Privacy & data permissions
Privacy Policy
How ShotTrack handles account information, training metadata, on-device videos, device permissions, and third-party services.
1. Who we are and scope
The data controller for the ShotTrack App and this website is Special Pie Technology Ltd (广东极限派科技有限公司), registered at 广东省东莞市松山湖园区南山路3号5栋3单元, China. Contact: service@special314.com.
This policy applies to the ShotTrack mobile application and the public website at shottrack.globaliesa.com. Third-party services have their own privacy policies; this policy explains the data flows to those services used by ShotTrack.
2. Data we process
2.1 Account, profile, and training data
| Category | Examples | Source and purpose |
|---|---|---|
| Account and authentication | Email address, Supabase user ID, display name, authentication/session metadata, signup and recovery events | Provided by you or received through the selected sign-in method to create and secure your account. |
| Shooter profiles | Name, initials, nationality, avatar color, and shooter-level statistics | Provided or edited by you to organize sessions and display shooter performance. |
| Training metadata | Session name, type, stage, date, source filename, duration, file size, shot times, splits, confidence/status values, ratings, comparisons, announcements and in-app notifications | Generated from your use of the App to provide session history, analytics, comparisons, operational announcements, and synchronization. |
| Remembered timer details | SP M1A2 Timer name, platform Bluetooth identifier, battery, firmware, signal, and last-connected selection | Stored on this device under your signed-in account to reconnect and display the timer; the BLE identifier is not uploaded as a cloud device record. |
| Session timer events | Shot timing and timer events used in a training session | Processed locally to place shots on the timeline and may be included with cloud session metadata. |
| Login security records | Email address, failed-attempt and lockout state, and IP-based rate-limit keys | Used to prevent brute-force attempts and abuse of authentication and email endpoints. |
| Local media and derived data | Training videos, recorded videos, audio waveforms, timing sidecars, temporary comparison files, exported images/videos, settings, and cached Pro content | Created or selected on your device to provide local analysis, playback, export, and preference storage. |
| Operational Pro content | Professional/public shooter names, event details, public video URLs, thumbnails, and shot metadata | Provided by the service operator as public training content; it is not your private training video. |
2.2 Local videos are different from cloud metadata
ShotTrack does not upload your training video files to Supabase. Video selection, audio analysis, shot review, video composition, and export processing are performed on your device.
Cloud-stored account and training metadata includes records such as your account profile, shooter profiles, sessions, shots, comparisons, and notifications. Remembered timer connection details remain on this device and are isolated by account. Metadata can synchronize to the cloud while the underlying training video and BLE connection record remain local.
2.3 Authentication security records
The login-protection flow uses both email-based throttle state and IP-based rate-limit keys to reduce brute-force and abuse attempts.
| Store | Purpose | Reviewed cleanup |
|---|---|---|
login_throttles | Email, failed-attempt count/window, lockout state, and update timestamp | Cleanup for records older than 30 days; account-deletion cleanup for the relevant email is also present. |
rate_limits | Rate-limit key containing a route/bucket and client IP, count, window start, and update timestamp | Cleanup for records older than 2 days |
2.4 Passwords and secrets
Password authentication is handled by Supabase Auth. ShotTrack's training database is not designed to store your plaintext password. Never share your password, API keys, signing keys, or one-time verification codes with support personnel.
3. Device permissions and media access
Permissions vary by feature, operating-system version, and the choices you make. A permission may be requested only when the related feature is used.
| Capability | Why it is used | Data-handling note |
|---|---|---|
| Camera | Record Live Camera training sessions and show the camera preview. | Recorded video is processed and stored locally unless you explicitly export or share it. |
| Microphone | Preserve range audio in recorded video and support shot/bee-related analysis. | Audio analysis is performed on-device; the App does not stream your training audio to Supabase. |
| Bluetooth / nearby devices | Scan for, connect to, and exchange timer data with the supported SP M1A2 Timer. | Connection and timer data are used for equipment functionality and training timelines. |
| Location on Android 11 and earlier | Support BLE scanning on Android versions where the operating system requires location for that scan. | The reviewed implementation does not use GPS/geolocation tracking for training analytics. Android 12+ BLE scanning is declared as not for location. |
| Gallery / media storage | Save exported videos and statistics images that you choose to keep. | On older Android versions, a limited external-storage write permission may be required. Newer versions use the platform media store. |
| Files and network | Select source videos, access Supabase services, download public Pro content, and open external links you choose. | Network access is also used for authentication, metadata, and email-related functions. |
You can revoke permissions in system settings, but related features may stop working. Denying a permission does not necessarily disable every other App function. Platform-specific behavior must be checked again before an iOS release.
4. Why we process data
- Provide authentication, account recovery, and account security.
- Provide shot detection, timing, session history, analytics, comparisons, and timer connectivity.
- Store and synchronize account and training metadata associated with your account.
- Generate local videos, statistics cards, and other exports that you request.
- Send transactional email, such as signup and recovery messages.
- Prevent abuse, troubleshoot failures, maintain security, and comply with legal obligations.
- Provide product support and improve reliability without selling your personal information.
The reviewed project does not include an advertising SDK or a behavioral-analytics SDK. The final release dependency set must still match this statement.
6. Retention and deletion
| Data | Retention approach |
|---|---|
| Account and cloud training metadata | Kept while your account and related records are active, then deleted through supported deletion flows, subject to applicable legal-retention requirements. |
| Login throttle records keyed by email | login_throttles records older than 30 days are cleaned up. Account deletion also cleans up the relevant email-based record. |
| IP-based authentication rate-limit keys | rate_limits records older than 2 days are cleaned up. |
| Local videos and derived files | Kept on your device until you delete the related session, use a supported reset/deletion flow, clear App data, or remove the files yourself. |
| Exported/shared media | Retained by your gallery, recipients, or third-party platforms according to their own controls; not automatically reclaimed by account deletion. |
| Support correspondence | Kept for up to 12 months after a request is resolved, then deleted or anonymized unless a longer period is required for a dispute, safety, or applicable law. |
| Financial and legal records | Retained for the period required by applicable law or needed to resolve an active dispute. |
For account deletion instructions, see the account and data section in Support Center. You may also contact service@special314.com.
7. Security
The reviewed architecture uses device-local storage for private training videos, Supabase row-level security for user-owned cloud tables, authenticated account sessions, and restricted service-side functions. Public website connections should use HTTPS.
No online service or device can guarantee absolute security. Keep your operating system updated, protect your device and email account, and do not share verification codes or credentials.
8. Your rights and choices
Subject to applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to a data-protection authority.
- Review and update eligible profile and shooter information in the App.
- Control device permissions through system settings.
- Delete local sessions or use the supported account-deletion flow.
- Choose whether to export or share media with a third party.
- Contact the operator to exercise other applicable privacy rights.
To make a privacy request, email service@special314.com, preferably from the address associated with your account. We may verify control of that email address through a verification message. Do not send passwords or full identity documents. Requests receive a response within the period required by applicable law, normally within 30 days.
9. Children, cookies, automated decisions, and contact
Children
ShotTrack is intended only for users who are at least 18 years of age and is not directed to children. Do not create an account if you are under 18.
Cookies, local scripts, and this website
This static website uses local JavaScript only to enhance optional product demos and document navigation; core legal content remains readable without it. The site has no advertising tags, analytics tags, or site-coded cookies. The hosting provider processes technical requests necessary to deliver the website.
Automated decisions
Shot detection and timing analysis assist your review; they are not intended to make legal, employment, credit, insurance, or safety-critical decisions about you. You can review and adjust detection results in supported flows.
Changes to this policy
Material changes will be reflected in a new version and effective date. Additional notice may be provided for significant changes.
Contact
Privacy contact: Special Pie Technology Ltd (广东极限派科技有限公司), 广东省东莞市松山湖园区南山路3号5栋3单元, China. Email: service@special314.com.