Privacy Policy
Next Dimension Fun LLC ("VeraTime," "we," "us") operates VeraTime, a ski-race timing product. This policy explains how we handle personal information in our mobile apps, web app, websites, support, and related services. Contact: privacy@vera-time.com.
1. Who uses VeraTime
Accounts and purchases are intended for people age 18 or older and authorized race officials. VeraTime is not directed to children. Race officials and organizations may enter athlete names, bibs, team, sex category, and performance data, including information about minors. Those organizations are responsible for their authority, notices, consents, and instructions to VeraTime. Parents or guardians may contact us about a minor's data.
2. Information we collect
- Account and contact data: Firebase user ID, email, display name, optional phone number, sign-in provider, account-recovery and verification records.
- Race data: race names, locations, dates, roles, team/group configuration, athlete names, bib numbers, sex category, starts, finishes, DNFs, corrections, notes, calculated results, presence, and audit logs.
- Race Radio: short audio clips, transcripts, sender role, device/session identifiers, and timestamps when that feature is used.
- Purchases: product, entitlement, transaction identifiers, status, dates, and limited customer metadata from Apple, Google Play, or Stripe. We do not receive full payment-card numbers.
- Technical and support data: app version, build, platform, network/service events, security logs, messages you send us, legal acceptance, and privacy requests.
- Optional marketing: email and consent record only when you separately opt in.
3. How and why we use information
We use information to authenticate users; create, time, recover, display, correct, share, and export races; provide Race Radio; process purchases; provide support; prevent abuse; maintain security and auditability; comply with law; and improve reliability and usability. We may analyze aggregated or de-identified operational patterns to improve VeraTime. We do not sell personal information and do not use it for cross-context behavioral advertising.
For EEA/UK users, our legal bases may include performing a contract, legitimate interests in operating and securing VeraTime, compliance with legal obligations, consent for optional marketing or where required, and protection of vital interests in rare emergencies. Consent can be withdrawn without affecting earlier lawful processing.
4. When information is shared
Information is available to authorized race participants and to people with whom a race organizer shares a result or export. We use service providers that process data under contract, including Google/Firebase and Google Cloud, Apple, Google Play, Stripe, and Brevo. We may disclose information to comply with law, protect rights or safety, investigate abuse, or support a merger or sale with appropriate safeguards. We do not sell personal data.
5. International transfers
Next Dimension Fun LLC and primary infrastructure operate in the United States. Information from other countries may be transferred to and processed in the United States, where laws may differ. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, applicable adequacy decisions or certified frameworks, and supplementary technical/contractual measures. Contact us to request information about the safeguard relevant to you.
6. Retention
- Race Radio audio is intended to be deleted within 24 hours; storage lifecycle controls provide a backstop of up to 30 days. Transcripts remain with the race record until deletion or account/race lifecycle action.
- Race and account data remains while needed to provide the service and preserve shared race integrity. Verified account-deletion requests are targeted within 30 days; residual backups may persist up to 90 days before rotation.
- Email verification and recovery records are deleted no later than 24 hours after expiration by scheduled cleanup.
- Marketing contact data remains until unsubscribe; a minimal suppression record may remain to honor the choice.
- Purchase, legal-acceptance, tax, fraud, and security records may be retained for up to seven years or longer where law or a dispute requires.
- Closed privacy-request records are retained for three years. Diagnostic/service records, when collected, are generally retained no longer than 24 months.
We may retain a limited record when necessary for legal obligations, security, fraud prevention, exercising or defending claims, or preserving other users' legitimate race records. We will explain material exceptions in response to a request.
7. Your choices and rights
Depending on location, you may have rights to know/access, correct, delete, export/port, restrict, object, withdraw consent, appeal a decision, and complain to a supervisory authority. We extend the Privacy Center request tools to all users, subject to identity verification and lawful exceptions. We do not discriminate for exercising privacy rights. Authorized agents may contact us; we may verify authority and identity.
8. Security and incidents
We use access controls, authenticated APIs, role grants, encryption in transit, managed cloud security, short-lived credentials, audit logs, and retention controls. No system is perfectly secure. If an incident triggers notification duties, we will provide notices as required by applicable law, including Michigan law.
9. Children
We do not knowingly create direct accounts for children under 13 or target the service to them. If we learn that a child submitted account data directly without proper authorization, contact us and we will investigate and delete it as required. Athlete data entered by an adult organization is handled for the race service under that organization's authority.
10. Changes
We may update this policy. We will post the effective date and provide additional notice or request renewed consent/acknowledgment when a material change requires it.
11. Contact
Next Dimension Fun LLC, Michigan, USA · privacy@vera-time.com · Support. EEA/UK users may contact their local data-protection authority. EU availability remains subject to product launch decisions and any representative requirement that applies.