Data controller
The data controller is FEROX YT SAS. Full contact details are available in the legal notice. For any question about your data or to exercise your rights, you can write to mouche@ferox.yt.
Data handled by the app
- Target photos. Taken with the camera or imported from the photo library, they are analysed on the device and saved in the app’s private storage (with the detected impacts, scores and statistics): files the system never deletes by itself and that only the user erases. They are never sent to the publisher or to any third party, unless the user chooses to share them (see below).
- Information you enter. Session name, firearms, ammunition, location, shooter’s name (optional), notes, settings. Same conditions: local storage only.
- System backups. On Android, the app’s data is excluded from Google Drive backup but may follow a direct transfer to a new device; on iPhone, it is included in the device’s iCloud backup if the user has enabled it. These copies belong to the user’s account; the publisher has no access to them.
- No account. No registration, no advertising identifier, no tracker, no advertising, no audience measurement and no third-party crash reporting.
The publisher has no access to any of this data and cannot read, restore or delete it: it stays under the sole control of the user, who can erase it at any time (Settings → Data → Delete all data, or by uninstalling the app).
Permissions
- Camera. To photograph the target. Used only at the user’s request.
- Photos / photo library. To import target photos already taken. Used only at the user’s request.
No network permission is needed: the Android app does not declare Internet access, and the app’s content security policy forbids loading anything from outside.
Data you choose to send
Some functions produce a file the user can share through the app of their choice (messaging, online storage…): PDF report, backup, session export, sending a session to the publisher for analysis (“Report a problem”) and suggestions by email. These files are prepared in the app’s cache and deleted at the next start once they are more than a day old.
Sending a session to the publisher is voluntary and explicit. The archive contains the target photos and their file names, the detected and corrected impacts, all the session information (settings and, if entered, firearm, ammunition, location, shooter’s name and notes, which the user can erase by editing the session before sending), the device’s technical characteristics (manufacturer, model, screen size, versions of the system, the app and its web display component, user-agent identifier), and the message written by the user. If the “Keep the original photos” option is on, the photos as taken are attached after their GPS position has been removed; other camera metadata (model, date) remain.
This data is used only to diagnose and improve impact detection (legal basis: consent, Article 6(1)(a) GDPR). It is kept for at most twelve months and then deleted; the sender’s email address is used only to reply. Anyone can ask to see or delete what they sent by writing to mouche@ferox.yt.
App stores
Purchase and installation go through Google Play or the App Store, which process the transaction data under their own policies (Google LLC, Apple Inc.).
From these platforms, the publisher receives aggregated statistics, sales reports without the buyer’s name or email address (order number, device model, country and, depending on the case, region, city or postcode), crash reports where the user has agreed to share their diagnostics, and published reviews. This information is used for accounting and for monitoring the quality of the app; sales reports are kept for the statutory accounting retention period, which is ten years at most.
Security
On the device, data is kept in the app’s private storage, which the system isolates from other apps. Exported files are not encrypted by the app: they should be shared only with trusted recipients.
Minors
The app is not specifically aimed at children and collects no data about them.
Recipients and transfers
Data is accessible only to authorised FEROX YT personnel and, where necessary, service providers acting on its behalf. FEROX YT does not sell personal data. Where data must be processed outside the European Economic Area, FEROX YT applies the safeguards required by the GDPR where applicable.
Your rights
Depending on the processing and its legal basis, you may request access, rectification, erasure or restriction of your data, object to certain processing and, where the conditions are met, exercise your right to data portability. Proof of identity is requested only where necessary to verify the person making the request.
To exercise a right, write to mouche@ferox.yt.
You may also lodge a complaint with the French data-protection authority, the Commission nationale de l’informatique et des libertés (CNIL).
Policy updates
Any change to this policy will be published at this address with its update date. The French version is the reference.
Last updated: 2 November 2026.