Last updated: 8 November 2026. This policy explains what Zero Grip collects, why, and what you can do about it. It applies to the Zero Grip app and to zerogrip.app.
Zero Grip is operated by Bloomay SAL (Offshore), Antelias, Lebanon ("we"). We are the controller of the personal data described here. Contact: support@zerogrip.app.
Zero Grip holds two different things, and they are treated differently.
Competition records. Results of drift competitions — names of classified drivers, race numbers, nationality where the organiser published it, qualifying scores, battle outcomes, placings and points — collected from classifications published by the series, their sanctioning bodies and motorsport press. Every event, result and standings table in the app records the public source it came from. A driver profile exists for every classified driver whether or not that person uses the app.
Account data. What you give us when you create an account and use the app: see section 4.
We process competition records on the basis of our legitimate interest (GDPR art. 6(1)(f)) in publishing an accurate, sourced record of a public sport, which is the same information the organisers and press have already made public, together with the public interest in sports reporting. We do not combine these records with anything that is not public unless the driver chooses to claim the profile.
If you are a driver listed in the app you can, at any time:
Business listings. The app's Directory lists drift schools, garages and parts shops from their own public pages. We keep business contact details only: the name, address, website, Instagram handle and phone number the business publishes for its customers. Owners can claim a listing, correct it or ask for its removal at support@zerogrip.app. Posts and product photos that a business adds to its listing are that business's public content.
| Data | Where it comes from | Why | Lawful basis |
|---|---|---|---|
| Email address; name and profile picture from Google if you sign in with Google | You / Google | To create and secure your account and send sign-in codes | Contract (art. 6(1)(b)) |
| Display name, avatar, home country | You | Shown with your comments and posts | Contract |
| Follows, likes, comments, posts, reports, blocks | You | To run the feed, notifications and moderation | Contract |
| Notification preferences and the push token of your device | You / your device | To deliver the notifications you switched on | Consent (you can turn each one off) |
| Driver claim: the verification code, your Instagram handle or the email you used as proof | You | To verify that a profile is yours | Contract |
| Photos and bio you add to a claimed profile | You | Shown on your public driver profile | Contract |
| Usage events: which screens you open and the actions you take in the app (follow, search, claim, open a notification), with a per-install identifier and, when signed in, your account | Your device | To see how the app is used, keep it working, and send relevant announcements | Legitimate interest |
| Approximate location: country, region and city | Derived from your IP address when the app sends usage data | To see where the app is used and send announcements relevant to where you are | Legitimate interest |
| Technical logs (IP address, device type, timestamps of requests) | Your device | Security, abuse prevention, keeping the service running | Legitimate interest |
Usage statistics are collected by us, stored in our own database in the EU and kept for 90 days (daily totals without identifiers are kept longer). We do not use third-party analytics or advertising SDKs, trackers across other apps or sites, or fingerprinting, and we do not sell personal data. Crash reports reach us only if you share them with Apple and Apple shares them with developers.
We derive your approximate location (country and city) from your IP address when the app sends usage data; the IP address is not stored. The app never asks for or reads your device's location. The lookup uses IP Geolocation by DB-IP, licensed under CC BY 4.0.
Announcements (for example, a round this weekend in your region) are sent as app notifications to people whose settings allow them; the "Announcements" switch in the app turns them off at any time.
Public by design: your display name and avatar appear with your comments and posts; a claimed driver profile is public, as the competition record already is. Your email address, follows, notification settings, device tokens and reports are never public.
Processors we use:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | EU (Frankfurt) |
| Resend | Sending sign-in and account emails | EU / US — standard contractual clauses |
| Sign in with Google, if you choose it | Google's own privacy policy applies to the sign-in | |
| Apple | Push notifications, Sign in with Apple, TestFlight and App Store distribution | Apple's own privacy policy applies |
| Netlify | Hosting this website | Global network — standard contractual clauses |
| Cloudflare | Domain name service and routing email to support@zerogrip.app | Global network — standard contractual clauses |
Where a provider processes data outside the EU/EEA we rely on the European Commission's standard contractual clauses or an adequacy decision. We may disclose data if the law requires it or to protect the safety of users.
Under the GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent where consent is the basis. Account deletion and notification settings are built into the app; for anything else write to support@zerogrip.app. We answer within one month. If you live in the EU or EEA you can also complain to the data protection authority of the country where you live or work.
Zero Grip is not directed at children. You must be 16 or older to create an account. Competition records may include drivers under 16 who compete in junior classes; those records contain only what the organiser published and carry no account.
Data is encrypted in transit and at rest with our providers. Access rules are enforced in the database itself: your private data is readable only by you, and content moderation is limited to the administrator. Sign-in uses one-time codes or your Google or Apple account; we never see or store a password.
zerogrip.app sets no cookies and runs no analytics. Our hosting provider records standard access logs for security.
If this policy changes in a way that matters to you, the app will tell you before the change takes effect. The date at the top is the version in force.