Privacy Policy — Forza Copilot

Forza Copilot (“the app”) is a telemetry companion for the game Forza Horizon, published by Kirill Shirinkin (“we,” “us”). This policy explains exactly what data the app handles, what stays on your device, and the limited usage analytics we collect to fix bugs and improve the app. We’ve tried to keep it specific and honest rather than vague and legalistic.

The short version: Forza Copilot has no accounts and no logins. The telemetry stream from your console or PC, and the full race traces you record, stay on your device — they are never uploaded to us or anyone else. The only data that leaves your device is limited, aggregate usage analytics that are not tied to your real‑world identity and are never used for advertising.

Who handles your data

The app is published and operated by Kirill Shirinkin. For any privacy question, email kirill@hey.com.

Data that stays on your device

Most of what the app does never leaves your phone or tablet:

Live telemetry. Forza Copilot listens on your local Wi‑Fi network for the one‑way “Data Out” stream that Forza Horizon sends from your Xbox or PC. This is an inbound connection on your own network. The app uses your local‑network access only to receive this stream; it does not send the stream anywhere.
Your race log. Completed runs — lap times, sectors, a decimated route trace, speed and input samples, the car used — are saved only in the app’s own storage on your device. They are never uploaded. Deleting a run, or deleting the app, removes them.
Preferences. A few settings (such as your speed and temperature units) are stored locally on the device.

None of the above is transmitted to us or to any third party.

Usage analytics we collect

To understand which features are used and to find and fix bugs, the app sends limited, aggregate product‑analytics events to PostHog, an analytics service. We use PostHog’s EU cloud (eu.i.posthog.com), so this data is processed and stored in the European Union.

This analytics collection is on by default in the App Store version of the app.

What an analytics event contains:

Automatic device/app context added by the analytics SDK: app version and build, operating system version, device model, language and region, and a persistent random identifier generated on the device (a PostHog “distinct ID”). This identifier ties together the events from one device over time, but it is not your name, email, phone number, or Apple ID, and we never connect it to your real‑world identity. Because of this device‑level identifier, the data is best described as pseudonymous rather than fully anonymous.
What you did, in non‑identifying terms — for example: that a race run was recorded, the car class and performance index, a run’s total distance and total time; that a replay or video clip was created and with which options; that a screen or sector was opened; counts such as how many tracks you’ve raced. Only these summary values are sent — the full route trace and the speed and input samples for a run stay on your device and are never uploaded. A few setup events include limited technical context such as the network port and the device’s local (private) Wi‑Fi IP address shown on the Connection screen (used to configure Forza’s Data Out).
Names you type for your own races. If you rename or merge events in the Race Log, the name you assign is included with those events — and, because it becomes that race’s label, it may also appear with later analytics events about the same race (for example when you open a replay or a comparison).
Your device’s public IP address is seen by the analytics provider when events are sent and may be used to derive approximate (country/region‑level) location; it is not used to identify you.

What we do not collect or do:

No accounts, names, emails, or contact details — the app has none to collect.
No precise location, no contacts, no photos, no microphone or camera.
No advertising. No ad networks, no advertising identifier (IDFA), no data brokers.
No cross‑app or cross‑website tracking. We do not link your activity with data from other companies for advertising. Under Apple’s definition, the app does not “track” you.
Your telemetry stream and your full recorded race traces are never sent to analytics, to us, or to any server. The analytics events describe that you used a feature, not the underlying driving data.

Why we collect it (legal basis)

We process this limited, pseudonymous usage data for our legitimate interest in understanding how the app is used, fixing crashes and bugs, and improving features. Because the data is not linked to your identity, it is not used to make decisions about you as an individual.

How long it’s kept

On‑device data (your race log and preferences) stays until you delete it or remove the app.
Analytics data is retained by our analytics provider for a limited period under their retention policy and then aggregated or deleted. See PostHog’s documentation at posthog.com/privacy for details on how they process data as our processor.

Your choices and rights

You can delete recorded races individually in the Race Log, or remove all on‑device data by deleting the app from your device.
Deleting the app also stops all analytics collection going forward. (The app does not yet offer a separate in‑app analytics toggle; deleting the app is the way to opt out today.)
Because the analytics data is pseudonymous — keyed to a random per‑device identifier, not to your name — we may not be able to connect a request to your specific records unless you can supply that identifier. If you have a concern, email kirill@hey.com and we’ll do our best to help.
Depending on where you live (for example, the EU/EEA, the UK, or California), you may have rights to access, correct, or delete personal data and to object to processing. To exercise any such right, contact us at the address above.

Children

Forza Copilot is not directed to children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will address it.

Third‑party services

The only third‑party service that receives data from the app is PostHog (EU cloud), acting as our data processor for usage analytics. The app integrates no advertising SDKs, no social logins, and no other trackers. Downloading the app and its updates is handled by Apple under Apple’s Privacy Policy.

Changes to this policy

If we change what the app collects, we’ll update this page and the “last updated” date above. Material changes will be reflected here before they take effect.

Contact

Questions about privacy? Email kirill@hey.com.

Forza Copilot is an unofficial companion app and is not affiliated with, sponsored by, or endorsed by Microsoft, Turn 10 Studios, or Playground Games.