XarcheryXscore
Legal & Privacy

Legal notice

Privacy Policy

Version 3.0 · Effective 9 August 2026

We operate no server and hold no account. There is nowhere for us to store your data, because we did not build one. Your scores stay on your device.

1. The short version

2. Age

Archery is a youth sport, and this app is very likely to be used by people under 18. We have designed around that fact rather than around a disclaimer: the default configuration collects nothing from anyone and sends nothing anywhere.

If you are under 13, you may use the app for scoring. Ask a parent, guardian, or coach before joining an online squad, because that is the one feature where other people see something you typed.

We do not knowingly collect personal information from children under 13. Because we operate no server, there is in practice nothing for us to have collected. We do not attempt to infer your age from your behaviour, scores, or location.

3. Every category of data

CategoryWhere it livesLeaves device?
Scores and roundsDevice, optional iCloudOnly via your own iCloud, your own export, or a squad you join
Archer profile (name, club, age class)Device, optional iCloudName only, and only into a squad you join
Equipment, sight marks, tapesDevice, optional iCloudOnly via your own iCloud or export
Notes, settings, arrow trackingDevice, optional iCloudNever
Coarse locationDevice memoryTo the weather provider only, at the moment of lookup
Saved range locationsDeviceNever
Squad session dataDevice; in transit between phonesOnly while you are in a squad
Competition-list requestAn ordinary web request for a public fileHost receives network metadata such as IP address
Crash dataApple or GoogleOnly if you opted in at the OS level

Nothing outside this table is collected. There is no installation identifier in this version.

4. Data that stays on your device

iCloud sync. If you turn it on, the app copies your data into your own private iCloud database. We have no access to it and hold no key for it. There is no mechanism by which we could read it even if compelled, because it never passes through our systems.

Backup export. You choose where the file goes. Once saved, it is outside the app and outside this policy. If you put it in a shared folder, it is shared.

Deletion. Deleting the app removes everything immediately and irrecoverably. We cannot restore it, because we never had it.

5. Location

Location is optional and off until you are asked. The app is fully functional without it.

Wind: your coordinates are sent to Open-Meteo to look up wind speed and direction. They are not sent to us, not stored by us, and not attached to your scores.

Archery mode: an optional geofence that notices when you arrive at a range you saved. The app is not following you — it does not build a history of where you have been and does not receive your position at any other time. We do not use continuous background location tracking.

6. Online squad scoring

This is the one feature where other people see something of yours. You are asked to confirm before any of it starts, and declining costs you nothing else in the app.

While you are in a squad, the following is visible to the other people in that squad: the name in your archer profile, the room code, and your live scores for that session. That is the complete list. Your notes, bow setups, sight marks, saved ranges, location, and round history are never part of a squad session.

Your name is the only identifying thing shared. Nothing requires it to be your real or full name — change it in your archer profile before joining if you would rather not show it.

How it travels. Phones connect directly to each other where the network allows. To arrange that, the app uses a public PeerJS broker — a third-party signalling service that introduces two devices. The broker sees the room code and the network addresses of the devices connecting. Where a direct connection cannot be established, traffic may be relayed through third-party infrastructure. We do not operate this broker and we receive nothing from it.

We use it because building squad scoring any other way would mean running a server that holds archers' scores, which is a larger privacy cost. It is a real trade-off and you are entitled to know which way we took it.

7. Competition listings

The Competitions tab downloads a published file of public event information — title, dates, organiser, location, and a link. It does not send your scores, notes, profile, saved ranges, or location. Like any internet request, the host can receive ordinary network metadata such as your IP address.

Competition data is informational. Always confirm dates, eligibility, and registration with the organiser.

8. The camera

This version of the app has no camera feature. It does not photograph anything and does not ask for camera access.

We name this explicitly rather than staying silent. Earlier versions of this policy described a photo-scoring scanner in detail, and anyone comparing the two documents deserves to know what changed. A related feature — an optional setting that shared corrected target photographs with us to improve arrow detection — has been removed entirely, along with the storage that received it.

No photographs are captured, stored, or transmitted. We operate no photo storage and no training database. We hold no photo library permission and never did.

If photo scoring returns in a future version, this policy will be updated before that version ships.

9. Third parties

A sub-processor is a company that processes personal data on our behalf, under our instructions. We currently have none, because we operate no server and store nothing. These third parties are nonetheless involved:

Third partyWhat they receiveRelationship to us
Apple / GoogleYour iCloud data, encrypted and inaccessible to us; crash reports only if you opted in at the OS levelPlatform providers, governed by their own policies
Open-MeteoCoarse coordinates at the moment of lookup, only if location is enabledIndependent service queried on your behalf; receives nothing from us
PeerJS brokerRoom code and device network addresses, only while you are in a squadPublic infrastructure we do not operate or control

We do not use third-party analytics providers, advertising networks, attribution services, or session-recording tools. There are no SDKs in this app whose purpose is to observe you.

10. Security

App data is stored in the app's own container, isolated by the operating system and protected by device encryption when your device is locked with a passcode.

Every network request uses HTTPS or an encrypted WebSocket. The app makes no plaintext HTTP requests. It also enforces a Content Security Policy that permits code to run only from within the app bundle — it cannot download and execute code from the internet.

There is no "our side". We operate no server, database, or object storage in connection with this app. A breach of our systems cannot expose your scores, because your scores are not in our systems.

No system is perfectly secure. We cannot guarantee the security of data crossing networks we do not control, of your device if it is compromised, or the practices of the third parties above.

11. What we do not do

12. Your rights

Wherever you are, most rights you can exercise without us, because the data is on your device: delete the app and it is gone; export a backup for a copy; every switch is in Settings.

Under GDPR and UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection, and may complain to your supervisory authority. Under CCPA/CPRA you have rights to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal information as those terms are defined, and never have. Comparable rights under other US state laws, PIPEDA, and the Australian Privacy Act are extended to everyone rather than by jurisdiction, which would itself require collecting your location.

Our honest answer to most access and deletion requests will be that we hold nothing to give or delete, and we will say so in writing if that is useful to you.

Because we operate no server, we perform no international transfers of your data. If we become aware of a security incident affecting personal data, we will notify affected users and any required regulator within the timeframes applicable law sets.

13. Every switch

SettingDefaultSends data off device?
iCloud syncOffTo your iCloud only
Location (wind)Off until askedCoarse coordinates to the weather provider
Archery modeOffNo
Online squad scoringOff until you joinYes — name, room code, live scores
Arrow trackerOffNo
Coach notesOffNo

Online squad scoring is the only switch that shows anything of yours to another person.

14. Changes

If we change this policy, the updated version ships with the app and is posted here. Material changes — particularly any change that causes data to leave your device where it previously did not — will be brought to your attention in the app before they take effect.

Version 3.0 (9 August 2026): Photo scanner, on-device arrow detection, depth sensing, and the optional training-data upload all removed from the app. Supabase removed as a sub-processor; the training database and photo storage were deleted. Installation identifier removed. Online squad scoring documented in full for the first time, including the third-party PeerJS broker.

15. Contact

For privacy questions, requests, or to report something in this policy that does not match what the app actually does: techbobkl@gmail.com

We aim to respond within 30 days, and faster for requests from parents and guardians. If you believe this policy describes something the app does not do, or omits something it does, please tell us. We would rather correct it than defend it.