RC Pit Clock on an Android phone

1. Data controller

Controller

LSI Tech, sole trader

Address

326 rue Hoche, 84120 Pertuis, France

Registration

SIRET 108 094 244 00010

Contact

lionel@lsitech.fr

Given the nature and the volume of the processing carried out, LSI Tech is not required to appoint a data protection officer. Any question about personal data can be sent directly to the address above.

2. What this page covers

This page describes RC Pit Clock on an Android phone, and nothing else. The processing activities really are separate: they do not involve the same data or the same purposes, and putting them on one page would force every reader to sort out which part concerns them.

The other policies:

• RC Pit Clock on a Garmin watch
• The lsitech.fr website (French only, as the site itself is)

Cette politique en français.

3. What the app sends, and when

RC Pit Clock runs entirely offline during a race. It talks to our servers for one reason only: to know how many free races you have left.

The call happens at three moments, and no others: when the app opens, when the Licence screen opens, and at the end of a race, the only moment the counter changes. Never during a race. With no network the app carries on working: the local counter takes over and the next synchronisation catches up.

The original identifier never leaves the phone

Android gives each app a device identifier that belongs to the phone and publisher pair: no other app, from any other publisher, gets the same value, and a factory reset generates a new one. The identifier carries no name, no Google account and no serial number.

The app does not send it to us. It turns it on the phone into an irreversible cryptographic fingerprint (SHA-256 salted with a secret only we hold) and sends only the result, sixty four characters. The original value therefore never leaves the device, not even encrypted.

The race counter

The same call sends the number of races run to their end. A race stopped by hand does not count: only a heat that reached its configured duration is counted.

That counter is the whole reason for the exchange. On Android no local storage survives an uninstall: without an outside memory the free races could be taken again and again, and there could be no trial at all.

Hardware profile

The same call sends nine hardware characteristics: model, manufacturer, Android version and API level, screen width and height, screen density, the configured language, and the time format (12 or 24 hour).

These describe the device and its settings: two identical phones, updated and configured the same way, return exactly the same values. None describes the owner, none distinguishes you from another owner of the same hardware. They decide which screen sizes to check the layout on, and from which Android version the effort is worth making. The legal basis is legitimate interest.

Identifying the calling software

Every call carries a user agent, the header any HTTP client automatically attaches to say what software is sending the request. It is kept, and tells a real phone apart from the copies run by Google Play's analysis robots, which would otherwise count as genuine installations. It describes software, not a person. The legal basis is legitimate interest. Your IP address is neither read nor recorded by the licence service.

4. Purpose and legal basis

The fingerprint exists only to count the free races already used and to remember that the app declares itself subscribed. The legal basis is performance of the contract: without it, there could be no limited free trial and no way to recognise a paying customer.

The subscription does not go through us

The app is sold as a yearly subscription, taken out and charged by Google Play, which is the controller of that processing. The app never sees your card details, and Google sends us neither your name, nor your email address, nor your payment method, nor your next renewal date.

The subscription is verified on the phone, by Google Play: our servers have no say over it, and an outage on our side blocks no subscriber. Conversely, cancelling is done with Google Play, not with us.

What our service receives about your subscription is three values, sent by the app itself and never by Google:

• a plain yes or no, used to know whether assisted board reading is open to you;
• the Google Play order number, in the form GPA.0000-0000-0000-00000, which lets us match an installation to a transaction when you write to us about a payment;
• the date you subscribed.

The order number is issued by Google Play for the transaction itself. It carries neither your name, nor your email address, nor your payment method, and on its own it gives no access to your Google account. We learn neither the amount charged, nor your next renewal date, nor whether you have cancelled.

This exists for support: without it, a driver who writes "I paid and the app is still locked" cannot be matched to their transaction, and we have no way of checking the claim. The legal basis is performance of the contract.

5. What the app does not send

No location, no contacts, no files, no advertising identifier, no email address, no Google account identifier, no card details: the app never sees them, they are only ever entered in Google Play's own payment sheet. No race data: your lap times, your pit plans and your settings stay on the phone and go with the app if you uninstall it.

The app contains no advertising, no analytics and no third-party tracking library.

6. The board photo, and what becomes of it

Assisted board reading lets you photograph the heat board posted at the club instead of typing it in. The photo is then sent to our server, which passes it to a recognition service to extract the times.

That photo is kept for thirty days, then deleted automatically. We use it to understand readings that fail and to improve the reader: every club lays its sheet out differently, and there is no other way to find out than to look at the sheets that went wrong. The legal basis is legitimate interest in making a feature you paid for actually work.

What is kept alongside the photo: its date, its size, the fingerprint of the device that sent it, and the result of the reading. Nothing else. The files are reachable only by the publisher, behind authentication, and are never served publicly.

A PDF is never sent. It is read on the phone itself. The same goes for a photo when assisted reading is unavailable: in both cases nothing leaves the device.

A club sheet may carry drivers' names. If you would rather a photo were not kept, write to us with the date and your phone model and we will delete it.

7. How long data is kept

The fingerprint and its counter are kept for as long as the installation may still ask for free races or an assisted board reading. Board photos are deleted after 30 days. Technical logs of the licence service are purged after 90 days.

What we keep is a COUNTER, not an entitlement: your subscription lives with Google Play, and erasing your record here does not cancel it.

8. Exercising your rights over your licence

Write to the address given above. Our database holds no value that leads back to a person, so we cannot find your record from your name or your email address: give us the phone model and the approximate date you first used the app, and we will help you identify the record concerned.

That erasure covers OUR counter, and nothing else. It does not cancel your subscription, which lives with Google Play: cancellation and any refund are asked for there, within the periods Google provides. Erasing your record here does, however, lose the trace of the free races already used, and that reading cannot be restored.

9. Server logs

Like any web server, the host keeps connection logs (IP address, date and time of the request, page requested, client type) for security and operational reasons. This processing rests on LSI Tech's legitimate interest in keeping its infrastructure secure. These logs are kept for no longer than 12 months and are never used commercially nor cross-referenced with anything else.

The licence service runs on the same hosting. Its own code, however, neither reads nor records your IP address.

10. Transfers outside the European Union

No data is transferred outside the European Union. The website, the licence service and the mail service are all hosted within the European Union.

11. Security

LSI Tech applies appropriate technical and organisational measures to protect the data it processes: encrypted transport (HTTPS), access control, regular system updates, backups, and a strictly limited number of authorised people.

12. Your rights

Under articles 15 to 22 of the GDPR, you have the following rights over your data:

• Access: confirmation that your data is being processed, and a copy of it.
• Rectification: correction of inaccurate or incomplete data.
• Erasure: deletion of your data, subject to legal retention obligations.
• Restriction: temporary suspension of a processing activity.
• Objection: objection to processing based on legitimate interest.
• Portability: your data in a structured, machine-readable format.

Write to lionel@lsitech.fr, or to the registered address above. You will get an answer within one month. Proof of identity may be requested where there is reasonable doubt about who is asking.

13. Complaints

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr. As a resident of another Member State, you may also complain to your own national authority.

14. Changes to this policy

This policy may change to reflect changes in the product or in the law. The version that applies is the one published on this page on the day you read it. Should a future version process any additional data, this page would be updated before that version is released.

Last updated : 4 September 2026.