Privacy Policy

1. WHO THIS APPLIES TO. This covers the mobile App. Because the App signs in with the same account used on the Website's member portal, and a Club membership application (submitted on the Website, not in the App) is what creates that account, Section 3 below also describes the data collected at application time — you should understand what you agreed to share before you ever download the App. If you are not a Back40 member or applicant, the App collects nothing about you. There is no public/guest mode and no tracking of App Store or Play Store visitors.

2. DATA THE APP COLLECTS DIRECTLY. Email address and password, to sign in — the password is one-way hashed (scrypt); Back40 cannot see or recover it. Display name and bio, if you write one, shown next to your posts in the member forum. Forum posts and replies you write — visible to other signed-in members and to Club staff for moderation, not private. A session token, kept only on your device in iOS Keychain / Android Keystore, never in plain unencrypted app storage, sent only back to the Club's own server to prove you're signed in. If you set up Bluetooth gate access, a gate credential — the secret lives only on your device's Keychain/Keystore and on the Club's server as a one-way hash, never as plain text after the one time it is issued to you (see Section 5). The App has no crash-reporting or analytics SDK integrated (Sentry, Crashlytics, Google Analytics, Amplitude, or similar) as of this policy's effective date. If that ever changes, this section will name the specific service and this policy will be updated before the change ships. The App does not collect your precise or approximate location, your device's advertising ID, your contacts, or your photos or camera roll, outside of what you explicitly upload during a Website flow described in Section 3. There is no advertising in the App and no advertising SDK of any kind.

3. DATA COLLECTED WHEN YOU APPLY FOR MEMBERSHIP OR BUY A PASS (WEBSITE). These flows happen on the Website, opened from the App in an in-app browser when relevant — applying, buying a day pass, reserving a hunting slot, resetting your password — rather than rebuilt inside the App itself. They are listed here because the account the App signs into is created through them. Membership application: full name, date of birth, phone, email, mailing address, a photo of a government-issued ID, membership plan selected, vehicle make/model/year and license plate, emergency contact name/phone/relationship, and your signature (typed or drawn) on the Club's liability waiver. The ID photo is stored in a private file store, never publicly accessible, viewed by Club staff only through short-lived (5-minute) links generated when needed — never a permanent public URL. If your application is declined, the Club's stated policy is to delete the ID photo within 30 days. Day pass or hunting slot purchase: name, email, and — if you are bringing guests — their name and email so each can be sent their own waiver to sign; nobody signs on another person's behalf. Payment card details are never seen or stored by the Club — they go directly to Stripe, our payment processor (Section 4). Heroes discount (military/first-responder), if claimed: uploaded supporting documentation, stored in the same private file store as ID photos, viewed by staff only to verify eligibility before approving the discount.

4. WHO WE SHARE DATA WITH. We do not sell your data and do not share it for advertising purposes — we have no advertiser relationships. Supabase is our database and file storage provider and hosts all account, application, forum, and gate-access data described above. Stripe processes membership and purchase payments; we receive your name, email, and transaction result, never your card number. Resend sends transactional email — application confirmations, waiver requests, password reset links — and receives only the recipient address and message content for the email being sent. Approved Club staff can see application details, membership status, gate access history, and forum content for moderation, through a separate staff-only tool with its own login. We disclose data to law enforcement or under legal process only if legally compelled, and only the specific data covered by that order. We do not use any third-party analytics, advertising, or tracking SDK in the App; if that ever changes, this section will name the new service before the change ships, not after.

5. BLUETOOTH AND GATE ACCESS — THE SPECIFICS. The App can use Bluetooth to open the Club's interior gate. This is opt-in: nothing about it happens until a member asks Club staff to issue a gate credential and enters it in the App. What the App transmits over Bluetooth is a proof that you hold a valid credential — a cryptographic response to a one-time random challenge the gate sends — and a non-secret identifier for which credential it is. The credential secret itself is never transmitted, only a fresh mathematical proof of possessing it, different every time, so nothing captured from the air can be replayed later. The App does not track your location, scan for or record other Bluetooth devices around you, or run in the background when you are not using it. The Android permission the App requests for Bluetooth scanning is declared "neverForLocation" — Android enforces that the App cannot use it to infer your location, by design, not just by policy. Every gate-open attempt, successful or not, is logged — which credential, which gate, granted or denied, and when — visible to Club staff, the same as the existing physical-card access log. If your phone is lost or stolen, contact the Club immediately; staff can revoke your gate credential instantly, and it stops working the moment it's revoked regardless of what is stored on the device.

6. YOUR CHOICES AND RIGHTS. You may ask the Club to delete your forum posts. You can update your bio any time from the member portal. You can remove a gate credential from your device any time in the App's Gate tab, or ask staff to revoke it server-side — server-side revocation is authoritative regardless of what any device still has stored. You may request deletion of your account and associated data by contacting the Club using the information in Section 8; some records, such as signed liability waivers or payment records, may be retained longer where the Club has a legal or safety obligation to keep them, and you will be told specifically what is retained and why if this applies. If applicable state law gives you rights to access, correct, or delete your personal information, or to opt out of its sale — we do not sell personal information — contact us and we will respond as required by law.

7. CHILDREN. Membership and the App are not directed at children. Minors may be brought onto Club property as a guest of a sponsoring adult member under direct supervision per the Club's guest rules, but a minor does not create their own App account or member login. We do not knowingly collect personal information from children under 13 through the App.

8. CONTACT. Back40 Sportsman's Club, 16409 State Hwy M, Lawson, MO 64062. [FILL IN — real phone number] · [FILL IN — real email address].

9. CHANGES TO THIS POLICY. If this policy changes in a way that materially affects how your data is used, the Club will update this document and, where practical, notify members through the App or the announcement board on the member portal. Continued use of the App after a change takes effect means you accept the updated policy.