Privacy
Your details.
Extreme Timing is run by EliteSpec in New Zealand. This page covers the website, the Extreme Timing app (iPhone, Android and the web app at /train), online race entries, and the timing system clubs use on race day. It follows the New Zealand Privacy Act 2020. Questions, or to see, fix or delete what we hold: hello@elitespec.co.nz.
Updated November 2026.
The short version
- No advertising, no tracking across apps or websites, no analytics tools, and we never sell your details.
- Practice sessions, GPS routes, camera frames and watch data from the app stay on your phone.
- What we keep on our server: your account email, your garage and calendar if you use them, online race entries, and club race results.
- You can delete your account from the app or the website at any time.
Your app account
Your account is your email address. To sign in we email you a 6-digit code; there is no password. We keep your email, when the account was made, your sign-ins (stored so they can’t be read back), and whether you have Pro and until when. Every new account gets a 14-day free trial; nothing is charged for it.
Practice timing in the app
Camera timing. The camera is used only while you run a camera session, to see riders cross your line. The sessions and the frames kept around each crossing are saved on your phone, not sent to us.
GPS timing. On iPhone and Android the app uses your location only during a GPS session you start, including while the screen is locked (Android shows a “Timing your laps” notification, iPhone shows the location indicator). The route and laps are saved on your phone. They are not sent to us, shared, or used for ads.
Apple Health and Health Connect. If you allow it, the app reads workouts, workout routes and heart rate from Apple Health or Health Connect to time the laps of a ride. It only reads, never writes. That data is processed and kept on your phone. It is never sent to us, never shared, never sold and never used for advertising.
Ride files. A .fit, .gpx or .tcx file you bring in from Garmin, Strava or a watch is read on your phone and not sent to us.
Bike check. Checking there is a bike in the camera picture runs on your phone.
Sharing. “Share” makes a picture of a session on your phone and hands it to your phone’s share menu. Nothing goes to us.
Sessions stay on the phone until you delete them in the app, or delete the app.
Garage and family calendar
If you use them, these are kept on our server so they follow you to another phone and feed your phone’s calendar: rider names, licence numbers and expiry dates you type in, bikes (make, model, year), engine hours, service jobs and when they were done, calendar days (title, date, time, place, notes) and to-do lists. If you pick a bike for a timed session, the app sends the time ridden and when, so engine hours count up; no location goes with it. The garage belongs to your account, or to a random key made on your phone if you haven’t signed in. Your calendar link is private to you; you can make a new one in the app, which stops the old one working.
Online race entries
A parent makes a family entry account on /enter (name, email, mobile and a password, stored scrambled) and adds each rider: name, date of birth, licence and race numbers, emergency contact, and if the club asks, address, guardian’s name and phone, transponder number, medical notes and answers to the club’s own questions. With each entry we keep what was declared for that race day (for example concussion or spinal injury in the last six weeks) and that the club’s terms were accepted, with the name typed, the time, and the internet address and browser used; at a club’s sign-on kiosk, a finger signature.
Who sees it: the club running the race day. Before race day the riders’ names, date of birth, licence, race and transponder numbers, emergency and guardian contacts, the family’s name and phone, the entries and the race day declarations go to the club’s timing computer for sign-on. Your email, address and the internet address and browser are not sent to the club.
If you link your family entry account to the app (by typing its password in the app), your riders and their results show in the app on your account. Nothing is linked by name or number guessing.
Race results
Race results are the club’s results: rider names, race numbers, classes, places and lap times, as posted at the track. They are published on results pages and, for a linked family, in the app. They are the club’s record of the race, so they stay when an account is deleted.
Finish-line camera at race days
Clubs may film the finish line to time riders and check close finishes. The footage is kept on the club’s timing computer or, for a club using our hosted timing, on our server. Unless the club chooses to keep all its footage, footage with no rider crossing in it is deleted after half an hour; the pieces showing a crossing are kept by the club. Footage is not put on the public results site. At the track, a short clip of a rider crossing the line can be watched on the club’s timing system over the venue’s own network. On the internet, clips are only shown in the Extreme Timing app to that rider’s own family account, never publicly. Ask the club, or us, to remove a clip.
Payments
Pro bought on the website is paid through Stripe. We never see or keep your card number; we keep what you bought and when it renews. If Pro is offered and bought through the App Store, Apple takes the payment and tells us the subscription is active, so Pro follows you to Android and the website; we never see your Apple payment details. Race entry fees are paid to the club by bank transfer with a reference; we keep the order and whether it was paid.
The interest list
Before launch, clubs and families can join our interest list on /join. We keep what you put in the form (for a club: club name, your name, email, phone if given, region, how the club times now, rough riders per meeting, next meeting and notes; for a family: your name, email, region, club if given, how many riders and what you’re interested in), which page you signed up from, when, and a scrambled form of your internet address that cannot be read back, used only to stop one device sending hundreds of sign-ups. Signing up again with the same email updates your details rather than adding you twice. We use it to tell you about Extreme Timing, including when it launches and the founding price, and for nothing else. We don’t sell it or share it. No payment is taken. To come off the list, reply to any email from us or email hello@elitespec.co.nz, and we delete your details.
Website forms
When you send a form on this website (club enquiry, early access, rider sign-up, news) we keep what you put in it and the time you sent it, and send a short notice (your name, or email, and what you signed up for) to our team chat, so a person sees it. We use it to contact you about what you signed up for, and for nothing else. Every news email has a way to unsubscribe. The website loads its fonts from Google Fonts, so Google sees your internet address when a page loads.
Who else handles it, and where
Our server is with Hetzner, in Germany. Sign-in codes and emails are sent through Google’s Gmail. Payments: Stripe (and Apple, for App Store purchases). Team chat notices: Discord. Each only gets what it needs to do that job. Because these are outside New Zealand, your details are stored and handled overseas, under those companies’ own privacy and security terms.
How long we keep it
Your account, garage and family entry account are kept until you delete them. A sign-in code works for 10 minutes. Race results, past entries and payments are kept as the club’s record. Race day footage with no crossing in it is deleted after half an hour, unless the club keeps all its footage. Form sign-ups and the interest list are kept until you ask us to delete them.
Deleting your account
App account: in the app, Me, then Delete my account; or on the website at your account. This deletes your account and email, your sign-ins, your Pro subscription record (a website subscription is cancelled at once, so nothing more is charged), your garage (bikes, hours, services, calendar, to-do lists and calendar link) and the link to your family entry account. Pro bought through Apple is cancelled in your iPhone’s Settings, under your name, then Subscriptions. Club race results are not deleted. Sessions on your phone stay there until you delete them or the app.
Family entry account: on /enter, “Delete this account”. Your name, email, phone and password, and each rider’s personal details (name, date of birth, licence, contacts, address, guardian and medical notes) are removed, and entries for race days still to come are withdrawn. Past entries and payments stay on the club’s books as “Deleted rider”, with no contact details, and the club keeps its record that its terms were accepted. Ask the club about a refund for a race day you have paid for.
Riders under 16
A parent or guardian should make the account and enter riders under 16.
Your rights
You can ask to see what we hold about you and ask us to correct it: email hello@elitespec.co.nz. If you’re not happy with how we handle your details, you can complain to the Privacy Commissioner at privacy.org.nz.