Privacy Policy

Overview

ArrowFly ("we", "us", "our") helps archers discover events, register for tournaments, digitally score events, track practice sessions, and manage clubs. This Privacy Policy explains what personal data we collect, how we use and store it, and the choices and legal rights you have regarding your information.

We collect information you provide directly to us, data generated automatically when you use our app, and information from third parties.

Information We Collect

Account details you provide:

• Profile Information: Your name, email address, profile photo, and user role (archer or event organizer).
• Location Data: Optional location settings to help you find nearby clubs and tournaments.

Activity you create in the app:

• User Content: Event registrations, scoring sessions, target scores, and practice history.
• Organizer Data: Club details and event schedules published by organizers.
• Media: Score evidence photos uploaded to verify tournament results.
• Preferences: Communication and in-app notification preferences.

Automatically collected information:

• Device and Usage Data: IP address, device type, operating system, unique device identifiers, app crash logs, and interaction data (such as features used and pages viewed).

How We Use Your Information

We process your personal data for the following operational business purposes:

• To create, maintain, and secure your account.
• To process event registrations and organize tournament schedules.
• To calculate, record, and display public scores on event leaderboards.
• To deliver push notifications and email updates enabled in your settings.
• To monitor app performance, fix bugs, and improve user experience.
• To comply with legal obligations and enforce our terms of service.

Storage, Security, and Data Retention

Data Security: Your data is securely hosted through our infrastructure provider, Supabase. We enforce strict row-level security (RLS) database rules. This ensures you can only access your own private records.

Media Protections: Score evidence photos are kept in private cloud storage. They are never exposed publicly and are served exclusively through short-lived, signed, and encrypted links.

Data Retention: We retain your personal data for as long as your account remains active or as needed to provide our services. If your account is inactive for more than 24 consecutive months, we reserve the right to anonymize or delete your data. Public leaderboard scores may be retained in an anonymized format to preserve historical tournament integrity.

Third-Party Sharing and Disclosures

We do not sell, rent, or trade your personal data. We only share information with third parties under the following circumstances:

• Service Providers: Companies that provide infrastructure, hosting (Supabase), analytics, and customer support tools. These providers are bound by strict contract terms to keep your data private.
• Public Leaderboards: When you participate in a public tournament, your name, club affiliation, and scores are displayed publicly on event leaderboards.
• Legal Compliance: When required by law, subpoena, or government authority to protect user safety or defend our legal rights.

Children's Privacy Compliance (COPPA & Global Standards)

ArrowFly is a general audience app, but we recognize that many young archers participate in the sport. We comply strictly with the Children's Online Privacy Protection Act (COPPA) in the United States and similar global data laws.

• Age Restriction: Children under the age of 13 (or under 16 in the EU/UK) are not permitted to create an independent account without verifiable parental consent.
• Parental Consent Framework: If an archer is under the designated legal age, an account must be created and managed directly by a parent or legal guardian.
• Data Minimization for Minors: For child accounts managed by parents, we do not collect precise geolocation or display profile photos publicly. Leaderboard rankings will only display minimal info required for sports scoring (e.g., first name, last initial, and age division).
• Parental Rights: Parents or guardians have the right to review, edit, or demand the immediate deletion of their child's data at any time. To exercise these rights, please contact us at support@arrowfly.io.

Regional Privacy Disclosures (GDPR & CCPA/CPRA)

European Economic Area (EEA) & United Kingdom Disclosures (GDPR):

If you reside in the EEA or UK, ArrowFly acts as the "Data Controller" for your personal data.

• Legal Bases for Processing: Performance of a Contract (to manage your account, registrations, and scoring tools); Legitimate Interests (to secure infrastructure, prevent fraud, and maintain competitive sports leaderboards); Legal Obligation (to meet regulatory or tax requirements where applicable); and Consent (for processing precise location data or sending promotional marketing).
• International Data Transfers: Your data is stored via Supabase servers. If data is transferred outside the EEA/UK (e.g., to the United States), we utilize Standard Contractual Clauses (SCCs) approved by the European Commission to ensure a legal layer of safety.
• Your Data Rights: You have the right to access, correct, or erase your data; restrict or object to processing; and request data portability. You may also lodge a complaint with your local Data Protection Authority.

California Consumer Privacy Act Disclosures (CCPA/CPRA):

This section applies solely to residents of the State of California.

• Categories Collected & Disclosed: In the preceding 12 months, we collected Identifiers (name, email), Commercial Information (registrations), Internet/Electronic Activity (app usage), and Geolocation (optional city/state). These are shared only with operational service providers like Supabase.
• No Sale or Sharing: ArrowFly does not sell your personal information, nor do we "share" your data for cross-context behavioral or targeted advertising.
• Your California Rights: You have the right to request access to your data, request deletion, correct inaccuracies, and limit the use of any sensitive data. We will never discriminate against you for exercising these rights.

Your Rights and Account Deletion

Data Modification: You can view and edit your profile details at any time by navigating to Edit My Profile inside the app settings.

Permanent Account Deletion: You can permanently wipe your account at any time. Go to Profile › Account & Legal › Delete Account.

• What Deletion Clears: This instantly and permanently deletes your profile, profile photo, scores, practice sessions, tournament favorites, and notification settings.
• Organizer Profiles: If you are an organizer, deletion will also permanently erase all clubs and events you created.
• Finality: This action is immediate, automated, and cannot be undone.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app features or legal mandates. When updates are made, we will change the "Last Updated" date at the top of this page. For significant changes, we will notify you through an in-app banner or via email.

While personal identifiers are erased upon account deletion, tournament performance data and raw scores are permanently retained to maintain the integrity of historical sporting records. Financial transactions are handled by third-party processors, and the mobile app requests specific permissions — including camera, notifications, and location — for tournament-related features. In the event of a security breach, ArrowFly commits to notifying users within 72 hours of discovery.

Contact Us

If you have any questions, feedback, or concerns regarding this policy or your personal data privacy, please reach out to us at: support@arrowfly.io.