1. Introduction
GunStatus ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we handle information when you use the GunStatus app for iPhone (iOS) and for Android. Where something works differently on one platform, we say so.
By using our app, you agree to the terms of this Privacy Policy.
2. Our Privacy Commitment
Minimal server-side storage. GunStatus is designed to protect your privacy by:
- ✅ Storing most data locally on your device
- ✅ Using your own iCloud account (iPhone) or Google account backup (Android) for optional backup and device transfer when it is enabled on your device; on iPhone, Premium is marketed for the full cross-device experience
- ✅ Storing only the monitoring- and operations-related categories described in this policy on secure servers (Supabase)
- ✅ NEVER storing names, addresses, or contact details on our servers
- ✅ Communicating with official SAPS systems from your device when you run checks (and as part of eligible automated flows)
- ✅ No advertising and no third-party tracking in the app
3. Information You Provide
3.1 Data for Status Checking
To check your firearm licence or competency application status, you enter:
- Application reference number
- Firearm serial number (optional)
What happens to this data:
- Sent to the official SAPS Firearms Online Enquiry system (encrypted via HTTPS) from your device when you perform a check
- Used only to retrieve your application status
- Stored locally on your device if you choose to save application/search history (limits differ by subscription tier—see §4.1 and the Terms of Service)
- If you turn on background monitoring, the reference number and serial number of that application are also stored on our servers, as described in §4.3
- May be included in your own cloud backup (iCloud on iPhone, Google account backup on Android) when that backup is enabled (see §4.2)
3.2 Firearm License Information
In the "My Firearms" section, you can optionally save:
- Firearm make, model, and type
- Serial number and license number
- Issue date and expiry date
- Photos of your firearms (optional)
Storage: This information is stored locally on your device and may be included in your own iCloud (iPhone) or Google account backup (Android) when that backup is enabled. We cannot access your iCloud or Google backup data.
3.3 Shooting Log, Session Photos, and PDFs
The app includes a shooting log where you can record sessions linked to firearms (for example: date, distance, rounds fired, notes, and session type). You may attach photos to sessions (stored as files on your device). You can generate PDFs from session data; PDFs are created on your device and can be shared using the system share sheet.
Storage: Session metadata, image file references, and related data are stored locally and may be included in your own iCloud or Google account backup when enabled, consistent with other app data.
Photos and camera: The app does not request access to your whole photo library or to your location. You choose which photos to add using the system photo picker, or you take a photo with your device camera app, and only those photos are saved to the app.
Free vs Premium (feature limits): Non‑Premium use may be limited (for example: a small cap on saved sessions, photos per session, and single-session PDF export). Premium unlocks higher or unlimited use for these features, subject to practical device storage limits.
3.4 Android Beta Sign-Up Form
If you sign up to test the Android version of GunStatus, we collect your first name, your Google (Gmail) address, your phone make and model, and any optional details you choose to give (for example the Android version and whether you have a SAPS application to track). This is separate from the app itself, which does not ask for these details.
Why: only to add you to the Google Play tester list, to send you the install link and a promotional code, and to ask for your feedback.
Where it is held: in Google Forms and Google Sheets under our Google account. We do not share it with anyone else, and we do not use it for advertising or add you to a mailing list.
How long: until the beta test ends, after which we delete it, or earlier if you ask. To ask for your details to be deleted, email info@gunstatus.co.za.
4. Data Storage
4.1 Local Storage (All Users)
The following data is stored locally on your device:
- Application / search history (iPhone free tier: up to 50 recent items in a rolling list, newest first; iPhone Premium and trial, and the Android app: no artificial cap beyond practical device storage; if you downgrade to free on iPhone, the list may trim to the current free-tier cap)
- Firearm license details
- Shooting sessions, session photos (files on device), and related metadata
- Background monitoring preferences
- Notification settings
- Subscription status (trial/premium)
How to delete: Uninstall the app or use the in-app "Delete" buttons.
4.2 Cloud Backup (iCloud on iPhone, Google Account Backup on Android)
iPhone: When iCloud is enabled on your device and available for the app, selected app data (such as search history, firearm records, monitoring preferences, and shooting-log documents) may be written to your personal iCloud container for backup and multi-device use.
- This data is stored in your iCloud account, not ours
- Encrypted by Apple
- Governed by Apple's Privacy Policy
- GunStatus cannot access your iCloud data
- Premium is the tier we market for the full cross-device experience; technical availability still depends on your device’s iCloud settings
Android: The Android app supports Android's built-in Auto Backup and device-to-device transfer. When backup is turned on for your device, the app's saved data (such as firearm records, shooting sessions, photos, settings and saved applications) may be copied to your own Google account so it can be restored on a new phone.
- This data is stored in your Google account, not ours
- Protected by Google's security, and on supported devices encrypted using your device screen lock
- Governed by Google's Privacy Policy
- GunStatus cannot access your Google backup data
- You can turn backup off in your Android device settings
4.3 Server Storage (Background Monitoring & Operations)
To enable reliable automatic background monitoring and related functionality, we store the following categories of data on our secure servers (hosted using Supabase):
- Firearm application reference numbers
- Firearm serial numbers
- Last known SAPS status and status date (for monitored applications)
- Device notification tokens (to send push notifications: Apple Push Notification service tokens on iPhone, Firebase Cloud Messaging tokens on Android) and the device platform (iPhone or Android)
- Anonymous or pseudonymous user identifiers (for example a device-linked UUID)
- Status / pipeline events: when applicable, the app may record events such as application reference, serial, application type, status labels and dates, pipeline stage metadata, optional user linkage, and an event source string—for operational reliability and product improvement
Aggregate insights: We may derive aggregated, non-identifying statistics from event data (for example average time spent in a processing stage). These aggregates do not identify you personally.
What we DO NOT store on servers:
- ❌ Names, addresses, or contact information
- ❌ Firearm photos or shooting target images
- ❌ Payment information
Why we store this data: To coordinate automatic SAPS status monitoring, deliver push notifications when your application status changes (where available), and support reliable operation of the service.
Data retention: Server-side monitoring-related data is retained until you stop monitoring an application, delete associated data from the app where applicable, or we otherwise remove it in line with this policy.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Application / Search History | Stored locally (and optionally in your own iCloud or Google account backup) until you delete or uninstall; on iPhone the free tier keeps a rolling cap (currently up to 50 items), Premium/trial is not artificially capped beyond device storage, and a downgrade to free may trim to the free-tier cap; on Android there is no artificial cap |
| Firearm Licenses | Stored locally until you delete or uninstall app |
| Shooting Log & Session Images | Stored locally (and optionally in your own iCloud or Google account backup) until you delete or uninstall |
| Cloud Backup Data (iCloud / Google account) | Stored in your own iCloud or Google account until you delete it or turn backup off |
| Server Monitoring & Event Data | Stored on our servers until you stop monitoring, delete as applicable, or as described in this policy |
| Notification Preferences | Stored locally until you change them or uninstall app |
| Subscription Status | Managed by the Apple App Store (iPhone) or Google Play (Android) |
6. Data Security
6.1 Communication Security
- Communication with SAPS uses HTTPS encryption
- Communication with our backend (Supabase) uses HTTPS encryption
- Foreground status checks are performed from your device; background monitoring and notifications may also involve our servers and the push service of your platform (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android) in addition to on-device work
6.2 Device Security
- Data stored locally is protected by the security features of your device (iOS on iPhone, Android on Android phones)
- Use a device passcode or screen lock, and biometrics where available, for additional protection
- Use "Find My iPhone" (iPhone) or "Find Hub" / "Find My Device" (Android) to locate or remotely wipe your device if it is lost
6.3 Cloud Backup Security
- iCloud data is encrypted by Apple and protected by your Apple ID password and two-factor authentication
- Android backup data is stored in your Google account and protected by Google's security, including your Google account password and two-step verification if you enable it
- Governed by Apple's or Google's security standards respectively
6.4 Server Security
Data stored on our servers is protected by:
- Supabase: Enterprise-grade cloud database hosted on secure infrastructure
- Encryption in transit: All data transmitted via HTTPS
- Encryption at rest: Database encrypted using industry-standard encryption
- Row Level Security: Designed so each user can only access their own monitoring-related data
- Access controls: Authentication and authorization for administrative access
- Backups: Provider-managed backups as configured for the service
7. Third-Party Services
7.1 SAPS Integration
GunStatus communicates with the SAPS Firearms Online Enquiry system using the information you provide for status checks. We are an independent service and are not affiliated with SAPS or any government department.
7.2 Apple Services (iPhone)
On iPhone we use Apple's services for:
- iCloud: Optional storage of your app data in your personal iCloud account when enabled
- Push Notifications (APNs): Delivery of status change and renewal alerts (Premium / trial where applicable)
- In-App Purchases: Subscription payments processed by Apple App Store
These services are governed by Apple's Privacy Policy.
7.3 Google Services (Android)
On Android we use Google's services for:
- Firebase Cloud Messaging (FCM): Delivery of status change, renewal and announcement notifications, and the signal that wakes the app to run a status check. FCM uses a device token, which we also store on our server as described in §4.3
- Google Play Billing: Subscription payments, free trials and renewals processed by Google Play
- Android Auto Backup: Optional backup of app data to your own Google account when enabled on your device
These services are governed by Google's Privacy Policy. We use Firebase only for Cloud Messaging; we have not enabled Google Analytics for Firebase.
7.4 Supabase (Backend Services)
We use Supabase as our backend provider for the server-side categories described in §4.3. Supabase:
- Hosts encrypted data in line with §4.3
- Provides encryption in transit and at rest as offered by the platform
- Is governed by Supabase's Privacy Policy
7.5 Analytics SDKs, Ads, and First-Party Data
GunStatus does not embed third-party advertising or consumer-tracking SDKs such as:
- ❌ Google Analytics
- ❌ Facebook SDK
- ❌ Third-party ad networks
- ❌ Tracking cookies in the app
We may process first-party operational data on our backend (for example monitoring state and aggregated pipeline timing derived from status events) to run and improve the service. This is not used for advertising.
8. Push Notifications (Premium Feature)
8.1 What Notifications Are Sent
Premium users (including during an active trial, where applicable) may receive notifications for:
- Status Changes: When your SAPS application status changes (e.g., "IN PROCESS" → "COMPLETED")
- Renewal Alerts: 7 months, 6 months, about 4 months, about 1 month and 2 weeks before your firearm licence expires (based on dates you enter)
- Announcements: Occasional service notices, for example when the SAPS website is unavailable (Android)
8.2 How Notifications Work
- Device notification tokens may be stored on our secure servers
- Background monitoring is coordinated between your device, our backend where applicable, and the push service of your platform—subject to iOS or Android scheduling, battery settings and network conditions
- Notifications are delivered via Apple Push Notification service (APNs) on iPhone and Firebase Cloud Messaging (FCM) on Android
- Notification content is kept functional and minimal
8.3 Managing Notifications
You can disable notifications anytime:
- In-app: Stop monitoring individual applications (removes associated server-side monitoring data where applicable)
- Device Settings: Disable all GunStatus notifications
9. Subscriptions and Payments
9.1 Payment Processing
All subscription payments are processed by the Apple App Store (iPhone) or Google Play (Android). We do not:
- ❌ Store your payment information
- ❌ Have access to your credit card details
- ❌ Process payments directly
9.2 Subscription Data
The following subscription information is stored locally (and, on iPhone, may sync via iCloud key mechanisms as implemented by the app):
- Trial start date and trial days remaining (iPhone)
- Subscription status (trial/active/expired)
Your actual payment information and subscription details are managed by Apple or Google Play and governed by their privacy policies. On Android you can manage or cancel your subscription in Google Play at any time.
10. Your Rights
10.1 Access Your Data
You can access your data in multiple ways:
- View locally stored data within the app
- Access iCloud data through your Apple device settings, or Google backup data through your Google account and Android backup settings
- View monitored applications in the app (with related server-side fields as described in §4.3)
10.2 Delete Your Data
You can delete your data anytime:
- Individual items: Use delete buttons in the app
- Application history: Delete individual items or clear as supported in-app
- Firearms: Delete individual firearms from "My Firearms"
- Shooting sessions: Delete sessions and associated images in the Shooting section
- Monitoring: Stop monitoring any application (removes associated server-side monitoring data where applicable)
- All local data: Uninstall the app
- Cloud backup data: Manage through your Apple device settings (iCloud) or your Google account and Android backup settings
- Server data: Stop monitoring all applications or contact us at info@gunstatus.co.za
10.3 Export and Sharing
You can share or export PDFs generated from shooting session data using the system share sheet on iPhone or Android. Exported files may be sent to destinations you choose (email, messaging apps, Files, etc.). You are responsible for what you share after export.
10.4 Requests Regarding Server-Stored Data
Because some monitoring-related data is stored on our servers as described in §4.3, you may contact us at info@gunstatus.co.za to request assistance with deletion or questions about those server-side categories, subject to verification and applicable law.
11. Children's Privacy
GunStatus is intended for lawful firearm owners aged 18 and older. We do not knowingly collect information from anyone under 18.
If you believe a minor has used the app, please contact us immediately at info@gunstatus.co.za.
12. POPIA Compliance
GunStatus complies with the Protection of Personal Information Act (POPIA) of South Africa:
- ✅ Minimal data collection (only what's necessary for the service)
- ✅ Secure storage (local device, iCloud or Google account backup encryption where used, and secure servers for the limited categories in §4.3)
- ✅ User control (you manage most data in-app)
- ✅ We do not sell your personal information and we do not use it for advertising
- ✅ We use service providers and integrations as needed to operate the app, including SAPS (status queries you initiate), Apple (IAP, APNs, iCloud as applicable), Google (Google Play Billing, Firebase Cloud Messaging and Android backup as applicable), and Supabase (backend hosting for §4.3)
- ✅ Transparent practices (this privacy policy)
- ✅ Right to access and delete within practical and legal limits—contact us for server-side categories
- ✅ Data minimization on servers (no names, addresses, or contact details stored server-side as described above)
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top
- Publish the latest version at https://gunstatus.co.za/privacy-policy/
- Notify users of material changes through the app or website
Your continued use of the app after changes take effect constitutes acceptance of the revised policy.
14. Contact Information
GunStatus.co.za
📧 Email: info@gunstatus.co.za
🌐 Website: https://gunstatus.co.za
📍 Country: South Africa
If you have any questions or concerns about this Privacy Policy, please contact us.
15. Governing Law
This Privacy Policy is governed by the laws of the Republic of South Africa. Any disputes will be subject to South African jurisdiction.