Privacy Policy

1. Introduction

MyRangeScore ("we," "us," or "our") provides software and services for shooting event scoring, training, and range operations via website and mobile applications (the "Service"). This Privacy Policy describes how we collect, use, and protect your information when you use the Service.

The Service includes:

• MyRangeScore web app (myrangescore.com) — primary scoring, registration, and range-operations dashboard.
• Get Zeroed (iOS & Android) — companion app for shooters to view scores, register for events, and post to the social feed.
• MyRangeStaff (iOS & Android) — staff app included with MyRangeScore Pro for check-in, queue management, and live scoring at the range. Not sold as a separate product.

2. Information We Collect

Account and profile information

• Name, email address, username, and account credentials
• Profile details you provide (bio, avatar, goals, range affiliation)
• Optional information such as social handles and competition identifiers

Performance and usage information

• Firearms and loadout details you enter, visits, scores, drill results, goals, event registrations, check-ins, and leaderboard activity
• Training history, challenges, and engagement events in app and web
• Device, browser, app version, IP address, and general diagnostic data

Location

With device permission, location-aware features may read your foreground location for nearby range or club searches, weather, proximity checks, visit logging, and hunt marks. Readings can be approximate or precise, depending on your device and permission settings. Visit and hunt records can store coordinates and place details with your account. Location is optional for the app, although particular location-based features need it. Get Zeroed does not continuously track your location in the background. Mapping and weather services may receive coordinates or place queries to provide these features.

Content and private wallet documents

We store content you choose to provide, including posts, comments, messages, social relationships, target images, and uploaded files. Certificate and permit wallet uploads can include document images or PDFs containing identification or firearm-related details. Their source files use private, owner-scoped storage; owner display uses short-lived links. They are not made public merely because you use social or profile features. Optional credential verification shares limited credential details, not the source file. Target and social images use separate media storage that can provide public URLs; private wallet storage does not apply to every upload.

AI-powered features

When you use AI-powered Spotter replies, target analysis, or extraction features, configured AI providers may receive your request, recent conversation, relevant saved shooting context, and images you submit. Reading a credential photo can transmit the photo content, including details visible on the document. This processing can occur before you confirm and save the extracted credential. Private storage does not mean that content is withheld from the AI provider when you use that feature. You can enter credential details manually instead. Provider processing and retention depend on the applicable API terms and account settings.

Payment and commerce data

Payments are processed by third-party processors such as Stripe. We do not store full payment card numbers on our servers.

Cookies and similar technologies

We use cookies and local storage for authentication, session persistence, preferences, and product analytics.

3. How We Use Information

• Provide, maintain, and secure your account and core product features
• Record and display scores, rankings, and event participation where applicable
• Process subscriptions, payments, and related account notices
• Send service messages, notifications, and support communications
• Improve product quality, performance, and feature decisions
• Detect abuse, prevent fraud, and enforce platform rules
• Comply with legal and regulatory obligations

4. Information Sharing and Disclosure

We may share your information with:

• Service providers: Hosting, analytics, messaging, and payment providers
• Ranges and match operators: Data needed for registration, scoring, and standings
• Public features: Information you intentionally make public (leaderboards, public profile fields)
• Legal compliance: If required by law, subpoena, or to protect rights and safety
• Corporate transactions: As part of merger, acquisition, or asset transfer

We do not sell personal information for money.

Optional analytics and insights. Product analytics, Industry insights, and Locker & ammo stats each require an affirmative, recorded opt-in in Privacy & Data. They are separate choices. Account-linked activity may be used to produce aggregate reports; reports omit direct identifiers and suppress small groups. Industry demand totals require at least five contributors and do not include your chat text or raw training records. Operational counters, AI usage accounting, and crash diagnostics are separate from optional product analytics.

Choosing a home range does not by itself share your private activity with it. Optional home-range analytics require your sharing choice and Product Analytics consent. Registration, check-in, coaching, and official event records can separately be available to authorized operators or coaches for those features.

5. Data Security

We use technical and organizational safeguards intended to protect your data, including access controls, transport encryption, and infrastructure security measures. No system can be guaranteed 100% secure.

6. Data Retention

We retain data for as long as necessary to provide the Service, maintain account history, meet legal obligations, resolve disputes, and enforce agreements. You may request account deletion by contacting support.

Account deletion removes eligible live account data through the process below. Backups, security logs, payment-provider records, and third-party processing records may remain under their applicable retention schedules. Previously downloaded copies and external organizer or governing-body archives are not recalled by deleting your account.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict processing
• Data portability
• Withdraw consent

To exercise these rights, contact MyRangeScore Support at support@myrangescore.com.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware such information was collected, we will take steps to delete it.

9. Mobile App Permissions and Notifications

Our mobile apps may request permissions such as camera (profile images/scan workflows), notifications (event and account updates), media access (uploads), foreground location, and microphone or speech recognition. Optional speech-to-text can use your device's speech-recognition service; recognized text follows the same Spotter pipeline as typed text. Processing is not guaranteed to remain entirely on the device. You can manage permissions in your device settings.

10. Third-Party Subprocessors

The Service uses the following providers for relevant features. Processing depends on the applicable contracts, service terms, privacy policies, and account settings.

• Supabase — primary backend, authentication, Postgres database, and file storage.
• Vercel — web hosting and edge networking for the MyRangeScore web app.
• Stripe — payments, subscriptions, and invoicing. Card numbers are tokenised by Stripe; we never store full PANs.
• Expo / EAS Push — over-the-air updates and push notification delivery for Get Zeroed and MyRangeStaff.
• Resend — delivery of service emails where enabled, including recipient addresses and message content.
• Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM) — vendor push transports used by Expo.
• Sentry — crash reporting and error diagnostics. Crash bundles include device model, OS version, app version, and a stack trace; we do not deliberately attach personal information.
• Google Sign-In — optional federated login that returns your name, email, and avatar.
• Anthropic, Google (Gemini), and OpenAI — configured AI processing for Spotter replies, target analysis, and extraction. The provider used depends on the feature and available routing, including fallbacks. Requests can include text, relevant context, and selected images.
• Mapping and weather services — Google Maps geocoding and weather lookups using Open-Meteo or WeatherAPI where enabled. These services can receive coordinates or place queries needed for the lookup.

We update this list when we add or remove subprocessors. Material changes are posted here at least 14 days before they take effect.

10a. Data We Collect, by Category

This product summary is not a substitute for the release-specific App Store and Google Play disclosures.

• Linked to you: name, email, profile photo, user ID, optional profile details, firearms/loadout, visits and saved location, scores, training records, event registrations, social content and relationships, private wallet documents, Spotter conversations, and push tokens or notification preferences.
• Operational data: device model, OS and app version, network request metadata, crash diagnostics, and service-usage accounting. Linkage depends on the record: AI usage accounting is account-linked; app diagnostics remove the user object and request bodies, but device/runtime context and request paths can remain.
• User-provided details: messages, images, and documents can contain information you choose to provide. We do not describe these optional contents as categorically excluding personal or identification information.

11. California Privacy Rights (CCPA/CPRA)

California residents may have rights to know, access, correct, delete, and limit certain processing of personal information under applicable law.

12. International Users

If you access the Service outside the United States, your data may be processed in the United States and other countries where our providers operate.

13. Account Deletion & Data Removal

You can request account deletion in Get Zeroed's Settings → Login & Security and from the web at:

myrangescore.com/account/delete

When you request deletion:

• When accepted, the request marks your account for deletion, disables stored push tokens, suspends active range-staff access, and signs you out. Notifications already submitted to a provider or scheduled on a device may still appear.
• There is a 30-day grace window. To cancel, use the web deletion page or contact support; signing back in alone does not cancel the request.
• After the grace window, a background purge removes eligible account-owned data, including your account and profile, shooting and training history, Spotter data, visits and saved coordinates, hunt marks, imported evidence, associated stored uploads, account-linked analytics, and notification tokens. Technical failures can require retries or operator attention; completion is not promised at the exact instant the grace window ends.
• Official results and related operational records can remain to preserve standings and shared event history. For records attributable to your account, the purge removes account linkage and direct personal details such as names, contact details, and membership numbers. Retained results follow their event's visibility rules. Registrations linked only by a matching signup email are detached rather than erased, because they can describe another person using the same address. Independent range/operator records are not necessarily owned by your app account.
• Aggregate statistics without your account linkage may remain. Payment and transaction records may also be retained for billing, accounting, disputes, or legal obligations.
• Ownership of a range, club, or event that others depend on, or a protected administrator role, can block deletion until resolved. See the deletion page or contact support. Logs and backups follow the retention qualifications above.

If you have lost access to the email on the account, write to support@myrangescore.com so we can review your request and verify ownership. A fixed completion time is not promised before that verification and any retention or ownership requirements are resolved.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page by updating the effective date.

15. Contact Us

For questions about this Privacy Policy or data requests, contact:

MyRangeScore Support
Email: support@myrangescore.com