Privacy Notice
How Mouflon collects, uses and protects personal data — what we take, why, who can see it, how long we keep it, and what you can demand of us.
Version 1.0 · Last updated [DATE]
1. Who is responsible for your data
Mouflon Shooters is a training and club-management service for ISSF 10m air pistol and air rifle shooting.
- Operator: [OPERATOR LEGAL NAME], [REGISTERED ADDRESS], [COMPANY NUMBER].
- Contact: [privacy@DOMAIN].
- Data Protection Officer: [DPO CONTACT, or a statement that none is required].
Who controls your data depends on how you use Mouflon. If you belong to a club, your club is the controller and we are its processor, acting on its instructions under a data processing agreement. If you are an independent (solo) athlete, we are the controller. Club members should ask their club first; requests about your account itself — export, deletion — you can always make directly in the app.
2. What we collect and why
Only what the service needs. We collect no special-category data — no health records, no biometrics. Shooting scores are performance data, not health data.
- Account: name, email, password hash — to create and secure your account (contract).
- Profile: date of birth (age categories and the guardian-consent check), optional photo and phone (consent), guardian contact details where you are under 18.
- Sport identity: ISSF ID, club or licence number — to enter you in competitions (contract).
- Training: session logs, shot scores, shot placement, notes, perceived exertion — the core of the product (contract).
- Club operations: lane bookings, attendance, competition entries and results, equipment records (contract; safe equipment is a legitimate interest).
- Coaching: feedback and verdicts your coach writes about you (contract).
- Billing: fee ledger entries — amount, status, payment reference (contract and accounting obligations).
- Notifications: push token, device language, your preferences (consent).
- Diagnostics: crash reports, to find and fix defects (legitimate interest).
Voice stays on your device. Spoken shot entry is processed by your phone. Your voice is never recorded, stored, or sent to us or anyone else. That is also why the feature is not offered in a web browser: a browser has no on-device recogniser, so a web version would have to ship audio to a third party — we would rather not offer it at all than offer it quietly differently.
No advertising, no profiling, no selling. We do not sell personal data, share it with advertisers, or make automated decisions that produce legal or similarly significant effects about you.
3. Children
Shooting clubs have junior members, so this matters more here than in most apps.
- Under 18, we collect a parent's or guardian's contact details so the club can reach a responsible adult.
- Below the digital age of consent in your club's country — 13 to 16, depending on the member state — a parent or guardian must agree to this notice on the child's behalf before we process their data. The app works out the applicable age from the club's country and asks for that consent.
- We make reasonable efforts to confirm consent comes from the holder of parental responsibility, proportionate to the low risk of this service. We do not claim to verify parental identity.
4. Who else sees your data
Access is enforced by the database itself through row-level security, not merely by the app.
- Your club's staff see their own club's data; coaches see their own athletes. No club can see another club's data.
- Other athletes in your club see only the leaderboard and achievements. Never your notes, coach feedback, or fees.
- Solo athletes' data is visible to nobody but themselves.
Our sub-processors, each under Article 28 terms:
- Supabase — database, authentication, storage, functions (EU region).
- Stripe — club subscriptions and member fees.
- RevenueCat — solo premium subscriptions.
- Expo — push notification delivery.
- Cloudflare — web hosting and delivery.
- Sentry — error diagnostics.
Transfers outside the EEA rely on Standard Contractual Clauses.
5. How long we keep it
- Account and training history — for as long as your account exists.
- After you delete your account — erased immediately; backups roll off within [30] days.
- A club that closes — athletes are detached and keep their own history; the club's operational data is deleted.
- Fee and payment records — [7] years, or as accounting law requires.
- Audit logs — [24] months. Diagnostics — [90] days.
- Inactive accounts — reviewed after [36] months without activity.
Retention is reviewed and enforced by a person, not by an automatic job. Nothing is deleted on a timer.
6. Your rights
- Access — Settings → Export my data returns your whole account as a spreadsheet or PDF, immediately, without asking anyone.
- Rectification — edit your profile; ask your coach to correct club-held records.
- Erasure — Settings → Delete my account. Immediate and irreversible. Club owners must first close or hand over the club, because deleting the owner would orphan every member.
- Portability — the same export, in a machine-readable format.
- Restriction and objection — contact us or your club.
- Withdraw consent at any time where consent is the basis. Withdrawal does not affect processing already carried out.
- Complain to a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection, or the authority where you live.
We answer within one month. We do not charge for this.
7. Security
- All traffic uses TLS. Passwords are hashed by the authentication provider; we never see them.
- Authorisation is enforced in the database. Every table carries row-level security tied to your club membership, so a bug in the app cannot expose another tenant's data — the query itself is refused.
- Payment card details never reach our servers.
- Operator access to production is limited, and every operator write is recorded in an audit log.
8. Cookies and local storage
This site stores only what it needs to work: your language choice and a cached country code used to pick a starting language. There are no advertising cookies, no analytics trackers and no third-party pixels, which is why you are not being asked to dismiss a consent banner — none is required for strictly necessary storage.
Your IP address is used transiently at our CDN edge to guess a starting language. It is not read, logged or stored by us.
9. Changes
If we change this notice materially we will raise its version and ask you to agree again the next time you open the app.