WHO WE ARE

All Alphas is made by VanLi Labs LLC (“we”), Kansas, USA. This policy covers the All Alphas iPhone app and allalphas.com.

WHAT STAYS ON YOUR PHONE

Drills, runs, scores, gear, ammo counts, reminders, checklists, range day plans and target photos are stored on your iPhone. We can’t see them unless you turn on Cloud sync or share something. Most of the app works without an account; Community (friends, teams, sharing) and Cloud sync need one.

WHAT WE COLLECT

If you create an account: your email address (from Sign in with Apple, which may be Apple’s private relay address, or the address you enter to get a 6-digit sign-in code); your name, if Sign in with Apple shares it, which becomes your display name (change it in Profile → Account); profile details you add: @username, division and classification; a friend code; and an account ID that links them.

What other people can see: anyone who searches your exact @username or friend code can see your display name, @username, division and classification. Friends and teammates also see what you share with them.

If you use friends and teams: your friend list and requests, people you’ve blocked, and the teams you belong to; what you choose to share: runs and personal bests (time, score, hit factor, shot splits), drills you send, range day invites (date, time, range name and address, drills; never your notes or checklist), and team chat messages, which the members of that team can see; reports you make and moderation records, such as a suspension.

With All Alphas Pro and Cloud sync turned on: a copy of your training data, so it can come back on a new phone. Only your account can read it. Target photos only if you also turn on Include photos (a smaller copy; the original stays on your phone).

If you join the beta list on allalphas.com: your first name, last name (optional) and email address; your confirmation that you’re 18 or older and have an iPhone; and the dates you signed up and, later, were invited. We use them only to send your TestFlight invite and a few updates about the beta. We don’t sell or share the list, or use it for ads. Joining the list doesn’t create an All Alphas account.

If you subscribe: your subscription status (plan, renewal and end dates) from Apple, through RevenueCat. We never see your payment details.

If you choose to share error reports (the app asks when you first open it; change it any time in Profile → Privacy & data): what went wrong, where in the app, your app and iOS version, and a random ID for your phone. If you’re signed in, the report is linked to your account. Reports never include your runs, gear, photos or email address.

Automatically, when the app goes online: like any internet service, our providers receive your IP address and basic request logs when the app signs in, syncs or loads community content, or when you join the beta list on the website. When the app checks for updates (Expo), it sends a random install ID, the app version and your IP address, not your data.

PERMISSIONS

Every permission is optional and asked only when you use the feature. Camera and photos: target photos, and scanning QR codes for shared drills, friend and team codes. Bluetooth: connecting to an SG Timer shot timer, including while the phone is in your pocket during a drill. Notifications: maintenance, battery and ammo reminders, scheduled on your phone. The app doesn’t use your location.

WHAT WE DON’T DO

We don’t sell or rent your data, show ads, or use advertising or analytics trackers. We don’t track you across other companies’ apps or websites.

WHO PROCESSES YOUR DATA

These companies handle data only to run All Alphas for us, under their own security and privacy terms: Supabase (database, sign-in, photo storage: account, profile, community content, synced data, error reports, the beta list); Apple (Sign in with Apple, payments, and TestFlight when we invite you to the beta); RevenueCat (subscription status: account ID, purchase receipts); Resend (sending sign-in codes: email address); Expo (app updates: install ID, app version, IP address).

HOW LONG WE KEEP IT

Account deletion: delete your account in the app at Profile → Account → Delete account, or email us. Your account, profile, friends, team memberships, shared content, chat messages, synced data and cloud photos are removed right away; copies in backups expire within 30 days. A team you own with other members stays for them and passes to its longest-serving admin (or member). Data on your phone stays until you delete it or the app.

When Pro ends: nothing on your phone is deleted. Syncing stops, and your cloud copy is kept for 90 days in case you subscribe again, then deleted.

The beta list is kept until the beta ends or you ask us to remove you (email privacy@allalphas.com), whichever comes first.

Error reports are kept up to 90 days; after account deletion they stay without the link to your account. Reports and moderation records are kept as long as needed to keep the community safe. Turning off Cloud sync keeps the cloud copy; Delete cloud copy in Cloud sync removes it right away.

YOUR RIGHTS & CHILDREN

You can ask to see, correct, export or delete your data at any time: email privacy@allalphas.com; we answer within 60 days. You can also export everything yourself (Profile → Export full backup) and delete your account in the app. All Alphas is for adults 18 and older. We don’t knowingly collect data from anyone under 18; if you think a child has an account, tell us and we’ll delete it.

SECURITY

Data travels encrypted (HTTPS). Synced data is readable only by your account. No system is perfectly secure; tell us at privacy@allalphas.com if you find a problem.

CHANGES & CONTACT

If this policy changes, we’ll update the date above and tell you in the app if the change is significant. Questions: privacy@allalphas.com