Privacy Policy
Last updated: 3 July 2026
DualApex turns your real driving laps into ghosts you can chase in a racing simulator. This policy explains exactly what we collect, why, where it lives, and the control you have over it. We keep this deliberately short and specific — we only collect what the app actually needs.
DualApex is operated by Dual Apex, registered in the Netherlands (KvK: to be confirmed). We are the data controller for the information described here.
What we collect
- Steam sign-in details. When you sign in with Steam, we receive your public SteamID and your Steam display name (persona) through Steam's standard OpenID sign-in. We never receive or store your Steam password or Steam email.
- Your DualApex profile. A handle (username) you choose, an optional avatar image URL, and whether your profile is public.
- Lap and driving data. The GPS-based lap files you upload or record — position, speed, and timing along the track — plus the track and car they belong to. This is the core of the service: it's what becomes your chaseable ghost and your leaderboard times.
- Optional email — only if you give it. You do not need an email to use DualApex. If you request a track we haven't added yet, you may optionally leave an email so we can notify you when that track goes live. That's the only place we ask for it.
We do not use analytics SDKs, advertising, tracking pixels, or third-party marketing tools. There are no ads in DualApex.
Why we collect it
- To run the core features — generating ghosts, showing your lap times, building leaderboards, and letting you chase real and simulated laps.
- To identify your account across the app and web, via Steam sign-in.
- To notify you about a requested track — only if you chose to leave an email for that.
Under the GDPR, our legal basis is performance of our service to you (the features you sign up to use) and, for the optional track-notification email, your consent.
Where your data is stored
All DualApex user data is stored on our own server located in the Netherlands (European Union). We do not sell your data, and we do not share it with third parties for their own purposes. The only external party involved is Steam (Valve Corporation), and only for the sign-in step you initiate — we receive data from Steam; we do not send your DualApex activity to them.
How long we keep it
We keep your account and lap data for as long as your account exists, so your ghosts and leaderboard times remain available. If you delete your account, we delete your associated personal data. Optional track-request emails are kept until the track is added or you ask us to remove them.
Your rights
Because we're an EU company, you have the full set of GDPR rights over your data:
- Access — ask for a copy of the data we hold about you.
- Correction — ask us to fix inaccurate data.
- Deletion — ask us to delete your account and personal data.
- Portability — ask for your lap data in a portable form.
- Objection / withdrawal of consent — withdraw the optional email consent at any time.
To exercise any of these, email support@dualapex.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children
DualApex is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we'll remove it.
Changes to this policy
If we change what we collect or how we use it, we'll update this page and its "last updated" date. Material changes will be made clear in the app or on the site.
Contact
Questions about your privacy or this policy: support@dualapex.com.