GhostChaser Privacy Policy

Last updated: July 26, 2026

Overview

GhostChaser is a driving coach for Gran Turismo 7. It has parts with very different privacy footprints: driving, which runs entirely on your device, and the optional debrief service, which requires an account and processes your session data in the cloud. This policy explains both.

Driving — on device

Driving with the instruments collects no personal data and requires no account:

• Telemetry is received directly from your PlayStation 5 over your local network and processed in real time on your device. Unless you choose to save a session for a debrief, it is never transmitted to our servers.
• Reference lap data is downloaded from our servers as anonymous requests with no user identification.
• App settings are stored locally on your device and never sent anywhere.

Accounts

An account is required only for the debrief service. We collect:

• Your email address — used to sign you in and to deliver your debriefs. Identity is managed by AWS Cognito; we never see or store your password.

The debrief service

• Your session's telemetry (car position, speed, and control inputs — no audio, no video, no information about your physical location) is uploaded and stored in your private account area.
• An AI analysis of your driving is generated. This uses a third-party AI provider (Anthropic) as a data processor; the inputs are your driving telemetry and derived statistics. Under the provider's API terms, this data is not used to train their models.
• Your debrief is delivered by email and is readable on the web at app.ghostchaser.ai, signed in with the same account.
• Your coaching history (per-corner statistics from past sessions) is retained to power progress tracking across sessions — trends and long-term coaching are the point of the product.
• Usage and entitlement records (a count of debriefs delivered per month, and which subscription tier is active) are kept for quota purposes. Payment itself is handled by Apple.

Sharing a debrief

Everything is private to your account by default. You can create a share link for a single session; anyone with that link can read that one debrief without signing in. A share link exposes only that session — not your email, not your other sessions, not your history or subscription. You can revoke it at any time, and revoking takes effect immediately.

Support access

To answer a support question — "why didn't my debrief arrive", "why does this corner analysis look wrong" — support staff can view your account's status (subscription tier, when you last uploaded, whether a pipeline run failed) and can view your debriefs as you see them.

• Every such view is logged — who looked, when, at whose account, and at what.
• There is no impersonation. Support access is a separate, audited route; nobody can sign in as you.
• Changes are logged separately from views, and every change requires a written reason.

If you would like to know whether your account has been viewed, ask at support@ghostchaser.ai.

Data retention and deletion

Saved sessions, debriefs, and coaching history are retained while your account exists, because long-term progress tracking requires them.

You can delete your account at any time from within the app (Settings → Account → Delete Account). This permanently removes your stored sessions, debrief history, usage and entitlement records, any share links you created, and your identity from our systems. Deletion is immediate and irreversible.

Subscription information

Subscriptions are auto-renewable and managed by Apple through the App Store. We do not have access to your payment information, Apple ID, or billing details. We record which tier is active and when it expires, so the service knows what you are entitled to.

Third-party services

• Amazon Web Services — hosting, storage of saved sessions, identity (Cognito), and email delivery (SES).
• Anthropic — AI analysis of saved session telemetry (processor only; not used for model training).
• Apple StoreKit — subscription purchases and payment.

What we don't do

• No advertising, no analytics trackers, no third-party SDKs beyond those listed above.
• No open or click tracking on debrief emails.
• We never sell your data.
• We never use your driving data for anything other than your own coaching.

Your rights (GDPR and similar laws)

The data controller is McConnell Software. Where GDPR or similar law applies, our lawful bases are performance of a contract (providing the debrief service you signed up for) and legitimate interest (service security and abuse prevention). You have the right to:

• Access and portability — request a copy of the personal data we hold about you, in a machine-readable form. Email us and we will provide it within 30 days.
• Rectification — change your account email yourself at any time in the app, verified by a code to the new address.
• Erasure — delete your account and all associated data yourself, at any time, from within the app. No request needed.
• Objection and restriction — since all processing exists solely to deliver the service you requested, the practical remedy is deleting your account, but you may also contact us.
• Complaint — lodge a complaint with your local data-protection supervisory authority.

International transfers

Our services run in the United States (AWS us-east-1). If you use GhostChaser from the EU/EEA, UK, or elsewhere, your account data and saved sessions are transferred to and processed in the US. Our processors offer data-processing agreements incorporating standard contractual clauses for such transfers.

Processor retention

• Operational logs referencing your account identifier are retained for at most 90 days.
• Anthropic retains API inputs briefly for abuse prevention under its API terms and does not use them for model training.
• Saved sessions and coaching history are retained until you delete your account.

Children

GhostChaser is not directed at children under 16. If we learn that a child under 16 has created an account without parental consent where such consent is required, we will delete it.

Contact

Data controller: McConnell Software. Questions about this policy or to exercise your rights: support@ghostchaser.ai