Privacy Policy - Cyber Archery

Last updated: August 21, 2026

This Privacy Policy explains how Cyber Archery (“Cyber Archery,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Cyber Archery website, the Cyber Archery Shot mobile application (“Cyber Shot”), and the Cyber Archery Scope hardware (“Cyber Scope”) and related services (together, the “Service”).

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

Note: This Policy was updated on the date above to cover family profiles for children, emergency contacts, coach teams, sign-in with Apple or Google, app-store subscriptions, message previews in push notifications, and additional map and weather providers—in addition to the hardware-authentication, cloud, social, marketplace, venue check-in, and location features covered in prior versions. It replaces all prior versions.

Who we are

Cyber Archery is based in Minnesota, United States. The Service is intended for users in the United States. It is not directed to, and we do not knowingly offer it to, individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland.

Information we collect

Information you provide

Account information. When you create an account we collect your email address, a password (stored in hashed form by our authentication provider), your display name and username, your date of birth, your sex (used for men’s/women’s competition categories and shown with standings), and your selected account type/role. If you sign in with Apple or Google, we receive your name and email address from that provider instead of a password.
Profile information. Any profile photo, bio, and settings you choose to add.
Content you create. Photos, videos, and stories; posts, comments, likes, and follows; scoring rounds and shot data; bows and equipment setups; achievements and trophies; marketplace listings; venue check-ins; and direct messages you send to other users.
Support and communications. Information you provide when you contact us, report content, or request help.
Website purchases. If you buy hardware through our website, we retain contact information for warranty purposes.
Emergency contacts (information about others). You can optionally add up to five emergency contacts—a name, relationship, phone number, email, and notes for each. Only add someone with their permission. While your account allows it, these contacts are visible to signed-in users who can see your presence under your privacy settings (for private accounts, approved followers only), so that someone at the range can reach a person you trust in an emergency. You can edit or remove them at any time.
Family profiles. Information a parent provides about their child, described under “Children’s privacy” below.
App-store subscriptions. If you buy a subscription in the app, the purchase is processed by Apple or Google, not by us. We receive transaction and entitlement records (what you bought and when), never your payment card number.

Information collected automatically

Cyber Scope / Bluetooth data. When you pair a Cyber Scope, the app exchanges data with the device over Bluetooth, including the scope name, firmware version, the device’s unique identifier, and shot metrics such as steadiness, torque, and shot quality. Device settings you configure are stored locally on your device. If you are signed in, your rounds and shot data are synced to your account so they are available across devices.
Device authentication and anti-counterfeit data. If you are signed in, when you pair a Cyber Scope we record that pairing. We use this to authenticate the device, support warranty service, and detect counterfeit or cloned hardware. A scope we cannot verify as genuine may have its in-app features limited (see our Terms of Service); accounts with a developer role are exempt.
Location data. With your permission, we use your device’s precise or approximate location to:
- Nearby discovery (while you use the app). Show nearby events, venues, and marketplace listings, and set the location of listings or events you create.
- Venue check-ins (when you choose to check in). A check-in is a social signal you start yourself. While it is active, people who follow you can see that you are at that venue, and it may appear on the nearby map. You can check out at any time.
- Event check-ins and live location sharing (when you choose to check in to an event). When you check in to an event, you opt in to share your live location with the other archers who are also checked in to that same event, so you and your friends can find each other on the event’s course map. While you are checked in, your device sends your current coordinates to our servers, where they are visible to other checked-in archers at that event (anyone you have blocked, or who has blocked you, is always excluded). Unlike the on-device boundary check described below, this feature does transmit and store your coordinates while it is active. We keep only your most recent position while you are checked in, not a location history, and it is deleted as soon as you check out. If you grant “Always” location, sharing continues while the app is in the background; otherwise it shares only while the app is open. You can stop at any time by checking out.
- Background location for automatic check-out (optional). If you grant “Allow all the time” / “Always” location and you are checked in at a venue, your device watches a boundary around that venue so we can check you out automatically when you leave—even if the app is closed. This boundary check is performed on your device by the operating system: we do not receive, transmit, or store your background location or coordinates; the app only records that your check-in ended. This is entirely optional. If you don’t grant it, you can still check out manually, and check-ins automatically expire after a few hours.
Camera, photos, and microphone. With your permission, we access your camera, photo library, and microphone so you can capture or select photos and videos (including audio) for posts, stories, and listings. We only access these when you use the relevant feature.
Device and technical data. Device identifiers, push notification tokens, app version, operating system, and basic diagnostic and crash information used to keep the app stable.
Usage data. Information about how you interact with the app, such as which posts are shown to you, how long you view them, and what you tap—which we use to rank and improve your feed and the Service.

You can turn location access (including “Always”) off at any time in your device settings; the related features will stop working, but the rest of the app continues to function.

Information we do not collect

We do not access or upload your phone’s contact list. (Emergency contacts you type in yourself are described above.
We do not use third-party advertising networks, and we do not track you across other companies’ apps or websites for advertising.
We do not sell your personal information.

How we use information

We use the information we collect to:

create and manage your account and authenticate you;
provide and operate Service features: scoring, leagues, events, the social feed, stories, the marketplace, and messaging;
sync your data across your devices;
send push notifications and Service-related communications;
rank and personalize your feed and surface relevant events, venues, and listings;
maintain safety and integrity, moderate content, and enforce our Terms of Service;
authenticate Cyber Scope hardware, support warranty service, and detect counterfeit or cloned devices;
provide customer support and respond to your requests;
improve and develop the Service, including diagnosing crashes; and
comply with legal obligations and protect our rights and the rights of our users.

How information is shared

We share information only as described below.

With other users. Your profile and content are visible to others according to your privacy settings (for example, whether your account is public or private) and the nature of the feature. Scores may appear in event or league standings; marketplace listings are visible to people browsing the marketplace; direct messages are visible to the people you send them to; while a venue check-in is active, people who follow you can see that you are at that venue; and while you are checked in to an event, the other archers checked in to that same event can see your live location on the event’s course map (people you have blocked, or who have blocked you, are excluded). If you add your birthday to your profile, people who can view your profile can see its month and day. Your emergency contacts are visible to people who can see your presence, as described above. If you join a coach team, your team’s coaches can see your assignment results, your weekly practice-volume progress, and—for rounds you submit to an assignment—that round’s end-by-end scores. Leaving or being removed from a team ends this sharing for future activity.
With service providers (processors) who help us run the Service:
- Supabase : cloud hosting, database, file storage, and account authentication.
- Google Firebase : receives your device’s push token and the content of notifications sent to you, which can include the text of direct messages you receive. On iOS, Apple’s push notification service receives the same.
- Map tile providers (OpenStreetMap Foundation, OpenTopoMap, MapTiler, Stadia Maps, and Esri / ArcGIS) : To display maps,including the standard, topographic, and satellite layers (for example, on the 3D event course map), your device’s IP address and the map area you request are sent to these providers to load map tiles.
- RainViewer : to display the weather radar overlay, your device’s IP address and the map area you request are sent to RainViewer to load radar tiles.
- Sign-in providers (Apple, Google) : if you choose to sign in with Apple or Google, we receive your name and email address from that provider to create and authenticate your account.
- Apple and Google : app distribution, in-app subscription billing, and platform-level diagnostics and crash reporting.
For legal and safety reasons. We may disclose information if required by law or legal process, or where we believe it is necessary to protect the rights, property, or safety of Cyber Archery, our users, or the public.
In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will require any successor to honor this Policy.

The marketplace

The marketplace is a venue for archers to list and find used gear. Listings, including photos and descriptions you provide, are visible to other users. When you communicate with a buyer or seller, the information you choose to share is visible to them. Cyber Archery is not a party to transactions between users. Please share contact and payment information carefully.

Children’s privacy

You must be at least 13 years old to create your own account. Certain features, including the crossbow marketplace, are restricted to users 18 and older.

Family profiles. A parent or guardian with an account can create a family profile for their child so the child can score at events and leagues. The parent provides and controls all information in a family profile: the child’s first and last name, username, date of birth, sex, and an optional photo. Family profiles are deliberately limited: they cannot post to the feed, send or receive messages, follow or be followed, appear in search or discovery, or share location—and we collect no contact information from the child. Scores recorded for a family profile appear in event and league standings under the child’s name (with the photo, if the parent added one), like any other participant’s. The parent can edit or delete the family profile at any time, and can later hand it off to the child’s own account using a claim code; creating that account requires meeting the age requirement above.

Apart from family profiles, the Service is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information directly, contact us at

and we will delete it.

Data retention

We keep your account information for as long as your account is active.
When you delete your account, we delete your profile, posts, and personal data on a reasonable timeline. Some information may remain in backups for a limited period or in anonymized form that no longer identifies you.
Warranty-related contact information is retained for the duration of the applicable warranty period.

Your choices and rights

Access and update. You can view and edit your profile and settings in the app.
Delete your account. You can delete your account and associated data from the You tab in the app.
Permissions. You can control location, camera, photo, microphone, and notification access at any time in your device settings.
Communications. You can manage push notifications in your device or app settings.

U.S. state privacy rights. Depending on your state of residence (for example, California), you may have the right to access, correct, or delete your personal information, to obtain a copy of it, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information or share it for cross-context behavioral advertising. To exercise any available right, contact us. We will not discriminate against you for exercising these rights, and we will verify your request before acting on it.

Because browser “Do Not Track” signals are not yet standardized, the Service does not respond to them.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Where your information is processed

Your information is stored and processed in the United States. By using the Service, you understand that your information will be processed in the United States.

Third-party links and services

The Service may link to or rely on third-party websites and services (for example, payment between marketplace users, or external links in posts). Their privacy practices are governed by their own policies, not this one.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above. If we make material changes, we will provide reasonable notice, such as an in-app banner or a notification on next launch. Your continued use of the Service after an update means you accept the revised Policy.

Contact us

Questions or requests about this Policy or your information: