Privacy Policy for TargetWise

1. Introduction

Welcome to TargetWise (“we,” “our,” “us”). We are committed to protecting your privacy and ensuring your personal information is handled in a safe, transparent, and legally compliant manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application, mobile experiences, and coaching tools (collectively, the “Service”).

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information in several ways depending on how you interact with the Service:

• Personal Identity & Account Data: When you register, we collect your name, email address, and authentication credentials (managed securely via Firebase Authentication). To comply with legal age limits and privacy standards, we also collect your Date of Birth and log explicit confirmations of your age eligibility and Terms of Service acceptance.
• Coaching & Athlete Relationship Data: If you use the Coach Portal (either as a coach or a trainee), we process coaching notes, baseline metrics, interactive focus checklists, and session feedback linked between authorized accounts.
• User-Generated Performance Data: We collect score records, targets hit/missed, station breakdowns, firearm details, loadout configurations, cartridge inventory, choke setups, practice plans, and photos uploaded to your profile or gear locker.
• Payment Data: Subscriptions and purchases are processed securely by Stripe. TargetWise does not handle or store full credit card numbers or banking credentials on our servers.
• AI Interaction Data: To deliver features like Gemini AI Note Polish and automated performance reviews, relevant non-identifying technical notes, scores, and context are processed through Google AI infrastructure (via Firebase Genkit). We do not send your real name, email, or sensitive account identifiers to AI models.
• Technical & Usage Logs: We automatically collect standard web log data, including IP address, browser type, operating system, and session interactions to maintain security and system stability.

3. How We Use Your Information

We use your data to provide a seamless, highly functional performance platform. Specifically, we use your information to:

• Create, manage, and secure your account.
• Verify age eligibility and enforce minor data protection controls.
• Power core application functions (score logging, loadout mapping, equipment tracking, and baseline analysis).
• Enable authorized coach-trainee links, magic invite links, and session report formatting.
• Generate AI-driven training report summaries, note polishing, and performance feedback.
• Process payment subscriptions and manage Pro plan entitlements via Stripe.
• Communicate administrative updates, policy changes, and service notices.
• Maintain security, prevent fraudulent account creation, and debug technical issues.

4. How Data is Shared (Coaches & Third Parties)

We never sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is shared strictly under the following conditions:

A. Coaching Interactions

• When you accept a coaching link or accept an invite from a coach, that specific authorized coach receives access to view your score histories, station breakdowns, and baseline progress.
• Private Coach Notes: Raw shorthand notes kept in a coach’s private reference space remain visible exclusively to the coach and are not exposed on the athlete’s public profile.

B. Essential Service Providers

We share necessary operational data with trusted infrastructure providers bound by strict confidentiality and security obligations:

• Google Firebase: Backend infrastructure, identity management (Auth), real-time database hosting (Firestore), and file storage.
• Stripe: Secure subscription payment processing.
• Google AI (Genkit / Gemini): Anonymized text processing for note polishing and training summary features.
• Vercel: Web application hosting and edge routing.

C. Legal & Safety Disclosures

We may disclose your information if required to do so by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect the safety, rights, or property of TargetWise, its users, or the public.

5. Age Limits & Protection of Minors

• Independent account registration on TargetWise is restricted to individuals 18 years of age or older.
• Minors under 18 may only use the Service under the direct management or authorization of a parent, legal guardian, or an accredited coach who has certified that parental consent has been obtained.
• We do not knowingly collect personal data directly from unassisted children under the age of 13 in violation of applicable laws (such as COPPA or local privacy acts). If we become aware that an unassisted minor under 13 has created a standalone account, we will take immediate steps to restrict or remove the profile.

6. Security of Your Data

We implement robust administrative and technical security measures to protect your information, including:

• Encryption in Transit: All communication between your device and our servers is secured using SSL/TLS encryption.
• Encryption at Rest: Firestore database records and file uploads are encrypted at rest on Google Cloud infrastructure.
• Access Controls: Strict Firestore Security Rules prevent unauthorized access to user profiles, private notes, and score records.

While we take every reasonable precaution, no web-based platform or transmission can be guaranteed 100% secure against all external threats.

7. Your Data Rights & Choices

Depending on your location, you hold specific rights regarding your personal information under the New Zealand Privacy Act 2020, California Consumer Privacy Act (CCPA/CPRA), or European GDPR:

• Access & Portability: You can review your account information and export your shooting records directly within your profile settings.
• Correction: You may update inaccurate profile or equipment details at any time inside the application.
• Account Deletion: You have the right to request the complete deletion of your account and associated score records. Upon receiving your request, we will permanently purge your profile data from active databases, retaining only minimal records required by law or for legitimate fraud prevention.

8. International Data Transfers & Governing Law

TargetWise is operated out of New Zealand. Information collected through the Service may be stored and processed in servers located in the United States or other regions operated by our cloud providers (such as Google Firebase and Vercel). By using the Service, you consent to the transfer and hosting of your information across international borders in accordance with this Privacy Policy and New Zealand privacy laws.

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When updates are made, we will revise the “Last Updated” date at the top of this page. Continued use of the Service after any modifications constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, privacy concerns, or requests to exercise your data rights, please contact us at:

TargetWise Data Support

Email: office@builderbase.co.nz