Privacy

An account holds: your rifles and their measured chamber/freebore numbers, saved loads, range sessions, chronographed velocities, notebook entries, your zero and truing offsets, measured target groups, your Match Book (matches, stages, and any share links you make), your past Freebore AI chats, and the photo of a target you measure. Each is stored on our server so it syncs to your other devices, and a working copy is kept on this device too so the app works with no signal at the range. A photo you attach to a notebook entry stays on this device only — the note syncs, the picture doesn't.

It gets there because you put it there: you type it, save it, import a file, take a reading from a meter, or pick a photo. Your sign-in details come from the sign-in screen (see Clerk, below). The app never reads your location, camera or photos on its own — only when you tap for them.

Scan a box on the iPhone reads the box on the phone itself, with Apple's built-in text recognition, and nothing leaves the phone unless you tap "Ask Freebore AI to read it". Then the photo goes to Anthropic as described below.

Direction of fire from the phone's compass uses your location on the phone only, to turn the compass reading into true north. It is not sent anywhere.

Report a problem opens your own mail app with the app's build, the kind of device, the screen you were on and your last Solve inputs (rifle name, load, distance, speed, BC, zero, wind and air) already filled in. You see every line, and nothing is sent until you press Send. We keep the email to answer it.

Siri and the Apple Watch work from copies kept on your own devices: the phone keeps your last Solve inputs so Siri can answer without opening the app, thrown away when you sign out or someone else signs in; the watch keeps the last card it was sent, for its complications.

For each photo scan (load notes, match sheet, Garmin Xero screen, and an ammo box when Freebore AI reads it) we also log a line tied to your account: which scan, when, how many photos, how big the AI job was, and whether it worked. It's there so we can see what the AI costs to run. It does not hold the photo or anything read off it.

What it's used for: to show and sync your own data, to run the feature you tapped, and to run your subscription. None of it is used to build Freebore's shared prediction model — the physics engine is fitted only from published manufacturer and lab data (docs/MODEL-VALIDATION.md), never from what any user measures or saves.

• Cloudflare hosts the app and the database (D1) that holds your rifles, loads, sessions, notebook, measured groups, matches, chats, the scan log and subscription status. Photos are stored in Cloudflare's object storage (R2).
• Clerk handles sign-in — your email and password (or the account you signed in with) are Clerk's to hold, not ours. We only ever see your Clerk user id, never your password. If you sign in with Apple, Apple gives Clerk your name and your email, or a private relay address that Apple forwards, if you chose to hide it.
• Stripe handles payment when you subscribe on freebore.app. Freebore never sees your card number, expiry or CVC — Stripe's own checkout page collects them, and we're handed back a customer id and a subscription status, nothing else.
• Apple handles payment when you subscribe inside the iPhone or iPad app. Apple charges your Apple Account. Freebore never sees your card, and never sees your Apple Account's email. For each App Store subscription, Apple sends us, and we keep against your Freebore account so it works on every device: Apple's transaction numbers for it (the first and the latest), the plan (monthly or yearly), when it was bought and when the current period ends, whether you're in the free trial, whether it's set to renew and as which plan, whether Apple is retrying a failed charge or giving you a grace period, Apple's reason code if it ended, the date if Apple refunded or revoked it, whether it was a real purchase or an Apple test one, and a code made from your Freebore account id so Apple's record and ours match up. Apple's privacy policy: apple.com/legal/privacy.
• Google Play handles payment when you subscribe inside the Android app. Google charges your Google account. Freebore never sees your card. Google tells us which plan you're on and whether it's active, and we keep that against your Freebore account so it works on every device. Google's privacy policy: policies.google.com/privacy.
• Anthropic, the company that makes the Claude AI model, runs Freebore AI — and only after you tap Allow on the Freebore AI permission sheet, which comes up the first time you use any AI feature. What it gets: for Ask, your question, the chat so far, and a short list of your saved loads (rifle name, load, velocity, BC) so the answer fits your rifle; for a scan, the photos or PDF you picked (and, for load notes, the rifle's cartridge). It goes through our server; your name, email and account id are not sent with it. Anthropic's commercial terms say it "may not train models on Customer Content" and that the data is processed under its Data Processing Addendum — anthropic.com/legal/commercial-terms. How long Anthropic keeps it is set by those terms, not by us.
• Open-Meteo, a weather service, gets your position — only when you tap My location on Solve — so it can send back the weather at that spot. (GPS altitude reads your phone's own GPS and sends nothing.) Our server asks for you, so Open-Meteo sees the position but not who you are, and we don't keep the position on our server. Open-Meteo's own terms say its logs are deleted after 90 days — open-meteo.com/en/terms. If Open-Meteo doesn't answer, the same position can go to the US National Weather Service (weather.gov) instead, where that backup is switched on.
• Your watch and your meters are between your phone and the device. The stage and range card go from your phone to your Apple Watch over Apple's own watch link, and to your Garmin over Bluetooth through Garmin's Connect IQ kit (the Garmin Connect app on your phone is used once, to pick the watch). Kestrel, Calypso, Tempest and SG readings come into the phone over Bluetooth. Freebore doesn't send any of it to Apple, Garmin or the meter makers. In the iPhone app the Tempest is read by WeatherFlow's own code, built into Freebore. That code can download firmware for the meter from WeatherFlow's server: a plain file download that names only the meter's firmware type and version, so WeatherFlow sees your phone's internet address and nothing else. It sends nothing about you, your position or your readings.

Each of these gets only what its one job needs. Cloudflare, Clerk, Stripe and Anthropic handle it for us under their own published terms, which bind them to protect it: Cloudflare, Clerk, Stripe, Anthropic. Open-Meteo is sent a map position and nothing that says who you are.

We don't sell your data, to anyone, ever. We don't run ads and we don't share your data with anyone for advertising. We don't read your saved loads or sessions to build the app's physics model. The only outside services involved are the ones named above, each doing the one job described.

Freebore is a paid subscription, $5.99 a month or $54 a year in the US, with a 7-day free trial. It renews automatically each month or year until you cancel. You can pay in any of three places, and any one unlocks the same account everywhere.

In the iPhone or iPad app, Apple charges your Apple Account. Cancel in your iPhone's Settings (tap your name, then Subscriptions) at least 24 hours before the trial or the current period ends. Refunds for App Store charges come from Apple, not us.

In the Android app, Google Play charges your Google account. Cancel in Google Play, at play.google.com/store/account/subscriptions, before the trial ends to avoid the first charge; after that you keep access for the time you've already paid for. Refunds for Google Play charges come from Google, or from us through Google Play.

On freebore.app, Stripe collects your card at the start of the trial and takes the first payment automatically when it ends, unless you cancel first — canceling is one tap, in Manage subscription on the Account page, any time before the charge date shown there. If you're charged and think it's a mistake, email us within 14 days of the charge and we'll refund it, no argument.

If a subscription lapses or a trial ends without converting, the app goes read-only — everything you've saved stays exactly where it is and is never deleted for non-payment.

Every number Freebore predicts — pressure, velocity, drop, wind hold — is an ESTIMATE built from a physics model and published data. It is not a pressure gauge reading and it is not a substitute for one. Always work up a load from a published, current manufacturer or reloading-manual starting charge, watching for pressure signs as you go. You are responsible for every round you load and fire; Freebore is a planning tool, not a safety authority.

Export a copy, delete your data, or delete your whole account, any time, from the Account page (in the phone app: More, then Your data). Deleting hard-deletes your server copy, not a tombstone. "Delete all my data" removes your rifles, groups and their photos, chats and matches and keeps the account. "Delete your account" removes all of that plus your share links, the AI scan log, your subscription record and your sign-in, and ends a freebore.app subscription first so you're never charged again. See the Terms page for what "delete" does exactly. Stripe keeps its own record of past charges.

If you subscribed through the App Store, deleting your account can't stop Apple's billing. Only you can, in your iPhone's Settings: tap your name, then Subscriptions. The delete screen says so before you delete. Cancel there first; otherwise Apple keeps charging after the account is gone.

The same goes for Google Play: deleting your account can't stop Google's billing. Cancel first in Google Play, at play.google.com/store/account/subscriptions; otherwise Google keeps charging after the account is gone.

Can't sign in, or already deleted the app? Email us from the address on the account and we'll delete it within 30 days. How, and exactly what goes: freebore.app/delete-account.

How long we keep it: until you delete it, or delete the account. A lapsed subscription never deletes anything.

Taking back the Freebore AI OK: Settings, Freebore AI, Off. From then on nothing is sent to Anthropic until you allow it again. What was already sent is covered by Anthropic's terms, above.

support@freebore.app