Version 1.0 — 2026-10-20 — English translation. The French version (master) prevails.
This policy describes the data processed by the OHP Apex desktop application. The Rider Space (optional per-team mobile add-on) is covered by a separate privacy policy and a DPA.
1. Data controller
OH Performance — Olivier Hagmann, trabajador autónomo — NIF/NIE Y5704201P — Calle Blas Fernández Lirola 20, 2-1, 08902 L’Hospitalet de Llobregat, Spain — contact.ohperformance@gmail.com.
2. Principle
OHP Apex runs locally on the user’s workstation. Race data and settings stay on the workstation. Only a few server exchanges, listed below, are required for licence activation, the optional team mode and weather. No telemetry or crash reports are collected.
3. Data processed
| Data | Purpose | Where |
|---|---|---|
Licence key + device identifier (deviceId) |
Activate and verify the licence, limit the number of workstations | Sent to the licence server (Cloudflare) |
| Accepted EULA version (+ date) | Proof of acceptance of the agreement | Local + licence server |
| Workstation name (≤ 40 chars, free text) and presence | Team mode (collaboration between workstations) | Cloudflare KV, 7 days |
| Shared notes, markers, inventory (stock) | Team mode (synchronisation between workstations) | Cloudflare KV, 7 days |
| Circuit coordinates | Obtain weather (via server proxy) | Sent to the weather proxy |
| Timing API key (entered by the user) | Connect to live timing | Stored locally |
| Race data, rider names | Analysis | Stored locally, not transmitted by the desktop app |
The workstation name is a free-text field: it is recommended not to enter sensitive personal data in it.
4. Legal basis and purposes
Processing relies on the performance of the contract (licence, team mode requested by the user) and legitimate interest (licence security, proper operation). No data is used for advertising; no resale.
5. Processor and hosting
Server exchanges (licence, team mode, weather proxy) are handled by Cloudflare, Inc. (a US company), OH Performance’s processor. Transfers are governed by the EU standard contractual clauses (SCCs) and the Cloudflare DPA. Team-mode data is stored temporarily (7 days) then automatically deleted.
6. Retention
- Team mode (workstation name, notes, markers, stock): 7 rolling days in Cloudflare KV.
- Licence (key, devices, EULA acceptance): for the licence validity period.
- Local data: kept on the workstation until deleted by the user.
7. Data-subject rights
In accordance with the GDPR: rights of access, rectification, erasure, objection and restriction. They are exercised with OH Performance (contact.ohperformance@gmail.com). A complaint may be lodged with a supervisory authority: the Spanish authority AEPD (Agencia Española de Protección de Datos, www.aepd.es), or the authority of the data subject’s country of residence.
8. Security
- Encrypted HTTPS/TLS transport.
- API keys (weather, maps) are not embedded in the application: they are server-side secrets.
- Licences are cryptographically signed; updates are signed.
- Team-mode data is partitioned per licence and auto-expires (7 days).
9. Changes
This policy may change. The version in force bears the date shown at the top of the document.