Privacy Policy
Range Buddy
Effective Date: April 15, 2026 · Last Updated: April 15, 2026
Range Buddy, LLC ("Company," "we," "us," or "our") operates the Range Buddy mobile application (the "App") available on iOS and Android platforms. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. Please read this Privacy Policy carefully. By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the App.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.
1. Information We Collect
1.1 Personal Information You Provide
We collect personal information that you voluntarily provide when you register for the App, make a purchase, or otherwise interact with the App. This includes:
Account Information
- Full name and display name
- Email address
- Phone number
- Username
- Profile photograph
- City, state, and ZIP code
Instructor Profile Information (if applicable)
- Professional biography and teaching philosophy
- Training certifications and credentials
- Competition results and classifications
- Years of teaching experience
- Military service history (if voluntarily provided)
- Law enforcement experience (if voluntarily provided)
- Booking rates and availability
- Specialty disciplines
Payment Information
We use Stripe, Inc. as our third-party payment processor. When you make a purchase or receive payments through the App, Stripe collects your payment card details, billing address, and related financial information. We do not directly store your full credit card numbers on our servers. We retain your Stripe customer ID and Stripe Connect account ID (for instructors) to facilitate transactions.
Communication Data
- Messages sent through the in-app chat system (powered by Stream Chat)
- Training requests and booking communications
- Reviews and ratings you submit
1.2 Information Collected Automatically
When you access or use the App, we automatically collect certain information, including:
Device and Usage Information
- Device type, operating system, and version
- Unique device identifiers
- App version and build number
- Firebase installation ID
- Push notification tokens (FCM/APNs)
- App usage patterns and interaction events
- Pages viewed and features used
- Crash logs, error reports, and performance data
Location Information
- With your permission, we collect precise geolocation data (latitude and longitude) from your device to connect you with nearby instructors and shooting ranges. You may disable location services through your device settings, but this may limit certain features of the App.
- ZIP code and city/state information you provide in your profile
Analytics and Attribution Data
- Firebase Analytics event data (e.g., sign-up method, feature usage, navigation patterns)
- Branch.io deep link attribution data (e.g., how you discovered or were referred to the App)
- Firebase Crashlytics crash and error reporting data
1.3 Information from Third-Party Authentication
If you choose to register or log in using a third-party service, we may receive your name, email address, and profile picture from that service. Currently supported authentication methods include:
- Email and password
- Phone number (SMS verification)
- Facebook Login
1.4 Camera, Microphone, and Photo Library
With your explicit permission, the App may access:
- Camera: To take profile photos, training videos, or scan payment cards
- Microphone: To record audio as part of training videos
- Photo Library: To upload profile photos, training media, and other content
You may revoke these permissions at any time through your device settings.
2. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery and Operations
- Create and manage your account
- Facilitate connections between students and instructors
- Process payments and manage subscriptions
- Enable in-app messaging and communication
- Deliver push notifications for bookings, challenges, and training reminders
- Provide training content, drills, and performance tracking
- Manage group training sessions and challenges
- Maintain leaderboards and achievement streaks
Improvement and Personalization
- Analyze usage trends to improve App features and user experience
- Personalize content and instructor recommendations based on your preferences and location
- Monitor and improve App performance and stability via crash reporting
Communication
- Send transactional emails (booking confirmations, session reminders, purchase receipts)
- Send push notifications related to your training activity, challenges, and messages
- Respond to your inquiries and support requests
Safety and Compliance
- Detect, prevent, and address fraud, abuse, or technical issues
- Enforce our Terms of Service
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
3.1 With Other Users
- Your display name, profile photo, city/state, and username are visible to other App users.
- If you are an instructor, your professional profile (bio, certifications, disciplines, ratings, reviews, booking rate, and availability) is publicly visible within the App marketplace.
- Training challenge results and leaderboard rankings are visible to other participants.
- Group training session data is shared with group members and administrators.
3.2 With Third-Party Service Providers
We share information with third-party vendors who perform services on our behalf, subject to confidentiality obligations:
| Provider | Purpose | Data Shared |
|---|---|---|
| Google Firebase (Google LLC) | Authentication, database, cloud storage, analytics, crash reporting, push notifications, remote configuration | Account data, usage events, crash logs, device tokens, uploaded media |
| Stripe, Inc. | Payment processing, instructor payouts | Name, email, payment card details, transaction data |
| Stream (Stream.io, Inc.) | In-app real-time messaging | User ID, name, email, profile photo, message content |
| RevenueCat, Inc. | Subscription management | Customer ID, subscription status, purchase history |
| Branch Metrics, Inc. | Deep linking and attribution | Device identifiers, link interaction data, installation source |
| SendGrid (Twilio, Inc.) | Transactional email delivery | Email address, name, email content |
| Google Maps Platform | Map display and geocoding | Location coordinates, addresses |
| Facebook (Meta Platforms, Inc.) | Social authentication | Authentication tokens (only if you choose Facebook Login) |
3.3 For Legal Reasons
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
- Comply with a legal obligation, court order, or legal process
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the App
- Protect the personal safety of users of the App or the public
- Protect against legal liability
3.4 Business Transfers
If the Company is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice in the App of any change in ownership or use of your personal information.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:
- Account data: Retained until you delete your account
- Training and performance data: Retained for the life of your account to provide historical tracking
- Payment records: Retained as required by applicable tax and financial regulations (typically 7 years)
- Chat messages:Retained in accordance with Stream Chat's data retention policies while your account is active; anonymized upon account deletion
- Analytics data: Retained in aggregated, de-identified form
- Crash and error logs: Retained for up to 90 days for debugging purposes
5. Account Deletion
You may request deletion of your account at any time through the App's account settings. Upon account deletion, we will:
- Delete your Firebase Authentication account
- Delete your user profile and associated Firestore data
- Remove all registered push notification tokens
- Delete your Stream Chat user account and anonymize your message history
- Remove your group memberships and associated data
- Anonymize your data in marketplace records
Please note that some information may be retained as required by law (e.g., financial transaction records) or in anonymized/aggregated form for analytics purposes. Deletion requests are processed promptly and typically completed within 30 days.
6. Data Security
We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information, including:
- Encrypted data transmission (TLS/SSL)
- Firebase Security Rules to restrict database access
- Token-based authentication for API access
- Secure third-party payment processing (PCI DSS compliant via Stripe)
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
7. Children's Privacy
The App is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete such information. If you believe we may have collected information from a child under 18, please contact us at the address below.
8. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
8.1 General Rights (All Users)
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your account and personal data (see Section 5)
- Opt-Out of Marketing: Unsubscribe from promotional communications at any time
- Push Notification Control: Manage or disable push notifications through your device settings
- Location Services: Disable location collection through your device settings
- Device Permissions: Revoke camera, microphone, and photo library access through your device settings
8.2 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise these rights, please contact us using the information in Section 12. We will respond to verifiable consumer requests within 45 days.
8.3 European Economic Area, United Kingdom, and Swiss Residents (GDPR/UK GDPR)
If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of our contract with you, (c) our legitimate interests, or (d) compliance with legal obligations.
- Right to Access, Rectification, and Erasure as described above.
- Right to Restrict Processing: You may request that we restrict processing of your personal data under certain circumstances.
- Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You may object to processing of your personal data based on our legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
Our data controller contact information is provided in Section 12.
8.4 Colorado, Connecticut, Virginia, and Other U.S. State Residents
If you reside in a U.S. state with comprehensive privacy legislation (including but not limited to Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and Iowa), you may have rights to access, correct, delete, and obtain a copy of your personal data, as well as the right to opt out of targeted advertising and profiling. Contact us using the information in Section 12 to exercise these rights.
9. Third-Party Links and Services
The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit.
Third-party services used by the App maintain their own privacy policies:
- Google Privacy Policy: https://policies.google.com/privacy
- Stripe Privacy Policy: https://stripe.com/privacy
- Stream Privacy Policy: https://getstream.io/legal/privacy-policy/
- RevenueCat Privacy Policy: https://www.revenuecat.com/privacy
- Branch Privacy Policy: https://www.branch.io/policies/privacy-policy/
- Twilio/SendGrid Privacy Policy: https://www.twilio.com/legal/privacy
- Meta/Facebook Privacy Policy: https://www.facebook.com/privacy/policy/
10. Push Notifications
We may send you push notifications regarding your account, training activity, challenges, messages, and other updates. You may opt out of push notifications at any time by adjusting the notification settings on your device. Please note that opting out may affect your ability to receive time-sensitive information about bookings, challenges, and messages.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy in the App
- Updating the "Last Updated" date at the top of this policy
- Sending a push notification or email for significant changes
Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of such changes.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Range Buddy, LLC
Email: jeremy@abqconcealedcarry.com
Privacy Policy URL: https://rangebuddy.app/app-privacy-policy
To submit a data access, correction, or deletion request, please email us with the subject line "Privacy Rights Request" and include your full name and the email address associated with your Range Buddy account. We will respond within 30 days (or within the timeframe required by applicable law).
13. Consent
By using the Range Buddy App, you consent to our Privacy Policy and agree to its terms.
This Privacy Policy was last updated on April 15, 2026.