Archesk — Privacy Policy

Last updated: 5 August 2026

Archesk ("the app") is an archery scoring application operated by Richard Hansson ("we", "us", "our"). This policy explains what information the app collects, how it is used, who it is shared with, and the choices you have. By creating an account or using Archesk you agree to this policy.

In short: we collect the account and archery data you enter so the app works and syncs across your devices. We do not sell your personal information. You can request access to, correction of, or deletion of your data at any time — see Your choices and rights.

1. Who we are

Archesk is provided by an individual developer. For any privacy question or request, contact us at contact@archesk.com.

2. Information we collect

Account and sign-in

Your email address, and a password if you sign up with email.
If you sign in with Google, we receive basic profile information from Google (such as your name, email address, and profile picture). We never receive your Google password.
If you enable two-factor authentication, a secret used to verify the one-time codes you generate.

Profile information

Display name, alias, and profile photo.
Archery club, nationality, date of birth, and gender.
An optional "about me" description and image.
A featured bow setup you choose to show.

Date of birth and gender are used to place you in the correct archery age class and shooting category.

Archery activity

Scoring sessions, ends, individual arrow scores, and statistics.
Equipment you record: bow setups, arrows, and rests.
Competition entries, group rosters, rankings, and skill ratings; duel (head-to-head) games and results.

Social features

Your friend connections and the sessions you choose to share.
Direct messages you send to friends (and, for support, to app administrators).

Target photos

If you use photo scoring, you provide a photo of the target face. The photo is analyzed on your device to detect the target and locate arrow impacts. Profile and "about me" images you upload are stored so they can be shown and synced.

Technical information

To sync and secure your data we process standard technical details such as your account identifier and the timestamps of your changes. When you create an account we also record the IP address the request came from, so we can detect and block automated bulk sign-ups; see Bot protection. If the app crashes we collect a diagnostic report; see Crash reporting. We do not use third-party advertising trackers.

3. How we use your information

To create and secure your account and sign you in.
To provide scoring, statistics, equipment, competitions, and duels.
To sync your data across the devices where you are signed in.
To enable friends, shared sessions, and messaging.
To place you in the correct competition category and rankings.
To respond to your support requests and keep the service working.

We do not sell your personal information. We share data only as follows:

Other users — your public identity (display name, alias, club, and avatar) is visible to other users so they can find you, add you as a friend, and see you in competitions and rankings. Details such as your date of birth and email are not shown to other users. Sessions and messages are shared only with the people you choose.
Service providers we use to run the app (see below). They process data only to provide their service to us.
Legal reasons — if required by law or to protect the rights, safety, or property of users or the public.

Service providers

Provider	Purpose
Supabase	Account authentication, database, and file storage.
PowerSync	Syncing your data between your devices and our database.
Google	Optional "Sign in with Google".
Cloudflare	Bot protection on sign-up, sign-in, and password reset.
Firebase (Google)	Push notifications, and crash reporting.

Crash reporting

If the app crashes or hits an unexpected error, a diagnostic report is sent to Firebase Crashlytics (a Google service) so we can find and fix the problem. These reports contain technical information such as the type of error, where in the app it happened, your device model and operating system version, and an app-generated installation identifier. They do not contain your archery scores, messages, or photos.

Bot protection (Cloudflare Turnstile)

To stop automated sign-ups and protect your account against automated guessing, our sign-up, sign-in, and password-reset screens use Cloudflare Turnstile. Turnstile checks that the request comes from a real person. In most cases this happens silently and you will see nothing; occasionally you may be asked to tick a confirmation box.

To perform that check, Cloudflare processes technical information from your device and network, such as your IP address and browser or device characteristics. Cloudflare acts as our service provider for this purpose and does not use the information to build advertising profiles. See Cloudflare's Turnstile Privacy Addendum and Privacy Policy.

We also record the IP address and email domain of sign-up attempts for a short period so we can detect and block bulk automated registrations.

5. Storage and security

Data on your device is kept in a local database that is encrypted at rest; the encryption key is generated on the device and held in the platform's secure storage.
Data in transit is protected with encryption (HTTPS/TLS).
Your data in the cloud is stored by our service providers with access restricted to your account.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

6. Data retention

We keep your information for as long as your account exists. When you delete your account, your profile and associated data are deleted (see Your choices and rights). Some records may remain in encrypted backups for a limited period before being overwritten.

7. Children

Archery is practised by young athletes, and the app supports youth age classes. Archesk is not directed to children under 13, and where a child uses the app an account should be created and managed with the consent and involvement of a parent or guardian. If you believe a child has provided us personal information without appropriate consent, contact us at contact@archesk.com and we will remove it.

8. Your choices and rights

Access and correction — you can view and edit your profile details in the app at any time.
Deletion — you can permanently delete your account and data yourself from Profile → Edit profile → Delete account in the app. See our User Data Deletion instructions for the full steps and an email option if you can no longer sign in.
Disconnecting a login — you can revoke Archesk's access from your Google account settings.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, notify you in the app.

10. Contact us

Questions or requests about your privacy? Email contact@archesk.com.