GhostChaser Privacy Policy

Last updated: July 3, 2026

Overview

GhostChaser is a driving coach for Gran Turismo 7. It has two parts with very different privacy footprints: live coaching, which runs entirely on your device, and the optional debrief service, which requires an account and processes your session data in the cloud. This policy explains both.

Live Coaching — On-Device

The core coaching experience collects no personal data and requires no account:

• Telemetry is received directly from your PlayStation 5 over your local Wi-Fi network and processed in real time on your device. Unless you choose to save a session for a debrief, it is never transmitted to our servers.
• Reference lap data is downloaded from our servers (Amazon S3) as anonymous requests with no user identification.
• App settings (audio preferences, PS5 IP address, units) are stored locally on your device and never sent anywhere.

Accounts

Creating an account is required only for the debrief service. We collect:

• Your email address — used to sign you in and to deliver your debrief reports. Identity is managed by AWS Cognito; we never see or store your password (it is held only in hashed form by the identity service).

The Debrief Service — What We Store and Process

When you choose Save & Debrief at the end of a session, the following happens:

• Your session's telemetry (car position, speed, and control inputs — no audio, no video, no information about your physical location) is uploaded to our servers and stored in your private account area.
• An AI analysis of your driving is generated. This uses a third-party AI provider (Anthropic) as a data processor; the analysis inputs are your driving telemetry and derived statistics. Under the provider's API terms, this data is not used to train their models.
• The debrief report is emailed to your account address using Amazon SES.
• Your coaching history (per-corner statistics from past sessions) is retained to power progress tracking across sessions — trends, comparisons, and long-term coaching are the point of the product.
• Usage records (a count of debriefs delivered per month) are kept for subscription quota purposes. Payment itself is handled entirely by Apple — see below.

Data Retention and Deletion

Saved sessions, debrief reports, and coaching history are retained while your account exists, because long-term progress tracking requires them.

You can delete your account at any time from within the app (Settings → Account → Delete Account). This permanently removes your stored sessions, debrief history, usage records, and your identity from our systems. Deletion is immediate and irreversible.

Subscription Information

GhostChaser offers auto-renewable subscriptions managed entirely by Apple through the App Store. We do not have access to your payment information, Apple ID, or billing details.

Third-Party Services

• Amazon Web Services — hosting, storage of saved sessions, identity (Cognito), and email delivery (SES).
• Anthropic — AI analysis of saved session telemetry for debrief generation (processor only; not used for model training).
• Apple StoreKit — subscription purchases and payment.

What We Don't Do

• No advertising, no analytics trackers, no third-party SDKs beyond those listed above.
• We never sell your data.
• We never use your driving data for anything other than your own coaching.

Your Rights (GDPR and Similar Laws)

The data controller is McConnell Software (contact below). Where GDPR or similar law applies, our lawful bases are: performance of a contract (providing the debrief service you signed up for) and legitimate interest (service security and abuse prevention). You have the right to:

• Access and portability — request a copy of the personal data we hold about you, in a machine-readable form. Email us and we will provide it within 30 days.
• Rectification — change your account email yourself at any time in the app (Settings → Account → Change Email, verified by a code to the new address). For anything else, email us.
• Erasure — delete your account and all associated data yourself, at any time, from within the app (Settings → Account → Delete Account). No request needed; deletion is immediate.
• Objection and restriction — object to or restrict our processing. Since all processing exists solely to deliver the service you requested, the practical remedy is deleting your account, but you may also contact us.
• Complaint — lodge a complaint with your local data-protection supervisory authority.

International Transfers

Our services run in the United States (AWS us-east-1). If you use GhostChaser from the EU/EEA, UK, or elsewhere, your account data and saved sessions are transferred to and processed in the US. Our processors (AWS, Anthropic) offer data-processing agreements incorporating standard contractual clauses for such transfers.

Processor Retention

• Operational logs referencing your account identifier are retained for at most 90 days.
• Anthropic (AI analysis) retains API inputs briefly for abuse prevention under its API terms and does not use them for model training.
• Saved sessions and coaching history are retained until you delete your account.

Children

GhostChaser is not directed at children under 16. Account creation requires a valid email address; if we learn that a child under 16 has created an account without parental consent where such consent is required, we will delete it.

Contact

Data controller: McConnell Software. Questions about this policy or to exercise your rights: andrew@mcconnellsoftware.com