Privacy Notice

1. Who we are

Logginhood ("we", "us") is an archery scoring app and community platform. We are the data controller for the personal data described in this notice.

• Controller: Logginhood Ltd, company no. 17321619, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ
• Contact: privacy@logginhood.com
• ICO registration: ZC191586

2. What personal data we collect

Account & profile

• Name
• Email address (for login)
• Archery GB membership number (optional)
• Date of birth and age category (used to calculate eligible age classes)
• Gender as recorded with your governing body and whether you shoot in the Open category (used to pick your classification tables and competition category)
• Club affiliation and club website link
• Bow type(s) and arrow set details
• Links to your social media accounts (optional, only if you add them)

Club membership register (only if your club keeps one here)

• Home address, phone and mobile numbers
• Next of kin: name, phone number and address, held as your emergency contact
• For under-18s: a parent or guardian's name and phone number
• Membership type, membership expiry date and any other membership number your club records (for example a host sports club card)
• Entered by you or by your club's officers. Visible only to you and the officers your club has given member-details access (by default its secretary, treasurer, welfare officer and chairman); every officer view is logged, nothing here is ever shown publicly and the record is deleted when your membership of that club ends

Scoring & activity

• Your scores, rounds shot, dates, hits, golds and end-by-end arrow values
• Round status (practice / competition / record attempt)
• Venue/location name for a round
• Classification level calculated from your scores

Score import (optional, only if you use it)

• Screenshots from your old scoring app (e.g. Archer's Toolbox) that you choose to upload for score import — read once to extract your historic scores, then discarded; we never store the images
• Device location, only if you allow it, used once to suggest a venue name for a round — the coordinates are not stored

Technical

• Standard log/device data needed to operate and secure the service

3. How we use it and our lawful basis

We do not use your data for behavioural/targeted advertising.

4. Special considerations for under-18s

Logginhood is used by junior archers. If you are under 18:

• Your profile and scores are private by default — they are not shown in public club listings, records or rankings unless you (or, for younger users, a parent/guardian) explicitly choose to make them visible.
• You must be at least 13 to create your own account. Under-13s use Logginhood with an account a parent or guardian sets up and manages with them.
• For under-13s, any choice in Logginhood that relies on consent (such as making a profile public) is made by a parent or guardian, not the child. Our parental approval flow enforces this.
• We do not display or encourage links to external social media for under-18 accounts.
• We apply data-minimisation and high-privacy defaults in line with the ICO's Age Appropriate Design Code.

5. Who we share it with

Two kinds of third parties see data when you use Logginhood. First, service providers who process data on our behalf under data processing agreements:

• Supabase — database, authentication and file storage
• Vercel — application hosting, cookie-free privacy-friendly analytics and anonymous page-speed measurement (Core Web Vitals)
• Anthropic — AI processing of screenshots and CSV samples you submit for score import (content is sent for analysis and not used to train models)
• Resend — delivering the emails the service sends, such as club invitations and notifications
• Cloudflare — the Turnstile security check on sign-in, sign-up and password pages, which processes technical data such as your IP address to tell humans from bots
• Stripe — payment processing (once payments launch)

Second, public services our apps call directly. These are independent services rather than our processors: when your device or browser contacts them they receive technical data such as your IP address and browser details, which they handle under their own privacy notices:

• Cloudflare cdnjs — the scoring app loads a code library (sql.js) from Cloudflare's public CDN each time it starts
• Google Maps — hosted club sites can include an embedded Google map, so your browser connects to Google when you view a club site page with a map on it
• MET Norway — weather conditions for outdoor rounds: approximate coordinates are sent to fetch the forecast and are never stored
• OpenStreetMap / Nominatim — converting your device location (only if you allow it) into a venue name

We do not sell your identifiable personal data.

6. International transfers

Some processors (e.g. Anthropic, Stripe) are based outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards (e.g. UK International Data Transfer Agreement / adequacy regulations).

7. Aggregated insights

We may produce anonymised, aggregated statistics about equipment and performance (e.g. "archers in this classification range tend to shoot brand X"). This is only ever done where the data has been genuinely anonymised so that no individual can be identified, including suppression of small groups. Anonymised data is not personal data and is outside the scope of this notice. You can ask us to stop including your data in these insights at any time — contact us using the details in section 1.

8. How long we keep it

We keep your account data while your account is active. If you delete your account, we delete or anonymise your personal data promptly, except where we must retain limited records for legal or financial reasons. In more detail:

• Scores you delete go to your Recently deleted area, where you can restore them or remove them permanently.
• Membership details your club records about you (address, phone, next of kin, guardian) are deleted when your membership of that club ends.
• Security backups are kept on a rolling basis and age out within 14 days, so deleted data leaves backups on that cycle too.
• If a club closes its Logginhood presence, the club's officers can export everything first: export is always free.

9. Your rights

You have the right to access, correct, delete, restrict or object to processing of your data, to data portability and to withdraw consent. To exercise any right, contact privacy@logginhood.com.

10. Complaints

If you have a data protection concern, you can complain to us directly at privacy@logginhood.com — we will acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes

We will update this notice as the service evolves and show the version date at the top.