Privacy Policy

Last updated: December 2, 2025

1. Introduction

Adrenaline MX ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes in detail how we collect, use, disclose, store, and protect information about you when you access or use our platform, mobile applications, websites, and related services (collectively, the "Services"). By using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. If you do not agree with this Privacy Policy, please do not use our Services.

This Privacy Policy applies to all users of our Services, including riders, track operators, event organizers, spectators, and any other individuals who interact with our platform. We are committed to transparency and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy regulations.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you use our Services, including but not limited to:

Account Registration Information: When you create an account, we collect your name, email address, username, password, date of birth, phone number, and profile information such as your racing number, bike specifications, skill level, and profile photo.
Profile and Preference Data: Information about your racing preferences, favorite tracks, riding style, competition history, achievements, and privacy settings (Public, Unlisted, or Private).
Payment Information: When you subscribe to premium features or make purchases, we collect payment card information, billing address, and transaction history through our secure payment processors.
Communications: When you contact us for support, provide feedback, participate in surveys, or communicate through our platform, we collect the content of those communications, including messages, emails, and support tickets.
Event and Competition Data: Information about your participation in races, practice sessions, lap times, race results, rankings, and performance statistics.
User-Generated Content: Photos, videos, comments, reviews, and other content you upload or share on our platform.
Location Data: With your permission, we may collect precise location information from your mobile device to help you find nearby tracks, events, and other riders.

2.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and usage patterns:

Device Information: Device type, model, operating system version, unique device identifiers, mobile network information, and device settings.
Usage Data: Pages viewed, features accessed, time spent on pages, search queries, click patterns, navigation paths, and interaction with content.
Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, and other technology on the devices you use to access our Services.
Log Data: Server logs that include information such as access times, error logs, referring/exit pages, and the number of clicks.
Performance Data: Information about the performance of our Services, including load times, crashes, and other technical issues.

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

Social Media Platforms: If you connect your account with social media services, we may receive information from those platforms in accordance with their privacy policies.
Track and Event Partners: Information about your race participation, timing data, and results from tracks and event organizers who use our platform.
Analytics Providers: Aggregated demographic and interest data from analytics services to better understand our user base.
Public Databases: Information from publicly available sources to verify information you provide or to enhance our Services.

3. How We Use Your Information

We use the information we collect for various purposes, including:

Service Provision and Improvement: To provide, maintain, personalize, and improve our Services, including developing new features, analyzing usage patterns, and enhancing user experience.
Account Management: To create and manage your account, authenticate your identity, process your registration, and maintain your profile and preferences.
Communication: To communicate with you about your account, send you technical notices, updates, security alerts, support messages, administrative notifications, and respond to your inquiries and requests.
Marketing and Promotions: With your consent, to send you promotional materials, newsletters, special offers, and information about events, competitions, and new features that may interest you.
Transaction Processing: To process payments, subscriptions, and other transactions, and to provide you with receipts and transaction confirmations.
Performance Analytics: To track and analyze your racing performance, generate statistics, create leaderboards, and provide insights about your progress and achievements.
Community Features: To enable social features such as connecting with other riders, sharing content, commenting, and participating in community discussions.
Safety and Security: To detect, prevent, and address fraud, security breaches, technical issues, and violations of our Terms of Service, and to protect the rights, property, and safety of our users and the public.
Legal Compliance: To comply with legal obligations, respond to lawful requests from public authorities, enforce our agreements, and protect our legal rights.
Research and Development: To conduct research, testing, and analysis to improve our Services, develop new products and features, and better understand user behavior and preferences.
Personalization: To customize your experience, recommend relevant content, suggest tracks and events, and tailor our Services to your interests and preferences.
Quality Assurance: To monitor and improve the quality of our Services, troubleshoot issues, and provide customer support.

We process your personal information based on the following legal grounds: (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, (4) protection of your vital interests or those of another person, and (5) our legitimate interests in operating and improving our Services, provided such interests are not overridden by your privacy rights.

4. Sharing Your Information

We may share your information in the following circumstances:

With Your Consent: We will share your information when you explicitly consent to such sharing, such as when you choose to make your profile public or share content with other users.
Service Providers: We share information with third-party service providers who perform services on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, marketing assistance, and technical support. These providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain appropriate security measures.
Track and Event Partners: We share relevant information with tracks, event organizers, and race officials to facilitate your participation in events, process registrations, record timing data, and publish results in accordance with your privacy settings.
Public Information: Information you choose to make public through your privacy settings (such as public profiles, race results, and shared content) will be accessible to other users and may be indexed by search engines.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our platform of any such change in ownership or control of your personal information.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, search warrants, or national security requirements).
Protection of Rights: We may disclose information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service, or as evidence in litigation in which we are involved.
Aggregated and De-identified Data: We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

We do not sell your personal information to third parties for monetary consideration. We do not share your personal information with third parties for their direct marketing purposes without your explicit consent.

5. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

Right to Access: You have the right to request access to the personal information we hold about you and to receive a copy of that information.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
Right to Erasure: You have the right to request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected or when you withdraw consent.
Right to Restriction: You have the right to request restriction of processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object: You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

California Residents: If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, disclose, and sell; the right to request deletion of your personal information; the right to opt-out of the sale of personal information; and the right to non-discrimination for exercising your privacy rights.

European Residents: If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including those listed above.

To exercise any of these rights, please contact us at accounts@adrenaline.mx. We will respond to your request within the timeframe required by applicable law, typically within 30 days. We may need to verify your identity before processing your request to ensure the security of your personal information.

Privacy Settings: You can control the visibility of your profile and content through our privacy settings, which allow you to choose between Public (visible to everyone), Unlisted (accessible via direct link but not shown in searches or leaderboards), and Private (visible only to you) options for various aspects of your account.

Marketing Communications: You can opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email or by adjusting your communication preferences in your account settings. Please note that even if you opt out of marketing communications, we will still send you transactional and administrative messages related to your account and use of our Services.

6. Data Security

We implement and maintain comprehensive technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

Encryption: We use industry-standard encryption protocols (including TLS/SSL) to protect data in transit between your device and our servers. Sensitive data at rest, including passwords and payment information, is encrypted using strong encryption algorithms.
Access Controls: We implement strict access controls and authentication mechanisms to ensure that only authorized personnel have access to personal information, and only to the extent necessary to perform their job functions.
Secure Infrastructure: Our servers and databases are hosted in secure facilities with physical access controls, environmental protections, and redundancy measures to ensure availability and integrity of data.
Regular Security Assessments: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security risks.
Employee Training: Our employees receive training on data protection and security best practices and are bound by confidentiality obligations.
Incident Response: We maintain an incident response plan to quickly detect, respond to, and mitigate security incidents.
Secure Development: We follow secure coding practices and conduct security reviews of our code to prevent vulnerabilities.

While we strive to protect your personal information using industry-standard security measures, please understand that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Please notify us immediately if you suspect any unauthorized access to your account.

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, and we will take appropriate steps to mitigate the impact and prevent future incidents.

7. Automated Data Collection

When you interact with our Services, we automatically collect certain technical and usage data to improve user experience, optimize performance, and ensure security. This automated data collection includes:

Technical Information: IP address, device identifiers, browser type and version, operating system, screen resolution, device model, and network information.
Usage Analytics: Pages visited, features used, time spent on different sections, click patterns, navigation paths, search queries, and interaction with content.
Performance Metrics: Page load times, error messages, crashes, and other technical performance indicators that help us diagnose and fix issues.
Referral Information: The website or source that referred you to our Services and the pages you visit after leaving our Services.
Session Data: Information about your session, including session duration, frequency of visits, and returning visitor status.

We use this information to analyze trends, administer our Services, track user movements and behavior patterns, gather demographic information about our user base, improve our Services, detect and prevent fraud and abuse, ensure compliance with our Terms of Service, and protect our platform from security threats and unauthorized access.

This data is collected through various technologies including cookies, web beacons, log files, and similar tracking technologies as described in Section 8 below.

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, local storage, and similar tracking technologies to provide functionality, enhance your experience, understand usage patterns, and improve our Services. This section provides detailed information about these technologies and how to manage them.

8.1 Types of Cookies We Use

Essential Cookies: These cookies are necessary for our Services to function properly. They enable core functionality such as security, authentication, session management, and access to secure areas. Without these cookies, certain features of our Services cannot be provided. These cookies do not track your browsing activity on other websites.
Performance and Analytics Cookies: These cookies collect information about how you use our Services, such as which pages you visit most often, how long you spend on pages, and any error messages you encounter. This information helps us improve the performance and functionality of our Services. The data collected is aggregated and anonymized.
Functionality Cookies: These cookies allow our Services to remember choices you make (such as your username, language preference, or region) and provide enhanced, personalized features. They may also be used to provide services you have requested, such as watching videos or commenting on content.
Targeting and Advertising Cookies: These cookies are used to deliver content and advertisements that are relevant to your interests. They may be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns. These cookies remember that you have visited our Services and may be used to build a profile of your interests.

8.2 Other Tracking Technologies

Web Beacons: Small graphic images (also known as pixel tags or clear GIFs) that we use in conjunction with cookies to track user activity and compile usage statistics.
Local Storage: HTML5 local storage and other browser storage mechanisms that allow us to store data locally on your device to enhance functionality and performance.
Mobile SDKs: Software development kits in our mobile applications that collect information similar to cookies for analytics and functionality purposes.

8.3 Managing Cookies and Tracking Technologies

You have several options for managing cookies and tracking technologies:

Browser Settings: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. Please note that if you disable or refuse cookies, some features of our Services may not function properly or may be inaccessible.
Opt-Out Tools: You can opt out of certain third-party analytics and advertising cookies by visiting opt-out pages provided by industry organizations such as the Network Advertising Initiative (NAI) or the Digital Advertising Alliance (DAA).
Mobile Device Settings: You can control tracking on mobile devices through your device settings, including limiting ad tracking or resetting your advertising identifier.

For more information about cookies and how to manage them, please visit www.allaboutcookies.org or www.youronlinechoices.eu (for users in the EU).

9. Third-Party Integrations

We partner with carefully selected third-party service providers to facilitate and enhance various aspects of our Services. These integrations are essential for providing you with a comprehensive and seamless experience. Our third-party partners include:

Payment Processors: We use secure third-party payment processors to handle subscription payments and transactions. These processors may collect and process your payment card information, billing address, and transaction details. We do not store complete payment card information on our servers. Our payment processors are PCI-DSS compliant and implement industry-standard security measures to protect your financial information.
Analytics Providers: We use analytics services to understand how users interact with our Services, track usage patterns, measure performance, and identify areas for improvement. These providers may collect information about your device, browsing behavior, and usage patterns.
Cloud Service Providers: We use cloud infrastructure and storage services to host our platform, store data, and ensure reliability and scalability of our Services.
Communication Services: We use email service providers and messaging platforms to send you notifications, updates, support responses, and marketing communications (with your consent).
Customer Support Tools: We use customer support and helpdesk platforms to manage support tickets, respond to inquiries, and provide assistance to our users.
Authentication Services: We may use third-party authentication services to enable you to sign in using your existing accounts from other platforms (such as social media accounts).
Content Delivery Networks (CDNs): We use CDNs to deliver content quickly and efficiently to users around the world.
Security Services: We use security and fraud prevention services to protect our platform from malicious activity, detect suspicious behavior, and prevent unauthorized access.

All third-party service providers are carefully vetted and are contractually required to:

Use your personal information only for the specific purposes for which it was provided
Implement appropriate technical and organizational security measures to protect your data
Comply with applicable data protection laws and regulations
Not disclose your information to other third parties without authorization
Delete or return your data when it is no longer needed for the specified purpose

We conduct regular reviews of our third-party providers to ensure they maintain adequate data protection standards. We remain responsible for the protection of your personal information that is shared with our service providers.

Some third-party services may have their own privacy policies that govern their collection and use of information. We encourage you to review the privacy policies of any third-party services you interact with through our platform.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices are based on the following criteria:

Account Information: We retain your account information, profile data, and preferences for as long as your account remains active. If you close your account, we will delete or anonymize your personal information within a reasonable timeframe, typically within 90 days, unless retention is necessary for legitimate business purposes or legal requirements.
Transaction Records: We retain payment and transaction records for accounting, tax, and audit purposes as required by law, typically for a period of 7 years from the date of the transaction.
Communications: We retain customer support communications and correspondence for a reasonable period to provide ongoing support, resolve disputes, and improve our services, typically for 3 years.
Usage and Analytics Data: We retain aggregated and anonymized usage data indefinitely for analytics and research purposes. Individual usage logs are typically retained for 12-24 months.
Marketing Data: We retain marketing consent records and communication preferences until you withdraw consent or close your account, and for a reasonable period thereafter to honor your preferences and comply with legal obligations.
Legal and Compliance Data: We may retain certain information for longer periods when required by law, regulation, or legal process, or when necessary to establish, exercise, or defend legal claims.
Backup and Disaster Recovery: Information may persist in backup systems for a limited period (typically 30-90 days) after deletion from active systems as part of our disaster recovery procedures.

When we no longer need to retain your personal information, we will securely delete or anonymize it in accordance with our data retention and deletion policies. Anonymized data that cannot be used to identify you may be retained indefinitely for research, analytics, and service improvement purposes.

You have the right to request deletion of your personal information at any time, subject to certain exceptions where we are required or permitted by law to retain information. To request deletion, please contact us at accounts@adrenaline.mx. We will process your request in accordance with applicable law and notify you of the outcome.

11. International Data Transfers

Adrenaline MX operates globally, and our Services are accessible to users worldwide. Our servers and central operations are located in the United States. If you access our Services from outside the United States, please be aware that your personal information may be transferred to, processed, stored, and accessed in the United States and potentially other countries where we or our service providers operate.

Data protection laws in the United States and other countries may differ from those in your country of residence and may not provide the same level of protection. By using our Services and providing us with your personal information, you acknowledge and consent to the transfer, processing, and storage of your data in the United States and other countries in accordance with this Privacy Policy.

European Economic Area (EEA), United Kingdom, and Switzerland: If you are located in the EEA, UK, or Switzerland, we comply with applicable legal requirements for international data transfers. We implement appropriate safeguards to ensure your personal information receives an adequate level of protection, including:

Standard Contractual Clauses: We use Standard Contractual Clauses (SCCs) approved by the European Commission for transfers of personal data to countries that do not provide an adequate level of data protection.
Adequacy Decisions: We may transfer data to countries that have been deemed by the European Commission to provide an adequate level of data protection.
Binding Corporate Rules: Where applicable, we may rely on binding corporate rules or other approved transfer mechanisms.
Supplementary Measures: We implement additional technical, organizational, and contractual measures to ensure the protection of your data during international transfers.

You have the right to obtain information about the safeguards we use for international data transfers and to obtain a copy of such safeguards (where feasible) by contacting us at accounts@adrenaline.mx.

Data Localization: In certain jurisdictions, we may store and process data locally to comply with data localization requirements. We will inform you of any such arrangements that apply to your data.

12. Children's Privacy

Our Services are not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at accounts@adrenaline.mx, and we will promptly investigate and take appropriate action.

For users between the ages of 13 and 18 (or the age of majority in your jurisdiction), we recommend that you review this Privacy Policy with a parent or guardian to ensure you understand how we collect, use, and protect your information.

13. Do Not Track Signals

Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no industry-wide standard for how to respond to DNT signals, and our Services do not currently respond to DNT signals or similar mechanisms. We will continue to monitor developments in DNT technology and may implement DNT response mechanisms in the future if a standard is established.

14. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Privacy Policy applies only to our Services and does not apply to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites or services. When you click on a link to a third-party website or use a third-party service, you are subject to that third party's privacy policy and terms of service. We encourage you to read the privacy policies of any third-party websites or services you visit or use.

The inclusion of links to third-party websites does not imply endorsement of those websites or their content by us.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes to this Privacy Policy, we will update the "Last updated" date at the top of this page.

If we make material changes to this Privacy Policy that significantly affect your rights or how we use your personal information, we will provide you with prominent notice prior to the changes taking effect. This notice may be provided through one or more of the following methods:

Posting a notice on our website or within our Services
Sending you an email notification to the email address associated with your account
Displaying an in-app notification when you access our Services
Requiring you to affirmatively accept the updated Privacy Policy before continuing to use our Services

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our Services after the effective date of any changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated Privacy Policy, you should discontinue use of our Services and may request deletion of your account and personal information.

We will retain previous versions of this Privacy Policy in an archive for your review upon request.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

Email: accounts@adrenaline.mx

We are committed to resolving privacy concerns and complaints in a timely manner. When you contact us, please provide sufficient detail about your inquiry or concern so that we can address it effectively. We will acknowledge receipt of your communication and provide a substantive response within a reasonable timeframe, typically within 30 days.

If you are not satisfied with our response to your privacy concern or complaint, you have the right to lodge a complaint with your local data protection authority or supervisory authority. For users in the European Economic Area, you can find your data protection authority at https://edpb.europa.eu/about-edpb/board/members_en.

Data Protection Officer: For matters specifically related to data protection and privacy compliance, you may contact our Data Protection Officer at dataenforcement@adrenaline.mx.