LEGAL · EFFECTIVE 27 OCTOBER 2026
Privacy Policy
This policy covers the private FTC Driver Station iOS app, access console, and licensing service. It applies to invited users, administrators, and support contacts.
Information collected
Sign in with Apple supplies a stable account identifier and the email Apple makes available, which may be a private relay address. Apple may provide a name only on first authorization. The administrator supplies an invitation email; the user supplies a full name, FTC team number, team role, and optional school or organization. We record the accepted legal-policy version and time.
For licensing and security, we store a random installation identifier, the iOS device name, app version, activation and license status, and activation or last-seen timestamps. Infrastructure providers may process request time, network address, session, error, and security-log information.
Robot data
Robot configuration, gamepad state, OpMode commands, and live telemetry are exchanged locally between the iPhone and the REV Control Hub. The authentication service does not receive or store that robot traffic through the features described here.
Purposes
Information is used to authenticate approved users, bind invitations to Apple accounts, enforce or revoke device licenses, operate the app, provide support, prevent misuse, maintain security, comply with law, and resolve disputes. We do not sell personal information, serve behavioral advertising, or perform cross-app tracking.
Providers and international processing
Apple processes Sign in with Apple. Supabase and its infrastructure providers process authentication, database, server-function, logging, and security data. Advisers, authorities, or a successor organization may receive information only when reasonably necessary and subject to applicable safeguards. Processing may occur outside the user’s country.
Security
Controls include encrypted transport, Apple tokens with a cryptographic nonce, expiring one-time invitations, SHA-256 invitation-token hashes, server-side authorization, row-level database protection, restricted administrator roles, and iOS Keychain storage. No system can guarantee absolute security. Keep invitations and Apple credentials private.
Retention and deletion
Active account, consent, and device records are kept while access remains active. Revoked or expired invitation metadata and security logs may be retained for a reasonable audit, abuse-prevention, legal, or dispute period. Account deletion removes associated profile and device-license records unless the law requires retention.
Rights and choices
Depending on location, a user may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may complain to a data-protection authority. Contact the address above. Identity verification may be required. Local Network permission is controlled in iOS Settings; Apple authorization is controlled in Apple Account settings.
Children and team use
A user below the age of independent consent in their region must have authorization from a parent, guardian, school, or team administrator. Administrators must not invite a child without appropriate authorization.
Changes
The effective date is updated when this policy changes. Material changes may be shown in the app and may require renewed acceptance.