Privacy Policy

1. Introduction

GoKanic ("we," "us," or "our") operates the GoKanic platform, which connects go-kart racers with professional service providers and provides a peer-to-peer marketplace for buying and selling kart equipment. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application (available on iOS and Android), and related services (collectively, the "Service").

We are committed to protecting your privacy and ensuring you understand how your data is handled. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Contact: For any privacy-related questions, please contact us at support@gokanic.com

2. Information We Collect

2.1 Information You Provide

When you register and use GoKanic, you may provide:

• Account Information: Name, email address, and profile picture
• Business and Contact Information: Business name, description, website, phone number, email, and physical address (for vendors)
• Service and Listing Information: Service descriptions, pricing, images, categories, and marketplace listing details (title, description, price, condition, images)
• Messages and Communications: Content you send through in-app messaging, including text and media
• Reviews and Ratings: Ratings, written reviews, and photos you submit
• Location Data: City, state, and country information you provide when setting your service area or listing location
• Racing Activity Data: Race session details, personal equipment and inventory information, and event scheduling data
• Track Preferences: Which racing tracks you follow or visit
• Photos and Media: Images you upload for profiles, services, listings, reviews, or messages

2.2 Information from Third-Party Services

When you sign in using a third-party provider, we receive:

• Google Sign-In: Name, email address, and profile picture from your Google account
• Facebook Sign-In: Name, email address, and profile picture from your Facebook account (when available)
• Apple Sign-In: Name and email address from your Apple ID. Apple may provide a private relay email address if you choose to hide your email.

We only request the minimum information necessary for authentication. We do not access your contacts, calendars, or other personal data from these services.

2.3 Automatically Collected Information

When you access GoKanic, we may automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Feature interactions, activity data, and online status
• Log Data: IP address, access times, referring URLs
• Push Notification Tokens: Device identifiers used to deliver push notifications
• Unique User Identifier: An internal identifier used to associate your data with your account
• Subscription and Purchase Information: Subscription status and purchase history
• Location Data: When you use location-based features (such as finding nearby services), we may access your device's location with your permission
• Camera and Photo Library: When you choose to upload images, we access your camera or photo library with your permission

3. How We Use Your Information

We use your information solely to:

• Create and manage your account
• Provide, maintain, and improve the Service
• Display your vendor profile and services to potential customers
• Facilitate connections between racers and service providers
• Display marketplace listings to potential buyers
• Enable messaging between users
• Deliver push notifications for messages, reviews, and other activity
• Process subscription payments and manage entitlements
• Send service-related communications and email notifications
• Monitor email deliverability for service communications
• Enable content moderation and enforce community standards
• Enforce user blocking preferences
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract Performance: Processing necessary to provide you with our Service (account creation, vendor profiles, service listings, messaging, marketplace)
• Consent: When you explicitly agree to optional features or communications
• Legitimate Interests: To improve our Service, ensure security, and prevent fraud, where these interests are not overridden by your rights
• Legal Obligation: When we must comply with applicable laws

5. Information Sharing

We do not sell your personal information. We may share your information only in these limited circumstances:

• Public Profiles and Listings: Vendor profiles, service listings, marketplace listings, and reviews are visible to other users of the platform
• Messaging: When you send a message, the recipient can see your name and profile picture
• Service Providers: Third-party companies that help us operate our Service (see Section 6), who are bound by confidentiality obligations
• Reports and Moderation: Report details are shared with GoKanic administrators for review. Blocking preferences are not disclosed to the blocked user.
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect the rights, property, or safety of GoKanic, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

6. Third-Party Services

GoKanic uses the following third-party services:

6.1 Authentication Providers

• Google OAuth: For secure sign-in. Google Privacy Policy
• Facebook/Meta OAuth: For secure sign-in. Meta Privacy Policy
• Apple Sign-In: For secure sign-in on iOS. Apple Privacy Policy

6.2 Hosting and Infrastructure

• Convex: Backend database and serverless functions. Convex Privacy Policy
• Vercel: Website hosting and analytics. Vercel Privacy Policy

6.3 Payment Processing

• Stripe: Processes subscription payments. We share your email and name with Stripe. Stripe handles and stores all payment card information — GoKanic never receives or stores your card details. Stripe Privacy Policy
• RevenueCat: Manages subscription entitlements for iOS In-App Purchases. RevenueCat Privacy Policy

6.4 Email Delivery

• Resend: We use Resend to deliver transactional emails such as message notifications and service communications. Resend collects delivery and engagement data to ensure email deliverability. Resend Privacy Policy

6.5 Push Notifications

• Expo Push Notifications: We use Expo's push notification service to deliver notifications to your mobile device. Expo Privacy Policy

6.6 Location and Weather Services

• Google Places API: Provides location autocomplete when you set your service area or listing location. Google Privacy Policy
• Google Weather API: Provides weather forecasts for racing tracks. Google Privacy Policy

7. Google API Services User Data Policy

Specifically, GoKanic:

• Only uses Google user data (name, email, profile picture) for authentication and account creation
• Does NOT transfer Google user data to advertising platforms or data brokers
• Does NOT use Google user data for advertising, ad targeting, or personalized ads
• Does NOT use Google user data for credit, lending, or insurance eligibility decisions
• Does NOT use Google user data to train artificial intelligence or machine learning models
• Limits access to Google user data to employees and contractors who need it to provide our Service

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Upon account deletion, we will delete or anonymize your personal data, except where we are required to retain certain information for legal, regulatory, safety, or fraud prevention purposes.

9. How to Delete Your Data

You can delete your GoKanic account and all associated data using either method below:

What Gets Deleted

When you delete your account, we delete or anonymize:

• Your user profile and account information
• Your vendor profile and service listings (if applicable)
• All marketplace listings and associated images
• All messages and conversations
• All reviews you authored
• All uploaded images and media
• All racing activity and equipment data
• Your authentication data and push notification tokens

Active subscriptions will be cancelled. For Apple In-App Purchase subscriptions, you must also cancel your subscription through your Apple ID settings to prevent future charges.

Third-Party Sign-In

If you signed up using a third-party provider, we recommend also revoking GoKanic's access in that provider's settings:

• Facebook: Remove access in your Facebook Settings
• Apple: Remove access in Settings > Apple ID > Sign-In & Security > Sign in with Apple
• Google: Remove access in your Google Account Permissions

10. Your Rights

10.1 Rights for All Users

All users of GoKanic have the right to:

• Access the personal information we hold about you
• Update or correct inaccurate information
• Delete your account and associated data
• Request a copy of your data by emailing support@gokanic.com
• Opt out of non-essential communications

10.2 Additional Rights for EU/EEA Residents (GDPR)

If you are in the European Economic Area, you also have the right to:

• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

10.3 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Right to Know: Request disclosure of personal information collected, used, and disclosed
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights

To exercise any of these rights, please contact us at support@gokanic.com.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in Transit: All data transmitted to and from GoKanic is encrypted using HTTPS/TLS
• Secure Authentication: We use industry-standard OAuth 2.0 for authentication
• Access Controls: Access to personal data is restricted to authorized personnel only
• Regular Security Reviews: We regularly review and update our security practices
• Secure Infrastructure: Our data is hosted on secure, enterprise-grade cloud infrastructure

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. International Data Transfers

GoKanic is operated from Canada. If you are accessing the Service from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada or other countries where our service providers are located.

We ensure that any international transfers of personal data are protected by appropriate safeguards in accordance with applicable data protection laws.

13. Children's Privacy

GoKanic is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@gokanic.com, and we will delete such information.

14. Cookies and Similar Technologies

GoKanic uses cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with our Service

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

15. "Do Not Sell or Share" Notice

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our Service
• Obtain your consent before using your data in materially different ways

We encourage you to review this Privacy Policy periodically for any changes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU/EEA residents, you may also lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns adequately.