Privacy Policy

1. WHO THIS APPLIES TO. This covers the mobile App. Because the App signs in with the same account used on the Website's member portal, and a Club membership application (submitted on the Website, not in the App) is what creates that account, Section 3 below also describes the data collected at application time — you should understand what you agreed to share before you ever download the App. If you are not a Back40 member or applicant, the App collects nothing about you. There is no public/guest mode and no tracking of App Store or Play Store visitors.

2. DATA THE APP COLLECTS DIRECTLY. Email address and password, to sign in — the password is one-way hashed (scrypt); Back40 cannot see or recover it. Display name and bio, if you write one, shown next to your posts in the member forum. Forum posts and replies you write — visible to other signed-in members and to Club staff for moderation, not private. Chat messages you send in the App's direct, group and channel conversations — visible to the members in that conversation and to Club staff for moderation. Photos you choose from your photo library to attach to a work-day request, which Club staff see. Stand names and the position of any hunting stand you mark on the stand map (described below). A session token, kept only on your device in iOS Keychain / Android Keystore, never in plain unencrypted app storage, sent only back to the Club's own server to prove you're signed in. The list of members you have blocked, kept only on your device. The App has no crash-reporting or analytics SDK integrated (Sentry, Crashlytics, Google Analytics, Amplitude, or similar) as of this policy's effective date. If that ever changes, this section will name the specific service and this policy will be updated before the change ships. Location. The App uses your device's precise location only on the stand map, and only when you tap "Mark a stand" or "Show my spot," after your phone asks permission. It takes a single reading at that moment. It does not track you, does not run in the background, and does not keep a history of where you have been. "Show my spot" displays your position on your own screen and is not sent to the Club. "Mark a stand" saves that position to the Club's database as the stand's location, together with the stand's name and your name, and it is shown to other signed-in members on the stand map and visible to Club staff. A stand's status (for example, that a member is heading out to it or sitting in it) is shared with other members, but it is a status and not a live location. You can refuse the location permission and still use every other part of the App, and you can ask the Club to remove a stand you marked. The App does not collect your approximate location from any other source, your device's advertising ID, your contacts, or your camera. The only photos it reads are ones you pick from your photo library to attach to a work-day request. There is no advertising in the App and no advertising SDK of any kind.

3. DATA COLLECTED WHEN YOU APPLY FOR MEMBERSHIP OR BUY A PASS (WEBSITE). These flows happen on the Website, opened from the App in an in-app browser when relevant — applying, buying a day pass, reserving a hunting slot, resetting your password — rather than rebuilt inside the App itself. They are listed here because the account the App signs into is created through them. Membership application: full name, date of birth, phone, email, mailing address, a photo of a government-issued ID, membership plan selected, vehicle make/model/year and license plate, emergency contact name/phone/relationship, and your signature (typed or drawn) on the Club's liability waiver. The ID photo is stored in a private file store, never publicly accessible, viewed by Club staff only through short-lived (5-minute) links generated when needed — never a permanent public URL. If your application is declined, the Club's stated policy is to delete the ID photo within 30 days. Day pass or hunting slot purchase: name, email, and — if you are bringing guests — their name and email so each can be sent their own waiver to sign; nobody signs on another person's behalf. Payment card details are never seen or stored by the Club — they go directly to Stripe, our payment processor (Section 4). Heroes discount (military/first-responder), if claimed: uploaded supporting documentation, stored in the same private file store as ID photos, viewed by staff only to verify eligibility before approving the discount.

4. WHO WE SHARE DATA WITH. We do not sell your data and do not share it for advertising purposes — we have no advertiser relationships. Supabase is our database and file storage provider and hosts the account, application, forum, chat, work-day photo and stand data described above, along with the Club's own gate-access records for physical credentials. Stripe processes membership and purchase payments; we receive your name, email, and transaction result, never your card number. Resend sends transactional email — application confirmations, waiver requests, password reset links — and receives only the recipient address and message content for the email being sent. Approved Club staff can see application details, membership status, gate access history, forum and chat content, and the reports members send about that content, for moderation, through a separate staff-only tool with its own login. We disclose data to law enforcement or under legal process only if legally compelled, and only the specific data covered by that order. We do not use any third-party analytics, advertising, or tracking SDK in the App; if that ever changes, this section will name the new service before the change ships, not after.

5. BLUETOOTH AND GATE ACCESS. This version of the App does not use Bluetooth and does not open the Club's gate. It requests no Bluetooth permission on either platform, and contains no Bluetooth code. Gate entry uses the credential the Club issues you, which this version of the App is not involved in operating. Every gate entry is logged, which credential and when, and is visible to Club staff; that logging is a property of the Club's gate hardware and predates the App entirely. If your credential is lost or compromised, contact the Club and staff can revoke it immediately. If a future version of the App adds app-based gate entry, this section will be rewritten to describe exactly what it transmits, and this policy will be updated before that version ships — not after.

6. YOUR CHOICES AND RIGHTS. You may ask the Club to delete your forum posts, or a stand you marked. You can update your bio any time from the member portal. Forum posts and chat messages from other members can be reported to the Club from the App with "Report / Block" beside the post or message; reports go to Club staff, who review them and respond within 24 hours, and can remove content or a member's access. The same button lets you block a member, which hides that member's posts and messages from you; you can undo it under More, Blocked Members. You can ask staff to revoke your gate credential at any time; revocation is server-side and authoritative. You may request deletion of your account and associated data by contacting the Club using the information in Section 8; some records, such as signed liability waivers or payment records, may be retained longer where the Club has a legal or safety obligation to keep them, and you will be told specifically what is retained and why if this applies. If applicable state law gives you rights to access, correct, or delete your personal information, or to opt out of its sale — we do not sell personal information — contact us and we will respond as required by law.

7. CHILDREN. Membership and the App are not directed at children. Minors may be brought onto Club property as a guest of a sponsoring adult member under direct supervision per the Club's guest rules, but a minor does not create their own App account or member login. We do not knowingly collect personal information from children under 13 through the App.

8. CONTACT. BACK40 SPORTSMAN'S CLUB LLC, 16409 Highway M, Lawson, MO 64062. (816) 200-0580 · info@back40sc.com.

9. CHANGES TO THIS POLICY. If this policy changes in a way that materially affects how your data is used, the Club will update this document and, where practical, notify members through the App or the announcement board on the member portal. Continued use of the App after a change takes effect means you accept the updated policy.