Privacy Policy

Last updated: 14 May 2026

1. Data Controller

ApexIngest is operated by Plixo Labs Ltd, registered with the UK Information Commissioner's Office (ICO). For privacy questions or to exercise the rights described in Section 7, contact support@apexingest.com.

2. What We Collect

When you use ApexIngest, we collect the following categories of data:

  • Account information: Email address and name provided during sign-up (managed by Clerk).
  • Telemetry data: GPS coordinates, speed, lean angles, throttle position, and lap times recorded by your ApexIngest device during track sessions.
  • Device metadata: Firmware version, device serial number, and bike profile used during recording.
  • Usage data: Pages visited, features used, and session upload activity for product improvement.

3. How We Use Your Data

  • Process and analyse your telemetry sessions
  • Generate lap times, corner analysis, and coaching insights
  • Display leaderboards (anonymised by default)
  • Manage your subscription and billing
  • Improve the product and fix bugs
  • Send transactional emails (session processed, account changes)

4. Legal Basis

Under UK GDPR Article 6, we rely on the following legal bases:

  • Contract — running your account, processing telemetry, billing and subscription management.
  • Consent — product analytics (PostHog) and error diagnostics (Sentry). You can withdraw at any time via the cookie settings link.
  • Legitimate interest — fraud prevention, security logging, and aggregated, anonymised product metrics.

5. Data Storage and Security

Primary application database and telemetry files are hosted in the European Union; telemetry is stored in encrypted, S3-compatible object storage and database connections use TLS encryption. Product analytics (PostHog) moved to the EU region on 14 May 2026; analytics data collected before that date is held in the previous US-region project under its standard 13-month retention and is not migrated. Certain other subprocessors (Clerk, Sentry, Polar) are US-based; transfers rely on Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework where applicable. We do not sell or share your personal data with third parties for marketing purposes.

6. Third-Party Services

  • Clerk — Authentication and account management
  • Polar — Subscription billing and payments
  • PostHog — Product analytics. Not loaded until you grant consent via the cookie banner. You can revoke at any time via the link below or in the site footer.
  • Sentry — Error tracking and performance monitoring
  • For the full list of cookies and similar storage items, see our Cookie Policy.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data in a portable format
  • Object to processing of your data

To exercise these rights, email support@apexingest.com.

8. Data Retention

Retention periods by category:

  • Account information — for the life of your account.
  • Telemetry data and session records — for the life of your account, or 5 years from upload, whichever is shorter, unless you delete the session.
  • Billing records — 7 years (UK tax record-keeping requirement).
  • Product analytics (PostHog) — 13 months from event date.
  • Error and diagnostic logs (Sentry) — 90 days.

When you delete your account, all telemetry data, session records, and personal information are permanently removed within 30 days.

9. Contact

For privacy-related questions, contact support@apexingest.com.