Privacy Policy

1. Introduction

Luano Technologies (Pty) Ltd ("we", "us", "our") operates the ArmorDex mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your personal information and your right to privacy. ArmorDex is designed from the ground up with privacy as a core principle.

2. Information We Collect

Account Information: When you create an account, we collect your email address and a hashed version of your password. We never store your password in plain text.

Firearm & Shooting Data: Any data you enter about firearms, ammunition, reload recipes, shooting sessions, and ballistics is encrypted on your device before being transmitted to our servers. We cannot read this data.

Usage Data: We collect anonymous analytics about app usage patterns (screens visited, features used) to improve the Service. This data cannot be linked to your firearm records.

Device Information: We may collect device type, operating system version, and unique device identifiers for the purpose of providing and improving the Service.

Payment Information: Subscription payments are processed by Google Play or Apple App Store. We do not collect or store your payment card information.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Authenticate your account and enable multi-device sync
• Process your subscription
• Send transactional emails (password reset, security alerts)
• Improve the Service based on anonymous usage patterns
• Comply with legal obligations

We never use your encrypted firearm data for analytics, advertising, profiling, or any purpose other than providing the Service to you.

4. Encryption & Data Security

ArmorDex employs AES-256 end-to-end encryption. Your encryption key is derived from your password using industry-standard key derivation functions. This means:

• Your firearm data is encrypted on your device before leaving it
• Data is stored encrypted on our servers
• We do not have access to your encryption key
• Even in the event of a server breach, your data remains encrypted and unreadable

We use Supabase for our backend infrastructure, which provides additional layers of security including row-level security policies and encrypted connections.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share limited information with:

• Service Providers: Supabase (database hosting), RevenueCat (subscription management), and analytics providers — all bound by data processing agreements
• Legal Requirements: If required by law, court order, or governmental regulation. However, due to our encryption architecture, we are unable to disclose your encrypted firearm data as we cannot decrypt it

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we permanently remove all your data from our servers within 30 days. Local data on your device is removed when you uninstall the app.

You may export all your data at any time through the app's Privacy & Data settings.

7. Your Rights

Under POPIA (South Africa) and GDPR (European Union), you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your account and all associated data
• Data Portability: Export your data in a machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request limitation of processing

All of these can be actioned directly in the app under Settings → Privacy & Data, or by contacting us at [email protected].

8. Children's Privacy

ArmorDex is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will delete it immediately.

9. International Data Transfers

Our servers may be located outside your country of residence. By using ArmorDex, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place to protect your data in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the app and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Company: Luano Technologies (Pty) Ltd
• Country: South Africa