1. About This Privacy Policy

LaneTrax Inc. ("LaneTrax", "we", "us", or "our") provides the LaneTrax iOS mobile application (the "App"), our websites, and related account, support, referral, and promotional services that link to this Policy (collectively, the "Services"). This Policy covers information that identifies you or can reasonably be linked to you, including information treated as personal data under applicable law ("Personal Information").

LaneTrax is available internationally. This Privacy Policy applies wherever we offer our Services. Your rights and the legal requirements that apply to our processing depend on your location and the circumstances. The regional disclosures explain rights and requirements that apply in particular jurisdictions and do not limit protections provided by applicable law.

LaneTrax Inc. is responsible for the processing described in this Policy and acts as the controller where that concept applies. Our contact details appear in Section 14. This Policy explains our practices; it does not replace a consent request where consent is required. Our Terms of Service (the "Terms") govern use of the Services.

2. Information We Collect and How We Use It

We collect information you provide, information generated when you use the Services, and information received from other sources in connection with your use of the Services. The information involved depends on the features you use, your device settings, and your choices. We may associate these sources with your account to operate the Services and understand their use.

Automatic collection may involve software development kits ("SDKs") and similar technologies. Section 4 explains tracking choices, and Tracking Technologies identifies individual services. The recipients below depend on the purpose and integration; not every recipient receives every category of information.

2.1 Information, Sources, and Uses

The App uses your phone's camera to capture and analyze video of you bowling. Its video replay feature ("Replays") saves compressed clips of individual shots. Section 3 explains recording, cloud uploads, and the additional uses of bowling videos and shot data.

2.2 Choices and Additional Uses

You can choose not to provide optional information. If you do not provide information necessary for an account, analysis, request, or feature, we may be unable to provide that part of the Services. Payment credentials are handled by the relevant payment platform under its own privacy practices; they are distinct from the purchase information supplied to LaneTrax. Additional terms or privacy disclosures may apply to a particular promotion.

We also use relevant information to prevent fraud and abuse, protect accounts and systems, enforce our agreements, investigate complaints, maintain business records, comply with legal obligations, and establish, exercise, or defend legal claims. If we propose a materially different use, we will provide additional information and obtain consent where required rather than treating this Policy as unrestricted permission.

3. Bowling Videos, Shot Data, and Model Development

Video clips of you bowling recorded with your phone's camera, any recorded audio, diagnostic camera images, and associated shot data ("Bowling Content") are collected and processed as described in this section. Associated shot data includes calculated results and metrics, ball trajectories, frame-by-frame ball and lane detections, processing histories, and account, session, camera, and recording details. We store this information in cloud storage. Bowling Content can be Personal Information even when a name is not attached—for example, where a person is recognizable in a recording.

3.1 Providing App Features

We process Bowling Content to analyze bowling activity, generate measurements and insights, display results, save your shot history, and let you replay saved videos and review past sessions. Shot analysis runs on your device. Replays are enabled by default. When enabled, the App saves video clips of your shots and uploads them with associated shot data to cloud storage. Clips are not necessarily the entire camera recording or uncompressed originals. Microphone permission is optional; recording can continue without audio. Failed capture, export, or upload can prevent a clip from reaching cloud storage.

You can disable Replays in the App's settings. Doing so prevents new replay recording and export through that flow, but does not cancel previously queued uploads or disable shot results, analytics, or separate lane-diagnostic image uploads. This does not give LaneTrax access to unrelated videos elsewhere on your device. Our staff and Google, our cloud infrastructure provider, can process submitted content for the purposes described here. Recordings can include people other than the account holder, including minors, and their voices.

3.2 Computer-Vision Analysis and Inferences

Computer-vision and machine-learning systems generate measurements and inferences from Bowling Content. Outputs may be incomplete or inaccurate and can differ from the underlying recording. You can contact us about inaccurate Personal Information or a concern about an inference. Section 9.2 explains applicable rights concerning automated decisions.

3.3 Model Development and Product Improvement

We use Bowling Content to develop, train, test, evaluate, and improve the computer-vision and machine-learning systems used for bowling analysis. This may include preparing training examples, checking model outputs, comparing performance, and reviewing errors. Training and evaluation use both content in user storage and selected copies in separate datasets. LaneTrax staff and our processing infrastructure have access for these activities.

Training may use full-frame, unblurred recordings to preserve visual detail. Identifying people is not a training purpose, and a person's name or email address is not needed for that purpose. The recordings may nevertheless identify you or other people and remain subject to the protections for Personal Information.

Model development is a separate purpose from generating your individual results and making your shot history available to you. You may opt out of the use of your Personal Information for model training and evaluation without closing your account. A training opt-out covers future use and removal of your Personal Information from existing training and evaluation datasets, subject to any applicable legal exception. It does not by itself delete content stored to provide your requested App features, including your shot history. To make this request, contact us as described in Section 9.

Where the EU or UK GDPR applies, we rely on legitimate interests for this internal model development: improving the accuracy and reliability of bowling analysis, comparing model versions, and investigating errors. This is separate from the contract basis for providing your requested App features. Our interests do not override your applicable rights and freedoms. You may object under Section 9 or use the training opt-out described above. This basis does not authorize public marketing, independent third-party training, or processing that requires a separate permission under applicable law.

3.4 Research, Marketing, and External Use

We may use bowling footage in public marketing and license Bowling Content to other organizations for research, analysis, and model development. For videos or images used in marketing or licensing, we will exclude or obscure visible faces unless we have permission to show them or applicable law permits it. We will obtain any other permissions required for the particular use, including from other people shown or heard in the footage.

Marketing may include edited highlights, such as shots of the week or split conversions, selected from recordings captured during ordinary App use. Those uses remain subject to the conditions in this section; recording a shot for analysis is not itself permission for public marketing.

The research, analysis, or model development may concern subjects beyond bowling. Before disclosure, we will identify the recipient and specific purposes, provide any required additional notice, and establish the applicable legal basis and permissions. A general reference to research does not authorize a recipient to use Bowling Content for any purpose it chooses.

Disclosures are limited to Bowling Content reasonably necessary for the specified purpose. We remove direct account identifiers and linkable references where not needed and do not include sign-in credentials, payment information, private support messages, or unrelated account-profile details. Recipient arrangements must address permitted purposes, onward disclosure, security, retention, applicable privacy requests, and restrictions on unauthorized re-identification.

Footage without visible faces is not necessarily anonymous. Where Bowling Content can reasonably identify or be linked to a person, we treat it as Personal Information and apply the relevant lawful-basis, notice, consent, and privacy-rights requirements. Using the App or accepting this Policy does not itself give any permission required for a particular marketing use or license. An account holder's permission does not replace any permission required from other people in the footage.

These uses may involve content collected before or after this Policy takes effect, but this Policy does not retroactively provide missing rights or permissions. The requirements for the proposed use must be satisfied before it begins. Any use or licensing of Bowling Content remains subject to applicable law, our rights in the content, and any required permissions. Licensing is limited to Bowling Content as defined in this Policy.

We describe information as anonymous or de-identified only when it meets the applicable legal standard. Information that can reasonably be linked to you remains Personal Information, including when retained separately from your account. External use of anonymized or de-identified information is subject to the safeguards required by applicable law, including restrictions on re-identification and corresponding obligations for recipients where required.

3.5 Other People and Deletion Requests

When using the App, you must provide any required notices and obtain all consents, releases, and other permissions required for recording, uploading, and the App features you request before recording or uploading content. You are responsible for ensuring that you have those permissions for every person whose image or voice is included. Do not record or upload content if the necessary permissions are missing.

You are not required to obtain releases for an unspecified future advertising campaign or third-party research project merely to use those features. Before a secondary use begins, we must establish the additional rights and permissions required for that particular use. If you authorize a specific additional use, you must have any permissions necessary for that authorization.

Camera or microphone permission on your device is not permission from the people whose image or voice is recorded. Your responsibility does not replace our own duties. Our adult-only eligibility rule does not authorize recording or uploading a minor's Personal Information. If a recording includes you or a child and you have a privacy concern, contact us with enough information to locate it without sending unnecessary sensitive information. You do not need a LaneTrax account to raise a concern about your own information.

When a request identifies a recording of you or a child, we restrict the affected content from further training and external use while we verify and resolve the request. We seek only information reasonably needed for that review and apply the deletion process in Section 9 where appropriate.

You can request deletion of personal Bowling Content as described below. We assess requests against the information retained and applicable requirements, including training datasets where they contain Personal Information. Deleting a source recording is not necessarily equivalent to reversing every prior model-training operation; we assess any continuing processing of Personal Information separately. Truly anonymized information is not ordinarily attributable to an individual for a deletion request.

3.6 Body Measurements, Biometric Information, and Health Information

LaneTrax's analysis tracks the ball and lane, not body-pose or joint landmarks, face or hand geometry, or person-specific feature vectors. Its outputs concern bowling performance, not injuries, disabilities, rehabilitation, or health-risk predictions. We do not use faces, hands, voices, body shape, or movement patterns to identify or match people across recordings. Stored information includes summary metrics, trajectories, diagnostic lane images, detailed detections and processing metadata, and account and recording references. For the ball-and-lane analysis and internal model development described in this Policy, we process Bowling Content as ordinary Personal Information, not for biometric identification or health analysis. Identifiable recordings and derived records remain protected Personal Information even though these uses do not identify a person by their biological characteristics or infer their health.

Biometric and health-data laws have different definitions and coverage. Not every recording or bowling measurement is a biometric identifier or health inference, and the absence of identity matching does not exclude every sensitive-data law. The regional disclosures in Section 12 explain relevant distinctions.

Where a feature involves protected biometric, health, or other sensitive information, the notice and permission requirements for that feature apply in addition to this Policy. The relevant processing requires any specific notice and prior consent, written release, or separate authorization before the relevant collection, use, or disclosure. Acceptance of the Terms or an operating-system permission does not replace any separate biometric or sensitive-data authorization required by law.

Consent to an optional secondary use is specific to that use and may be withdrawn. Any required collection notice or authorization is separate from this general Policy. The retention provisions in Section 6.4 also apply.

4. Tracking Technologies and Advertising

The App uses SDKs and App or device identifiers, and our communications use email measurement. These technologies can support authentication, preferences, security, performance analysis, communications measurement, referral attribution, and advertising measurement. App identifiers and local replay storage are distinct from browser cookies.

Operational technologies support requested features and security. Analytics and diagnostic technologies help us understand use and resolve problems. Advertising and attribution technologies help connect visits, installations, and other events with campaigns and assess their effectiveness. Measuring a campaign does not necessarily mean advertisements are displayed in the App.

Relevant information can include device or App identifiers, IP address, App screens viewed, event timestamps, campaign parameters, purchase or subscription events, and contact identifiers. Where information is associated with an account or device, it may be Personal Information even without a name. Our Tracking Technologies page provides additional information about providers and technologies.

Discount and installation links. Our discount website uses discount codes and campaign information to display offers and carry referrals through QR codes and installation links. When you follow an installation link, AppsFlyer OneLink receives the discount code and any campaign parameters included in the link. It can connect that visit with an installation or later App activity, including before you sign in. This link-based attribution is distinct from an advertising SDK running on the discount page.

Tracking choices. You can manage Apple's App Tracking Transparency ("ATT") permission in your iOS settings. Analytics and diagnostic processing begins when you use the App; your ATT choice does not control every form of analytics, security processing, or account-related processing. See Section 9 to exercise applicable rights to object, opt out, or withdraw consent. A request to withdraw consent does not affect the lawfulness of processing before withdrawal.

Email measurement. Customer.io measures email opens and link interactions. Messages may contain pixels or tracked links for this purpose. Email software can block remote images or similar content; unsubscribe from marketing to stop receiving those messages. Image blocking does not necessarily prevent measurement when you follow a link. We exclude the sign-in link in authentication emails from click tracking.

Browser signals and App requests. Global Privacy Control and Do Not Track are browser signals; they do not themselves configure the App's SDKs or identify every App account or device. For choices relating to Personal Information associated with your App account, use the request methods in Section 9. Any additional opt-out rights provided by applicable law remain available to you.

5. How We Share Personal Information

We disclose information for the purposes explained in this Policy, with recipients appropriate to those purposes. The fact that a provider supports LaneTrax does not mean it receives every category of information we collect. See Tracking Technologies for details about individual services, their purposes, and the information they process.

Service providers. Providers help us host and secure the Services, authenticate accounts, store and process content, manage subscriptions, deliver communications, provide support, analyze performance, and develop App features. Their access depends on their function and can include account and contact details, authentication and purchase information, Bowling Content, support messages, device identifiers, notification tokens, and diagnostic information.

Live support. Support providers may receive account identity, contact details, and device information to identify your App installation. This identification is separate from your approval to view the App during a live support session.

Advertising and measurement partners. We share event and account information for attribution, advertising measurement, campaign optimization, support, and diagnostics. This goes beyond installation and purchase conversions and can include names, email addresses, account and session identifiers, screen interactions, settings and permission responses, errors, session activity, performance-related fields, lane coordinates, and references to stored video, JSON, or diagnostic images. The information processed varies by integration.

Advertising partners may also receive diagnostic and performance-related event information. References to stored content can link an event to an account or session, even where the underlying recording is not included in the event. These recipients may have a different legal role from providers acting solely on our instructions. Disclosures remain subject to applicable privacy rights and consent requirements. See Section 4 and the regional disclosures.

Meta advertising events. For covered collection and transmission of App event data for advertising targeting or personalization, we and Meta Platforms Ireland Limited are joint controllers where the EU GDPR applies; Meta Platforms, Inc. is the corresponding joint controller under the UK GDPR. We provide information about this processing and are responsible for our integration. Meta is responsible for enabling relevant rights concerning data it holds after receipt and processes that data under its own responsibility. You may exercise applicable rights with either party. The EU Controller Addendum, UK Controller Addendum, and Meta Privacy Policy explain these responsibilities and Meta's processing. Meta may instead act as our processor for covered matching, measurement, and analytics activities; its role depends on the activity.

Marketing and content licensing. When the conditions in Section 3.4 are met, we may share footage with marketing and production providers and audiences of public marketing. We may also license Bowling Content to organizations for research, analysis, or model development. License recipients may use that information for those purposes independently, rather than acting solely on our behalf. These disclosures remain subject to the permissions, restrictions, and privacy rights applicable to the use.

Discount-page previews. Discount pages may display a referrer's name alongside their code, including in previews produced when a link is shared. Anyone with the code or link may see this information. QR codes and installation links can also carry the code and campaign information as described in Section 4.

At your direction or with permission. We disclose information when you direct us to share it, use a sharing feature, or authorize a particular disclosure. Information you make available outside LaneTrax can be copied or used by its recipients under their own practices.

Professional advice, legal requirements, and protection. We may disclose relevant information to advisers, authorities, or other parties where reasonably necessary to comply with law or valid legal process, prevent fraud or harm, protect rights and safety, resolve disputes, or establish, exercise, or defend legal claims.

Business transactions. Information may be disclosed in connection with a proposed or completed financing, merger, acquisition, reorganization, or sale of business assets, subject to applicable safeguards and legal requirements. We will provide notice or obtain consent where required if the resulting use materially changes.

Some advertising-related disclosures may constitute a "sale," "sharing," or processing for targeted advertising under particular privacy laws even if no money is exchanged for the information. Your applicable opt-out rights are described below. Licensing Bowling Content that contains Personal Information may also constitute a sale under applicable privacy laws. Marketing, content licensing, and disclosures of de-identified information are addressed in Section 3.

Protected information. The advertising, research, business-transfer, and licensing provisions above do not override restrictions on biometric, health, or other sensitive information. We do not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information where prohibited by law. We disclose protected information only as permitted by applicable law, including any separate authorization required for a disclosure of consumer health data. Consent does not override a legal prohibition.

6. Data Retention and Deletion

6.1 Shot History and Other Operational Records

Your shot history. We retain your shot results, saved replay clips, and associated data so you can return to past shots and sessions in the App, review your bowling history, and compare results over time. Keeping this history is part of providing the App's features, separate from retaining information for model training or evaluation. Your deletion choices and the applicable retention limits are explained below. Diagnostic images and other technical data may also be retained for the purposes described in this Policy.

Other records. Retention of transaction, support, diagnostic, and provider-held records depends on the purpose of the record, whether a purchase issue or support request remains unresolved, applicable accounting or other legal requirements, security and fraud-prevention needs, and the establishment or defense of legal claims. These purposes do not create an unlimited exception to deletion. Any retained Personal Information remains subject to applicable necessity and retention limits.

Sign-in recovery. Browser sign-in recovery is available for one hour, after which the recovery record is scheduled for deletion. Link expiry does not mean that related account, email-delivery, or security records are erased at the same time. Those records follow the applicable retention criteria above.

Google Analytics. Our property's retention settings are 2 months for event data and 14 months for user data. The user-data retention period resets on new user activity. These settings do not affect most standard reporting, which is based on aggregated data, and do not set the retention periods for other services.

Meta Business Tools. Meta's published Business Tools terms provide for retention of event data for up to two years and of audiences created from that data until deleted through its account tools. These are distinct from our Google Analytics settings and remain subject to applicable privacy and deletion rights.

6.2 Training and Evaluation

Bowling Content retained for training and evaluation does not have a fixed automatic expiration period. We keep it for ongoing retraining, comparison of model versions, and investigation of errors. The absence of a scheduled expiry does not override your training opt-out, deletion rights, or applicable retention limits. Retention must remain necessary for a lawful purpose.

We review the continued retention and use of affected training examples when you request deletion or opt out of training; when the training purpose changes or ends; when an example becomes unusable, redundant, or no longer needed; or when a privacy complaint, legal change, or security issue affects its use. Following that review, we delete or restrict affected information when continued retention or use is no longer necessary or lawful, subject to applicable legal exceptions. Useful training examples have no automatic age-based expiry, but remain subject to these reviews and your applicable rights.

6.3 Deletion and Recovery Copies

The following distinctions apply to your deletion choices:

• Removing a shot or session from your history: the underlying records and media remain recoverable until account deletion, unless you request earlier permanent deletion or a shorter retention period is required by law. This is different from a request to permanently erase your Personal Information.
• Signing out and clearing local data: these actions do not erase your account, cloud records, media, training copies, or information already received by service providers.
• Retained training content: privacy rights continue to apply to identifiable or linkable information in training and evaluation datasets. Removing a direct account reference does not, by itself, make the content anonymous.
• Requesting permanent deletion: use the Make a Privacy Request button above and follow the instructions in Section 9.3, which explains the scope of a general deletion request and any verification needed.
• Marketing and licensed content: retention and further use remain subject to the permitted purpose, applicable retention limits, and privacy rights. We assess requests affecting our copies and communicate requests to relevant recipients where required, as explained in Section 9.3. A license does not create an unlimited exception to deletion.

Recovery copies. Under our current storage settings, deleted replay-storage objects may remain recoverable for 90 days. Objects deleted under earlier settings keep the recovery period that applied when they were deleted. Our primary database has a one-hour version history and weekly backups configured for retention of 14 weeks. These recovery windows are separate from removing a shot from visible history. They are not permission to retain information beyond applicable legal limits or to disregard a deletion request.

Applicable retention limits and deletion duties also extend to backups, service-provider copies, and identifiable training data where the law requires. We may retain information for legal obligations, security, fraud prevention, or legal claims to the extent an applicable exception permits. We will explain any relevant limitation when responding to your request.

6.4 Specific Retention Requirements

Where applicable law or a required collection notice sets a shorter retention period or a specific deletion requirement, we apply that requirement instead of the general retention criteria above. Any exception must be permitted by applicable law.

7. Security

We use administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, alteration, and disclosure. Measures are selected according to the information and processing risks and include access restrictions and appropriate provider protections. No internet transmission or storage system is completely secure. Protect your account credentials and contact us if you believe your account or information has been compromised.

Safeguards must reflect the sensitivity of the information, including any additional protection required for biometric or health information. If a security incident triggers notification duties, we notify affected individuals and relevant authorities in accordance with applicable law.

8. International Data Transfers

LaneTrax is based in the United States and serves users internationally. We store and process Personal Information in the United States and offer European and Asian storage options for certain content. Our service providers may process information in other countries, whose privacy laws may differ from those in your country of residence.

You can change the storage region for supported content in the App's settings. Selecting a region does not restrict all processing, backups, or service-provider access to that region.

LaneTrax personnel access Personal Information from the United States. For covered Google Cloud and Firebase services, we use Google's standard data-processing terms. These terms govern Google's processing of customer Personal Information on our behalf and provide for international-transfer safeguards, including standard contractual clauses where applicable. Google Analytics is a separate service governed by separate terms. We also use its separate data-processing terms for covered Analytics processor services. These arrangements do not restrict every service provider or subprocessor to the United States or to your selected storage region.

Cross-border transfers are subject to the safeguards and transfer conditions required by the applicable law. Depending on the jurisdiction and circumstances, these may include an adequacy decision, approved contractual protections such as standard contractual clauses and applicable UK provisions, or another lawful transfer mechanism. Contact us to ask about arrangements relevant to your Personal Information.

You can request information about relevant safeguards or a copy where available, subject to lawful redaction of confidential information.

9. Your Rights and Choices

9.1 Everyday Choices

Accounts and content. You can review saved shots, sessions, and available replay clips in the App. Use the account and content controls available in the Services to review or change information, or contact us for assistance. Removing a shot or session from your visible history does not necessarily erase its server records; retained sessions may be recovered. Signing out or clearing local data does not delete your account or cloud content. To request permanent account or content deletion, including retained training copies, contact us using Section 9.3. See Section 6 for retention details. Deleting an account does not necessarily cancel a subscription managed by Apple or another purchase platform; manage cancellation through that platform.

Communications. Use the unsubscribe instructions in marketing messages or contact us to change your marketing preferences. We may still send non-marketing messages needed for your account, transactions, security, service changes, or legal notices.

Device permissions. Your device settings let you manage permissions such as camera access, photo access, notifications, and tracking permissions where available. Disabling a permission can prevent the associated feature from working and does not automatically delete information already received.

9.2 Privacy Rights

Wherever you live, you may request access to information about our processing and a copy of your Personal Information, correction of inaccurate Personal Information, deletion, or the training opt-out described in Section 3.3. These core choices are available through the request process in Section 9.3, subject to appropriate verification and lawful exceptions.

Depending on applicable law, you may have additional rights to receive certain information in a portable format, restrict or object to processing, withdraw consent, or opt out of sale, sharing, targeted advertising, or certain profiling. You may also have a right to complain to a regulator or appeal a decision. These rights have conditions and exceptions; we will explain any applicable limitation when responding.

Where applicable law restricts solely automated decisions with legal or similarly significant effects, the relevant safeguards and rights, including human intervention or contesting a decision where provided by law, apply. An automated bowling measurement is not necessarily such a decision.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. Where applicable, you may object to direct marketing, including related profiling. We will not unlawfully discriminate or retaliate against you for exercising privacy rights, although some requested changes may prevent us from providing a feature that requires the information.

9.3 Making a Request

To make a request, use the Make a Privacy Request button above to email privacyrequests@lanetrax.app. Describe your request and provide the email associated with your account, if applicable. Do not send passwords, payment credentials, or identity documents unless we specifically request appropriate verification through a suitable channel.

We may need to verify your identity or authority before providing access or making changes, using information proportionate to the request and its risks. An authorized agent may submit a request where permitted; we may ask for proof of authorization and, when lawful, confirmation from you. We respond within the period required by applicable law, explain permitted extensions or fees where relevant, and give reasons where we cannot fully comply. To appeal a decision where that right applies, contact the same address with "Privacy appeal" in the subject line. This does not limit your right to contact a regulator.

We do not require identity verification for an opt-out where the applicable law prohibits doing so, although we may request the information needed to apply the choice to the correct account or device. Requests are generally free; we charge a fee or decline a request only where the applicable law permits it and explain why. An appeal is reviewed under the applicable procedure and deadline, with information about further complaint options where required.

Unless you ask for a narrower scope, an account or general deletion request covers all Personal Information associated with you, including account records, source recordings, diagnostic images, results, metadata, and identifiable copies maintained for training or evaluation. You do not need to identify every record, data category, or storage location. We may ask for information reasonably necessary to verify your request or locate the relevant content. Where required, we communicate a correction, deletion, or restriction to relevant processors and recipients. We explain any permitted retention or other limitation rather than treating all model-development information as exempt.

If your request concerns Bowling Content used in marketing or licensed to another organization, we assess our continued use and retention and communicate the request to relevant recipients where required. A license does not remove applicable privacy rights, including rights to object, withdraw consent, opt out, or request deletion.

10. Adults Only and Information About Minors

You must be at least 18 years old to use LaneTrax. The Services are not intended for, or offered to, people under 18. Parental permission does not make an under-18 person eligible to use the Services.

If we learn that an account belongs to someone under 18, we take steps to disable the account and delete the associated Personal Information, except where limited retention is legally required or permitted. A parent, guardian, or other person with a concern may raise a concern using the request process in Section 9.3.

Minors may appear incidentally in recordings made in shared spaces. This does not change our eligibility rules or authorize unrestricted use of their information. You must not knowingly submit Bowling Content that identifies anyone under 18. If you discover that such content has been uploaded, contact us promptly through the privacy request process to request its review or removal.

11. Third-Party Websites and Services

Links, sign-in options, purchase platforms, and sharing features may connect you to services operated by others. Their independent processing is governed by their privacy policies. This does not exclude LaneTrax's responsibility for processing we undertake or direct through our own service providers. Review the relevant provider's practices before sharing information directly with it.

12. Regional Privacy Disclosures

This Policy applies wherever we offer LaneTrax. The choices in Section 9 are available worldwide; additional rights and requirements depend on the applicable law and processing involved. The information below is not an exhaustive list of local protections. Mandatory legal protections are not limited by this Policy.

12.1 United States

Where applicable state privacy laws provide additional rights, these may include portability and opting out of sale, sharing, targeted advertising, or certain profiling. You may also have rights to use an authorized agent, appeal a decision on your request, and exercise your rights without unlawful discrimination. Section 9 explains how to submit a request or appeal; Section 4 addresses tracking choices.

Where applicable law provides, you may also request information identifying the third parties to which we disclosed or sold your Personal Information. Use Section 9 to make this request.

California. Where the California Consumer Privacy Act applies, you may request categories and specific pieces of Personal Information and information about its collection, use, and disclosure. You may also have correction, deletion, sale-or-sharing opt-out, and sensitive-information limitation rights. For the processing described in this Policy, the categories described in Section 2 include identifiers, customer-record information, commercial information, internet or network activity, approximate geolocation, audio and visual information, and inferences. Sections 2–5 describe sources, purposes, and recipient categories; Section 6 describes retention. Section 5 explains disclosures that may constitute sale or sharing. We do not knowingly sell or share Personal Information of people under 18.

Maryland. Where the Maryland Online Data Privacy Act applies, processing sensitive data is limited to what is strictly necessary to provide or maintain a product or service you specifically request, and selling sensitive data is prohibited. Consent does not override those restrictions.

12.2 European Economic Area and United Kingdom

Under the EU General Data Protection Regulation ("GDPR") and its UK counterpart ("UK GDPR"), LaneTrax Inc. is the controller for the processing described here. We rely on contract where processing is necessary to provide requested Services, legitimate interests for proportionate security, support, and improvement, legal obligations where applicable, and consent where required. Section 3.3 describes the purposes and legitimate interests for internal model development. These interests do not override your applicable rights and freedoms. The following table relates these bases to processing subject to the EU or UK GDPR. Any additional conditions for protected information described in Section 3.6 also apply.

In addition to the choices in Section 9, you may have rights to portability, restriction, and objection. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing without providing such reasons. Consent may be withdrawn without affecting earlier lawful processing. You may complain to the supervisory authority where you live, work, or believe an infringement occurred, or to the UK Information Commissioner's Office as applicable.

Where applicable, you may request information about significant decisions based solely on automated processing, make representations, request human intervention, or contest a decision. You may also have a right not to be subject to such a decision. Section 9 explains how to exercise your rights; Section 8 addresses transfers. Health data, and biometric data processed to uniquely identify a person, require an additional special-category condition; legitimate interests alone are not sufficient.

12.3 Switzerland

Under applicable Swiss law, you may request access to or correction of your Personal Information and exercise other available rights using the process in Section 9. You may also raise a concern with the Federal Data Protection and Information Commissioner. Section 8 describes international processing and how to request information about transfer safeguards.

12.4 Canada, Including Quebec

Our Chief Executive Officer is responsible for protecting Personal Information. Section 14 provides his name and business contact details; Section 9 explains how to submit a request or complaint. Sections 5, 6, and 7 describe our sharing, retention, and security practices.

You may request information about our practices, access, correction, and withdrawal of consent subject to applicable restrictions. We explain reasonably foreseeable consequences of withdrawal and do not make consent to unnecessary processing a condition of service. Sensitive information may require express consent in addition to other permissions. We remain accountable for Personal Information processed on our behalf.

Quebec law may also provide portability and cessation of dissemination or de-indexing in specified circumstances. Where applicable, you have a right to be informed when a decision about you is based exclusively on automated processing, request information about its main factors, correct the Personal Information used, and submit observations to a person who can review the decision. Use Section 9 for a request or complaint. You may also complain to the Office of the Privacy Commissioner of Canada or the relevant provincial authority, including Quebec's Commission d'accès à l'information.

12.5 Brazil

Where Brazil's Lei Geral de Proteção de Dados ("LGPD") applies, you may have rights to confirmation and access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability under applicable rules, information about sharing and consent, revocation of consent, and review of qualifying automated decisions. You may petition the Autoridade Nacional de Proteção de Dados ("ANPD") as provided by law.

Use Section 9 to make a request. Health information and biometric data linked to an individual require an applicable sensitive-data ground; ordinary legitimate interests alone do not authorize that processing. Section 8 describes international processing and how to request information about transfer safeguards.

12.6 New Zealand

If another person provides your Personal Information to us, including in a recording, you remain entitled to any collection notice required by applicable law. You may use Section 9 to ask about the source, purposes, and disclosure of that information.

12.7 Mainland China

Where the Personal Information Protection Law applies, accepting this Policy does not replace any separate consent required for processing sensitive Personal Information or disclosing Personal Information to another recipient, including an overseas recipient.

12.8 Mexico

Providing your requested account, bowling analysis, shot history, subscription features, and support are primary purposes of processing. Model development, public marketing, and independent licensing are additional purposes described in Section 3. You may use Section 9 to exercise applicable rights of access, rectification, cancellation, and opposition, request limits on use or disclosure, or withdraw consent. Refusing an additional purpose does not by itself prevent you from receiving the requested Services.

12.9 Hong Kong

Section 2 identifies the information collected, its sources, purposes, and recipient categories, and explains the consequences of not providing information needed for a requested feature. Where Hong Kong law requires prescribed consent for a new use of Personal Information, accepting this Policy does not replace that consent. You may request that we stop using your Personal Information for direct marketing through the process in Section 9.

12.10 Singapore

Our Chief Executive Officer handles data-protection inquiries and complaints. Section 14 provides his name and business contact details. Use Section 9 for requests concerning access, correction, or withdrawal of consent, subject to applicable law.

12.11 Türkiye

We collect Personal Information electronically through your use of the App and related Services, your communications with us, and the other sources identified in Section 2. Sections 2–5 explain the purposes and recipient categories. Where Turkish data-protection law applies, you may request information about processing and recipients, seek correction or deletion, and request notification of relevant corrections or deletions to recipients. You may also object to a result against you arising from exclusively automated analysis and seek compensation for unlawful processing, as provided by law. Use Section 9 to make a request; Section 14 identifies LaneTrax and its privacy contact.

12.12 Other Countries and Territories

Your rights under applicable law remain available whether or not your country or territory is listed here. Use Section 9 to submit a request or complaint. You may also raise a concern with the relevant local privacy authority.

13. Changes to This Policy

We may update this Policy as our Services, practices, or legal requirements change. The effective date identifies the version you are reading, and prior versions remain available in this legal center.

We will give at least 30 days' advance email notice of material changes, explaining the changes, identifying the effective date, and linking to the revised Policy, except where a shorter period is necessary for urgent legal or security reasons and is permitted by law. In that case, we will explain the reason and give as much notice as reasonably possible. Longer mandatory notice periods still apply. We obtain consent where required; a Policy update does not by itself authorize a new use that requires your consent.

14. Contact Us

Our Chief Executive Officer, Graham McKee, is responsible for privacy at LaneTrax and can be contacted at graham@lanetrax.app.

For privacy questions, requests, objections, or complaints, use the Make a Privacy Request button above to email privacyrequests@lanetrax.app. Section 9.3 explains the request process. You can also write to:

LaneTrax Inc.
631 Forest Ave, Evanston, IL 60202, United States

For general support, contact contact@lanetrax.app. You may raise a privacy concern with us without giving up any right to contact your local privacy authority.