route, as a line accurate to about a metre. It doesn’t include your GPS points, times or speed. Your friends can see the circuit and race on it, and it’s saved on their phones. A circuit that passes through one of your privacy zones can’t be shared, and you can stop sharing a circuit at any time.
Laps on shared circuits
For circuits shared between you and your friends, the app sends the time and sector times of your laps and when you set them, but no location. When a circuit is first shared with you, the app times your recent sessions on it and sends those laps too. We keep your best lap on each shared circuit for the leaderboard, which shows you and your friends.
Grand Prix weekends and seasons
From those laps we work out weekend Grand Prix results, monthly season points and any Champion titles. Your friends can see them, and your position counts everyone who raced the circuit that weekend.
Premium status
Whether you have Premium and when it ends, so the right features work for you.
Turning Online profile off stops syncing but keeps what’s already on our servers. To remove it, delete your online account (see Deleting your data).
Purchases
Premium is sold through Google Play, and Google handles the payment: we never see your card or bank details. We use RevenueCat to check your purchases and tell the app whether Premium is active. Each time the app starts, it asks RevenueCat about your purchases using an anonymous ID. If you’ve turned online features on, that ID becomes your online account’s ID, so Premium also works with them. RevenueCat receives your purchase history from Google Play and basic technical details such as your IP address, app version and device type.
Who else handles your data
| Who | What for | What they get |
|---|---|---|
| Amazon Web Services | Runs our servers, in Mumbai, India | Everything under Online features, stored and processed for us |
| RevenueCat (USA) | Checks your Premium purchases | An anonymous or online-account ID, your Google Play purchases, technical details |
| Google Play | Delivers the app and sells Premium | Your purchase and payment, under Google’s privacy policy |
Amazon Web Services and RevenueCat handle data only on our instructions. Google Play is responsible for its own use of your data. We don’t use advertising networks, analytics or tracking tools, and we don’t sell or rent your data to anyone. We’d share it otherwise only if the law required us to, for example in answer to a valid legal request.
RevenueCat is based in the USA, so purchase information is processed there. Everything else we store is kept in India.
What we don’t do
- Show ads, or use your data for advertising.
- Use analytics, tracking or crash-reporting services.
- Sell or rent your data.
- Collect location when you aren’t recording, or ask for background location.
- Ask for your contacts, photos, camera or microphone.
Why we use it
- To provide what you ask for: timing your sessions, and, if you turn them on, friends, shared circuits, leaderboards, Grand Prix weekends and Premium.
- With your consent: location, which you allow in Android’s prompt and can withdraw at any time; and online features, which you choose to turn on.
- To keep things running and secure, and to meet the law: for example spotting impossible lap times and keeping the purchase records the law requires.
How long we keep it
| Data | Kept for |
|---|---|
| Profile, friends, shared circuits, best laps, season points and titles, Premium status | Until you delete your online account |
| Invite codes | 7 days |
| Records that stop a lap being counted twice | 60 days |
| Weekend Grand Prix results | 400 days |
| Server error logs (no request contents) | 7 days |
| A note that an online account was deleted: its random ID and the date | Kept, so purchase updates that arrive later aren’t attached to it again |
| Everything on your phone | Until you delete it or uninstall the app |
Deleting your data
Your online account
In the app, go to Settings → Online → Delete online account. We delete your profile, friends, invite code, shared circuits, best laps, Grand Prix and season results and Premium status from our servers. Your shared circuits disappear from your friends’ phones the next time their app syncs. Deletion starts straight away and usually finishes within minutes. If any step fails, we finish it within 14 days. We keep only a note of the account’s random ID and the date it was deleted, because Google Play keeps sending updates about a subscription until it’s cancelled, and the note stops them being attached to the account again.
If you can’t open the app, for example because you’ve lost your phone, ask us to delete your account.
On your phone
Settings → Privacy & data → Delete all my data removes your sessions, circuits, laps and privacy zones from your phone, and first takes any circuits you shared off your friends’ phones. It doesn’t delete your online account: use Delete online account for that. Uninstalling the app removes everything it stored on your phone.
What deleting doesn’t cover
Google Play keeps its own records of your purchases, and RevenueCat keeps purchase records for subscriptions and accounting. Email us if you’d like your RevenueCat records deleted too. Deleting your account doesn’t cancel a subscription: cancel it in Google Play.
Your rights
Depending on where you live, you have the right to:
- see the personal data we hold about you, and get a copy;
- correct it (you can change your name, number and colour in the app at any time);
- have it deleted;
- withdraw your consent, and object to or restrict how we use it;
- move it elsewhere (Export my data gives you what’s on your phone as a file);
- name someone to act for you if you can’t.
Email hello@theivies.in to use any of them. Online accounts have no email or name we can check, so we may ask for details that show the account is yours. We’ll reply within 30 days. You can also complain to a data protection authority, such as the Data Protection Board of India, or the supervisory authority where you live.
Security
Everything the app sends to our servers is encrypted in transit (HTTPS). Your account secret is kept in Android’s secure storage, and each request to our servers needs a sign-in token that expires after an hour. Only the people who run Purple Lap can access our servers. No system is perfectly secure, but we work hard to protect your data, and if a breach affects you we’ll tell you and the authorities as the law requires.
Children
Purple Lap isn’t made for children under 13, and we don’t knowingly collect their data. If you’re under 18, please use the online features only with a parent’s or guardian’s permission. If you think a child has an online account, email us and we’ll delete it.
This website
This website uses no cookies, analytics or third-party scripts, and serves its fonts itself. Our hosting provider may keep standard access logs, such as IP addresses and the pages requested, to keep the site secure.
Changes to this policy
When we change this policy, we’ll update the date at the top. If a change affects how we use your data in a significant way, we’ll tell you in the app before it applies.
Contact and grievances
For questions, requests or complaints about your data, email hello@theivies.in. We aim to reply within 7 days and to resolve any request within 30 days.