Privacy Policy

1. Data Controller

Nordlate Oy
Helmipöllönkuja 15 A 5
90540 Oulu, Finland
Business ID: 3598078-2
Email: [email protected]

Nordlate Oy is the controller for personal data it processes in connection with Kartnote. Apple may separately process data as an independent controller under its own privacy policy when you use the App Store, iCloud, or other Apple services.

2. Data We Process

• Karting content: Information you enter in Kartnote, such as driver, kart, class, track, session, lap-time, setup, weather, and note data. The content may include personal data depending on what you enter.
• App settings and local activity: Preferences, identifiers generated by the app, and local activity records needed to operate features such as settings and the in-app rating prompt. These records are stored on your device and are not used for advertising or cross-app tracking.
• Subscription information: StoreKit provides the app with information needed to determine whether Kartnote Pro is active. Apple processes payment details. Nordlate does not receive your full payment card or bank account details.
• Diagnostics and App Store analytics: Apple may provide Nordlate with aggregated analytics, crash reports, and diagnostic information in accordance with your device and App Store analytics settings.
• Support and feedback: If you contact us, we process your email address, message, and any information you choose to provide. Kartnote's feedback email template may include the app version, build number, device model, and operating-system version to help diagnose an issue.

3. Local Storage and iCloud

Kartnote stores your karting content on your device. When iCloud is available for Kartnote, the app uses Apple's CloudKit service to keep that content synchronized through your private iCloud account across your devices. Nordlate does not receive your karting content on servers operated by Nordlate and does not routinely access content stored in your private iCloud database.

Apple's handling of iCloud data, security, retention, backups, and international transfers is governed by your agreement with Apple and Apple's privacy policy. Removing Kartnote from a device may not by itself remove data already stored in iCloud.

4. Purposes and Legal Bases

We process personal data only as needed to:

• Provide Kartnote, synchronize your data, and verify subscription access, based on performance of our contract with you.
• Respond to support and feedback, diagnose problems, secure the app, and improve its reliability, based on our legitimate interests in operating and improving Kartnote.
• Comply with legal obligations, including accounting, consumer-protection, and regulatory requirements.

Where processing requires consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

5. Sharing and Service Providers

We do not sell your personal data or use it for targeted advertising.

Data may be processed or disclosed:

• By Apple when providing the App Store, StoreKit, iCloud, CloudKit, diagnostics, and related platform services.
• By service providers used to host our website or email, only as needed to provide those services and subject to appropriate safeguards.
• When required by law, a court order, or a competent authority, or to establish or defend legal claims.
• In connection with a merger, acquisition, or transfer of Kartnote, subject to applicable data-protection law.

6. Retention

• Karting content and app settings remain on your device, and where applicable in iCloud, until you delete them or they are removed according to Apple's iCloud retention practices.
• Support and feedback correspondence is normally kept for up to 24 months after the matter is resolved, unless a longer period is required to meet a legal obligation or establish or defend a legal claim.
• Subscription, transaction, and diagnostic information made available by Apple is retained according to Apple's applicable retention practices and Nordlate's legal obligations.

7. International Transfers

Apple and other service providers may process data outside Finland or the European Economic Area. Where Nordlate is responsible for such a transfer, we use a lawful transfer mechanism and appropriate safeguards as required by applicable data-protection law. Apple's transfers are described in its own privacy documentation.

8. Your Rights

Subject to applicable law, you may have the right to access, correct, or erase your personal data; restrict or object to processing; receive data you provided in a portable format; and withdraw consent. You may also lodge a complaint with the Finnish Data Protection Ombudsman or your local supervisory authority.

You can manage or delete much of your Kartnote content directly in the app and through your Apple iCloud settings. To exercise rights concerning data controlled by Nordlate, contact [email protected]. We may need to verify your identity before completing a request. Requests concerning data controlled by Apple should be directed to Apple.

9. Children and Other Drivers

Kartnote is not directed to children under 13. If you enter information about a child or another driver, you are responsible for having the authority to do so and for using the information appropriately. A parent or guardian should manage use of the app by a child where required by law.

10. Security

We use reasonable technical and organizational measures to protect personal data. No electronic storage or transmission method is completely secure. You are responsible for protecting access to your device and Apple Account and for keeping appropriate backups or exports of important data.

11. Changes to This Policy

We may update this policy when Kartnote, our data practices, or legal requirements change. We will post the updated policy on this page and revise the date below. Where required, we will provide additional notice.