Archery Score Tracker
← Back to home

Privacy Policy

Effective date: 1 May 2026

1. Introduction

Archery Score Tracker ("the App") is operated by IlmLabs ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the App.

By using Archery Score Tracker you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account information

When you create an account we collect your email address and display name. You may sign in with email and password, Apple Sign-In, or Google Sign-In.

Profile data

You may optionally upload a profile photo from your device's photo library. You may also provide archery-related preferences such as bow type and experience level.

Training data

The App records data you enter during training sessions, including scores, arrow placements (x/y coordinates on a target face), bow configurations, distances, target faces, sight marks, and session notes.

Progress data

We calculate and store experience points (XP), levels, achievements, and personal best records based on your training data.

Analytics data

We use Firebase Analytics to collect anonymous usage events such as screen views, feature usage, and session completion. These events do not contain personally identifiable information.

Device data

The App may access device motion sensors to provide a subtle parallax visual effect. This data is processed locally on your device and is not transmitted to our servers.

Push notification tokens

If you opt in to push notifications, we store a Firebase Cloud Messaging token to deliver notifications to your device.

AI coaching data (Pro subscribers only)

If you subscribe to Archery Score Tracker Pro and view a plotted training session with at least three arrows, the App sends a small set of anonymised session metrics to an OpenAI language model (currently gpt-4.1-mini) so it can generate personalised coaching feedback for that session. The request is proxied through our Supabase Edge Function, and the response is constrained to a fixed JSON shape that we validate before returning it to your device.

What is sent: bow type, shooting distance, target face, plotted-arrow count, group radius, drift (distance and direction), an Advanced Group Index score, per-end consistency averages, score distribution counts, the most recent matching session's per-arrow average, and a short rule-based hint identifier.

What is never sent: your account identifier, email, display name, custom bow names, sight mark text or notes, individual arrow x/y coordinates, the session identifier, or any free-text session notes. The session identifier is used server-side only to cache the response and is stripped before the request reaches OpenAI.

AI coaching responses are cached on our servers so re-opening the same session does not generate a new request. If you delete a session from the App, its cached AI response is deleted at the same time.

3. How We Use Your Information

  • Provide and maintain the App's training logging, analysis, and review features
  • Calculate progress metrics such as XP, levels, and achievements
  • Display training insights and performance trends
  • Send push notifications about training reminders (only with your consent)
  • Improve the App through anonymous, aggregated usage analytics
  • Respond to support inquiries

4. Third-Party Services

We use the following third-party services to operate the App:

  • Supabase — database hosting and authentication. Your data is stored on Supabase-managed infrastructure. See the Supabase Privacy Policy.
  • OpenAI: provides the language model that generates personalised session coaching for Pro subscribers. Anonymised session metrics are sent over the OpenAI API for processing, with personal identifiers stripped before the request leaves our servers. See the OpenAI Privacy Policy.
  • Firebase Analytics — anonymous usage analytics. See the Google Privacy Policy.
  • Firebase Cloud Messaging — push notification delivery. Governed by the same Google Privacy Policy linked above.
  • Apple Sign-In / Google Sign-In — authentication only. We receive an authentication token and, where provided, your name and email address. We do not access your contacts or other account data.

5. Data Storage and Security

Your data is stored in a Supabase-managed PostgreSQL database protected by row-level security policies. All data is transmitted over HTTPS. Authentication is handled via industry-standard protocols.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention and Deletion

  • Your training data is retained for as long as your account is active.
  • You may delete your account at any time from the Settings screen within the App. Account deletion permanently removes all user-owned data, including sessions, scores, arrows, bows, achievements, XP history, and your profile.
  • Deletion is permanent and irreversible.
  • Anonymous analytics data is retained in accordance with Firebase's standard retention policy (up to 14 months for event data).
  • AI coaching responses generated for Pro subscribers are cached on our servers, keyed by session identifier and a hash of the session metrics. Deleting a session permanently removes its cached AI response. Anonymised token-usage logs are retained for billing reconciliation and contain no personal training data.

7. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (you can also delete your account directly in the App)
  • Data portability — request your data in a structured, machine-readable format
  • Restrict processing — request that we limit how we use your data
  • Object to processing — object to our use of your data in certain circumstances
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Children's Privacy

Archery Score Tracker is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will notify you within the App or via email.

10. Contact Us

If you have any questions about this Privacy Policy, contact us at: