Privacy Policy

This Privacy Policy explains how the APS Connect mobile app ("APS Connect", "the app", "we", "us") handles information. APS Connect is published by Advanced Performance Solutions LLC ("APS"), and is a tool for configuring, diagnosing, and updating the handheld flashing device ("the flashing device") used with snowmobile and powersports engine control units (ECUs).

1Information stored on your phone

APS Connect keeps the following on your device, in the app's own storage. It is not transmitted to us except where Section 2 says so.

• Vehicle records. For each machine you flash, the app records the vehicle identification number (VIN), the ECU serial number, the ECU part number, the name of the tune written, the date, and the serial number of the flashing device that performed the flash. This lets the app show you a history of the machines you have worked on.
• Datalog files. When you copy a recorded datalog off a flashing device, the CSV file is saved on your phone (on iOS, in the app's Documents folder, which is visible in the Files app). These are engine-sensor recordings. They stay on your phone and you can view, share, or delete them through the Files app or within APS Connect — unless you choose to upload one to our server, which is described in Section 2 and does not undo itself when you later delete the local copy.
• Device Wi-Fi credentials. To reconnect to a flashing device's own Wi-Fi access point without re-entering them, the app stores that access point's network name and passphrase. These are stored in the app's ordinary storage, not in a secure keychain. They are the credentials for the flashing device's local access point, not for your home or personal Wi-Fi.
• Display preferences. Gauge layout and similar settings.

All of this is removed when you delete the app, and vehicle records and datalogs can be deleted from within the app.

2Information sent over the internet

APS Connect connects to the internet for one purpose: to fetch the correct tune file or firmware for the machine you are connected to, from our tune server at bbrtools.com, over an encrypted (HTTPS) connection.

When it does this, the app sends the identifiers needed to select the right file:

• the connected flashing device's serial number;
• the group/owner identifier provisioned to that device;
• the connected ECU's serial number; and
• the ECU part number.

The flashing device's own licensing traffic, which includes the VIN

Separately from the lookup above, the flashing device itself contacts the tune server to license a machine. That request includes the vehicle identification number (VIN), along with the device serial, the group/owner identifier, the ECU serial number and the ECU part number.

This matters to you even though the app does not compose that request, because of how the device reaches the internet. A flashing device often has no internet connection of its own, so the app can act as a relay: the device opens an encrypted connection to the tune server and the app carries the bytes over your phone's internet connection. When it does:

• that traffic, including the VIN, travels over your phone's connection (and therefore may use your mobile data);
• the app cannot read it. The encryption is between the flashing device and the server, so what passes through the app is ciphertext it has no key for. It relays bytes without being able to see or alter them.

Datalogs you choose to upload

Datalogs are only uploaded when you ask for it, by using the upload action on the Log screen. Nothing is uploaded in the background and nothing is uploaded automatically.

When you do, the whole CSV goes to our server at bbrtools.com — this is file content, not an identifier, and it is the one case where something you recorded, rather than a reference number, leaves your phone. A datalog is a recording of engine sensor values over time; it is not location data and contains no personal details about you.

The point of uploading is that your tuner can read it. The file is filed under the owner/group the flashing device is registered to, together with the device serial and the ECU serial, so that the tuning shop responsible for that device can open your log and use it to adjust your tune. If you upload a datalog, you are sending it to them. If you do not want them to see a recording, do not upload it — nothing is uploaded unless you ask.

Which side performs the upload depends on where the internet is, and it changes what the app can see:

• The flashing device has its own Wi-Fi: the device uploads directly and the app is not involved.
• The app is acting as the device's gateway: the app copies the log to your phone and posts the file itself, over your phone's connection. In this case the app does read the file, because it is sending it.

An uploaded datalog stays on our server. Deleting the app, or deleting the local copy from your phone, does not remove the uploaded one. To have uploaded datalogs removed, contact us at the address in Section 10.

We use all of this only to return the correct file, to apply licensing, and — for uploaded datalogs — to provide support and tuning. We do not use any of it to build an advertising or marketing profile, and we do not sell it.

3Information we do not collect

• No accounts. APS Connect has no sign-up or login and does not collect your name, email, or password.
• No analytics or tracking. The app contains no analytics, advertising, attribution, or crash-reporting software, and no third-party tracking SDKs.
• No advertising identifiers, and no cross-app or cross-site tracking.
• No photo library, contacts, calendar, health, or microphone data. The camera is used, briefly and only as described in Section 4; no photograph is taken or kept.

4Device permissions, and why

APS Connect requests a small number of system permissions strictly to talk to flashing devices:

• Bluetooth. To discover and connect to flashing devices over Bluetooth Low Energy.
• Local network / Wi-Fi (and, on some Android and iOS versions, Location). Connecting to a device's own Wi-Fi access point requires these permissions at the operating-system level. Location is used only to satisfy that operating-system requirement for Wi-Fi/Bluetooth on the phone. APS Connect does not read, store, or transmit your geographic location.
• Camera. Only to read the pairing QR code shown on a flashing device's own screen. The camera opens when you tap "Scan the device" and closes as soon as a code is read or you cancel. Frames are examined in memory to find the code and are then discarded: no photograph or video is recorded, stored, or transmitted, and the app has no access to your photo library. The code contains the device's serial number, which the app uses to work out that device's Wi-Fi name and password. You can refuse this permission and pair by typing the network details instead.
• Internet. For the tune/firmware lookup described in Section 2.

5How information is shared

We do not sell your information, and we do not share it with anyone for their own marketing or advertising.

There is one routine disclosure to someone other than us, and it is the purpose of a feature rather than a side effect: a datalog you upload is made available to the tuning shop your flashing device is registered to, along with the device and ECU serials it is filed under. That is what the upload is for — they cannot help you with a tune they cannot see. Which shop that is was set when the device was provisioned. We do not otherwise give your information to third parties.

Everything else leaving your phone goes to our own tune server, as described in Section 2. We may disclose information if required by law, or to protect our rights or the safety of others.

6Data retention and your choices

• Vehicle records, datalogs, and preferences live on your phone. You can delete datalogs and vehicle records within the app, delete datalog files through the Files app, and remove everything held on the phone by uninstalling APS Connect.
• Uninstalling does not reach the server. Any datalog you uploaded (Section 2) remains on our server afterwards, as do the licensing records tied to a machine. Ask us and we will remove uploaded datalogs; licensing records may need to be kept for as long as a licence is in force.
• The lookup identifiers in Section 2 are processed by our tune server to serve your request and for licensing; for questions about server-side retention, contact us at the address below.

7Children

APS Connect is a tool for powersports professionals and enthusiasts. It is not directed to children and does not knowingly collect information from children under 13.

8Security

Internet connections use HTTPS. Data on your phone is protected by your device's own operating-system protections. As noted in Section 1, saved device Wi-Fi credentials are held in the app's ordinary storage rather than a secure keychain; treat physical access to an unlocked phone accordingly.

9Changes to this policy

If we change how the app handles information, we will update this policy and its effective date, and — where the change is material — surface it in the app or at the hosted URL.

10Contact

This policy is governed by the laws of the State of Idaho, United States, without regard to conflict-of-law rules.