Privacy Notice
How Mouflon collects, uses and protects personal data: what we take, why, who can see it, how long we keep it, and what you can demand of us.
Version 1.1 · Last updated October 4th, 2026
1. Who is responsible for your data
Mouflon is a training and club-management service for ISSF 10m air pistol and air rifle shooting.
- Operator: Konstantinos Stergiopoulos
- Contact: [email protected]
Who controls your data depends on how you use Mouflon. If you belong to a club, your club is the controller and we are its processor, acting on its instructions under a data processing agreement. If you are an independent (solo) athlete, we are the controller. Club members should ask their club first; requests about your account itself (export, deletion) you can always make directly in the app.
2. What we collect and why
Only what the service needs. We collect no special-category data (no health records, no biometrics). Shooting scores are performance data, not health data.
- Account: name, email, password hash, to create and secure your account (contract).
- Profile: date of birth (age categories and the guardian-consent check), optional photo and phone (consent), guardian contact details where you are under 18.
- Sport identity: ISSF ID, club or license number, to enter you in competitions (contract).
- Training: session logs, shot scores, shot placement, notes, perceived exertion, the core of the product (contract).
- Club operations: lane bookings, attendance, competition entries and results, equipment records (contract; safe equipment is a legitimate interest).
- Coaching: feedback and verdicts your coach writes about you (contract).
- Billing: fee ledger entries: amount, status, payment reference (contract and accounting obligations).
- Notifications: push token, device language, your preferences (consent).
- Diagnostics: crash reports, to find and fix defects (legitimate interest).
- Score-screen photos: optional pictures of an electronic target screen, to read your scores (contract). See below.
- AI-reader usage: when a read happened, how many lines, and what it cost; never the picture (legitimate interest).
Voice stays on your device. Spoken shot entry is processed by your phone. Your voice is never recorded, stored, or sent to us or anyone else. That is also why the feature is not offered in a web browser: a browser has no on-device recognizer, so a web version would have to ship audio to a third party; we would rather not offer it at all than offer it quietly differently. Where your phone has no offline speech recognition of its own, Mouflon downloads an open speech model once (about 60 MB, from Hugging Face) and recognises your voice with it on the phone. The download carries nothing about you, and your voice still never leaves the device.
Score-screen photos are read by our AI provider. Reading a scoring screen is part of the AI reader, included for premium and club athletes. A picture of an electronic target screen is sent through our server to Anthropic, which returns the scores, and only after you have said yes when the app asks; without that yes, nothing is sent. You can change that answer in Settings. The picture is deleted from your phone as soon as it has been read and is never saved to your camera roll. We do not store the picture. The screen can show your name, club and scores, which is why we say this plainly.
Device permissions. The first time you open the app it asks, once, for notifications, the camera (to photograph a scoring screen) and the microphone and speech recognition (to call your shots). Each is optional, and you can change any of them at any time in your phone's Settings.
No advertising, no profiling, no selling. We do not sell personal data, share it with advertisers, or make automated decisions that produce legal or similarly significant effects about you.
3. Children
Shooting clubs have junior members, so this matters more here than in most apps.
- Under 18, we collect a parent's or guardian's contact details so the club can reach a responsible adult.
- Below the digital age of consent in your club's country (13 to 16, depending on the member state), a parent or guardian must agree to this notice on the child's behalf before we process their data. The app works out the applicable age from the club's country and asks for that consent.
- We make reasonable efforts to confirm consent comes from the holder of parental responsibility, proportionate to the low risk of this service. We do not claim to verify parental identity.
4. Who else sees your data
Access is strictly enforced at the data layer itself, not merely by the app.
- Your club's staff see their own club's data; coaches see their own athletes. No club can see another club's data.
- Other athletes in your club see only the leaderboard and achievements. Never your notes, coach feedback, or fees.
- Solo athletes' data is visible to nobody but themselves.
Our sub-processors, each under Article 28 terms:
- Supabase: data storage, authentication, file storage, functions (EU region).
- Stripe: club subscriptions and member fees.
- RevenueCat: solo premium subscriptions.
- Expo: push notification delivery.
- Cloudflare: web hosting and delivery.
- Sentry: error diagnostics.
- Anthropic: reading a photographed score screen, for athletes whose plan covers it and who have allowed it. The picture is sent for that one reading and is not stored by us.
Transfers outside the EEA rely on Standard Contractual Clauses.
5. How long we keep it
- Account and training history: for as long as your account exists.
- After you delete your account: erased immediately; backups roll off within 30 days.
- A club that closes: athletes are detached and keep their own history; the club's operational data is deleted.
- Fee and payment records: 7 years, or as accounting law requires.
- Audit logs: 24 months. Diagnostics: 90 days.
- AI-reader usage records: for as long as your account exists; erased with it.
- Inactive accounts: reviewed after 36 months without activity.
Retention is reviewed and enforced by a person, not by an automatic job. Nothing is deleted on a timer.
6. Your rights
- Access: Settings → Export my data returns your whole account as a spreadsheet or PDF, immediately, without asking anyone.
- Rectification: edit your profile; ask your coach to correct club-held records.
- Erasure: Settings → Delete my account. Immediate and irreversible. Club owners must first close or hand over the club, because deleting the owner would orphan every member.
- Portability: the same export, in a machine-readable format.
- Restriction and objection: contact us or your club.
- Withdraw consent at any time where consent is the basis. Withdrawal does not affect processing already carried out.
- Complain to a supervisory authority: in Cyprus, the Office of the Commissioner for Personal Data Protection, or the authority where you live.
We answer within one month. We do not charge for this.
7. Security
- All traffic uses TLS. Passwords are hashed by the authentication provider; we never see them.
- Authorization is strictly enforced at the data layer. Every table carries security policies tied to your club membership, so a bug in the app cannot expose another tenant's data; the query itself is refused.
- Payment card details never reach our servers.
- Operator access to production is limited, and every operator write is recorded in an audit log.
8. Cookies and local storage
This site stores only what it needs to work: your language choice and a cached country code used to pick a starting language. There are no advertising cookies, no analytics trackers and no third-party pixels, which is why you are not being asked to dismiss a consent banner; none is required for strictly necessary storage.
Your IP address is used transiently at our CDN edge to guess a starting language. It is not read, logged or stored by us.
9. Changes
If we change this notice materially we will raise its version and ask you to agree again the next time you open the app.