Privacy Policy

SpecBuild ("we," "our," or "us") builds engineering tools for sim racers. This Privacy Policy explains what the SpecBuild iOS app collects, what it doesn't, and how it handles the small amount of data required to run the app.

By installing SpecBuild you agree to the data handling described here. If you don't agree, don't use the app.

Everything you create is local-only. SpecBuild does not sync your setups, strategies, or telemetry runs to our servers.

The following is stored on-device only:

• Your driver profile (name, skill level, preferred chassis, haptics toggle)
• Car setups you save or fork from the Setup Library
• Race strategies you build in Pit Wall
• Telemetry runs you record or import into Trace
• Onboarding completion state and in-app preferences

This data is persisted through Apple's standard `UserDefaults` and on-disk storage. If you enable iCloud backup in iOS, Apple may include the app's data in your encrypted backup — that is governed by Apple's Privacy Policy, not ours.

There is exactly one network call the app makes by default: a version-check to our update endpoint on launch.

That request sends:

• Bundle identifier (so the server knows which app is asking)
• App version (so the server can flag out-of-date builds)
• A device token — either your OneSignal push-subscription id, or, if push is disabled, your device's vendor identifier (IDFV). The IDFV is a value Apple gives our app and resets when you uninstall.

The server replies with one of three states — `actual` (no update), `optional_update` (you may update), or `mandatory_patch` (a patch is required) — and the app routes accordingly. Nothing from your setups, strategies, or telemetry is included in this request.

SpecBuild uses OneSignal to deliver optional push notifications — release notes, occasional racing-tip bulletins, and the ability to notify you if a mandatory patch ships.

When push is enabled, OneSignal receives:

• Your device's push token (issued by Apple)
• Your IDFV (used as the anonymous login for OneSignal)
• Standard server logs such as your IP address at the time a push is delivered

OneSignal's data handling is described in their Privacy Policy. You can turn off notifications at any time from iOS Settings → SpecBuild → Notifications.

If the update endpoint flags your build as out-of-date, SpecBuild opens a full-screen WebView pointed at `https://specbuild.cloud/api/sync` to deliver the patch content.

That WebView uses standard WebKit cookies scoped to `specbuild.cloud`. It does not inject tracking scripts, does not read pasteboard, and closes when the server completes the flow.

SpecBuild relies on iOS's sandbox model:

• Local data is written inside the app's private container, readable only by the app itself.
• All network calls use HTTPS (TLS 1.2+).
• We do not run our own analytics server or share device identifiers with any party other than OneSignal (push only) and Cloudflare (update CDN, sees IP in standard server logs).

SpecBuild is not directed at children under 13. We do not knowingly collect information about them. If you believe a child provided data through our app, email us and we'll investigate.

We'll post any material changes to this page and bump the "Last Updated" date. If a change meaningfully affects how we handle data we've already collected, we'll additionally flag it inside the app on next launch.