Privacy Policy for the Target Tracer App

Last updated: September 10, 2026

1. Scope

This privacy policy applies to the Target Tracer mobile app on Android and iOS. The separate website privacy policy applies to target-tracer.com, including hosting, server logs, the web shop, Stripe, cookies and accessories sales. In-app purchases are not processed through Stripe.

2. How the app works

Target Tracer analyses shooting targets using local AI and computer-vision processing: it recognises targets, hits and ring lines, calculates integer and decimal scores, analyses images, videos and live camera feeds, and manages results, training and match information in the local logbook. The analysis takes place entirely on the device and does not require an internet connection.

Photos, videos, live camera images, hits, targets, scores, logbook data and GyroTarget motion data are not sent to Target Tracer servers for AI analysis. There is no account, registration, login, Target Tracer cloud, advertising or cross-app or cross-website tracking. User images and videos are not used to train AI models.

3. Controller

Fabian Dorner
Gutenbergstraße 21
71665 Vaihingen an der Enz
Germany
Email: targettracer@dornerit.com

4. Camera, images and videos

Camera access is used only for photo and live functions. You provide images and videos through the system selection functions of Android and iOS; permanent broad access to the entire photo or media library is not required. Camera, photo and video data is processed locally. Location information from photos, such as EXIF GPS data, is not evaluated or stored for location purposes.

5. Microphone and motion sensors

For an optional acoustic shot trigger, the app may use the microphone and evaluate only the acoustic signal or volume. There is no voice recording, storage, transmission or speech recognition. Device motion sensors may be used for technical app functions such as camera alignment. Processing takes place locally.

6. Local storage and logbook

The app may store targets, images, analysis results, hits, scores, training and match information, settings, logbook entries, GyroTarget motion data and technical diagnostic information. You can delete stored content in the app. On uninstall, local app data is removed unless exported files or operating-system backups remain outside app storage. Target Tracer does not operate its own cloud backup infrastructure.

The app may keep a local technical diagnostic log. It contains technical app, device and store information, but no images, videos, targets, logbook content or payment data, and you can delete it.

7. Logbook backup and export

You choose the storage location for a logbook backup through the system file dialog. Target Tracer does not upload the file automatically or automatically disclose it to third parties. Files stored outside the app are subsequently subject to the privacy and synchronisation settings of the selected location or operating system.

8. Firebase Crashlytics

Google Firebase Crashlytics is used on Android and iOS for error and stability analysis and to improve app stability. It may process crash reports, stack traces, operating system and version, app version, device model, technical installation identifiers, app state at the time of an error and technical diagnostics.

Our Crashlytics logs are limited to technical diagnostic information. The contents of target images, videos, logbook entries or GyroTarget motion data are not deliberately transmitted to Crashlytics. Firebase is not completely anonymous: Google processes technical app, device and installation information that may be personal or pseudonymous data. The provider for EU users is Google Ireland Limited or the relevant Google entity.

9. Firebase Analytics

Google Firebase Analytics is used solely for internal usage analysis, for example of the screens, menus and features used. We deliberately do not send names, email addresses, addresses, telephone numbers, images, videos, file names, free text or logbook content; technical app, device and installation information and pseudonymous identifiers may nevertheless be processed.

Analytics is disabled by default and is activated only after your consent. You can withdraw consent at any time with effect for the future in the app's privacy settings. There is no personalised advertising and no cross-app or cross-website tracking; the Android Advertising ID and Apple IDFA are not used for advertising or tracking.

10. Bluetooth and GyroTarget

Target Tracer can connect to GyroTarget through Bluetooth Low Energy. Motion and shot-movement measurement data is transferred and analysed locally on the device. You may optionally store this data together with the target or relevant shot in the logbook. It is not uploaded to Target Tracer servers and is not sent to Firebase Analytics or Firebase Crashlytics.

Bluetooth is not used to determine location. If the operating system requires location permission for Bluetooth scans, Target Tracer does not use it to determine, store or transmit your actual location.

11. In-app purchases

On Android, the annual subscription and Lifetime purchase are processed exclusively through Google Play Billing; on iOS, exclusively through Apple StoreKit and the App Store. Google and Apple process the required account, payment, device, purchase and transaction data under their own responsibility. Target Tracer does not receive complete credit-card or bank details, only the information required for purchase status, unlocking, restoration and subscription management. There is no Target Tracer server for receipt verification. The legal basis is Article 6(1)(b) GDPR. Stripe is not used for in-app purchases.

12. Internet connections and recipients

The local core function does not require an internet connection. Internet connections are used for technical online services such as Crashlytics, Analytics (only after lawful activation), in-app purchases, store functions, app updates, support communication and external websites. Possible recipients are Google/Firebase, Google Play, Apple/App Store/StoreKit and email providers involved in support. Local images, videos, logbook data, hits and GyroTarget motion data are not sent to Target Tracer servers.

Google/Firebase and Apple may process data outside the EU or EEA. Where applicable, the EU-US Data Privacy Framework, EU Standard Contractual Clauses or other appropriate safeguards apply, together with the providers' privacy information.

13. Support by email

For support requests, the app opens the email app configured on your device; on Android, a local input dialog may also be used. The message is sent through the installed email app only after you confirm. Support emails may contain your sender address, a name provided voluntarily, the message text, technical information and voluntary attachments. Voluntarily submitted images are not used for AI training. The legal basis is Article 6(1)(b) GDPR for contractual or purchase-related matters and otherwise Article 6(1)(f) GDPR.

14. Children and AI

Target Tracer is not specifically directed at children or young people under 16. The local AI and computer-vision models recognise targets, hits and ring lines and calculate scores. There is no automated decision within the meaning of Article 22 GDPR producing legal or similarly significant effects.

15. Retention periods

• Local app, logbook and GyroTarget data: until deleted or until uninstall; backups and exported files may remain.
• Exported files: until you delete them at the selected location.
• Diagnostic log: until deleted.
• Firebase Crashlytics: in accordance with the retention and deletion periods set by Google for Firebase Crashlytics.
• Firebase Analytics: in accordance with the retention period configured in the Firebase/Google Analytics project.
• Purchase data: according to Google's and Apple's legal and contractual requirements.
• Support emails: until the request is handled and afterwards only where evidentiary or statutory retention is required.

16. Legal bases and security

Article 6(1)(b) GDPR applies to in-app purchases, unlocking, restoration and contractual support requests. Article 6(1)(a) GDPR applies to Firebase Analytics; consent may be withdrawn at any time with effect for the future. Where processing is based on Article 6(1)(f) GDPR, our legitimate interest is to ensure the technical stability and security of the app, to detect errors and to handle support requests. Data minimisation, local processing, Android and iOS security mechanisms and encrypted connections protect the data. Absolute security cannot be guaranteed.

17. No sale of data

Target Tracer does not sell personal data or provide data to advertising networks for personalised advertising or advertising profiles.

18. Your rights

Subject to the legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection (Article 21). You may withdraw consent at any time with effect for the future. Under Article 77 GDPR, you may lodge a complaint with a supervisory authority.

Fabian Dorner cannot centrally access or delete local data that Target Tracer never receives. You manage it in the app, by exporting it or by deleting app data. Send data protection requests to targettracer@dornerit.com.

19. Competent supervisory authority

Without prejudice to other remedies, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority. The authority competent for the controller is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (baden-wuerttemberg.datenschutz.de).