Privacy Policy

• Account details — if you create an account: your email address and a securely hashed password, or the identifier and email Google or Apple share when you sign in with them. We also record when you accepted these terms and which version.
• Target photos — on the website, when your results are shown, a copy of the photo you marked is uploaded. In the mobile apps, photos stay on your phone unless you turn on backup & sync. Location and other EXIF metadata are stripped before any photo is stored.
• Shooting data — shot positions, group statistics, distances, and any rifles, scopes, loads, sessions, locations, weather and notes you choose to enter.
• Security records — for each sign-in session, the device's browser or app identifier (user agent) and IP address, used to protect your account and detect abuse.
• Subscription records — if you buy Premium: your plan, status, renewal date and the payment provider's customer reference. Card and bank details are entered on Paystack's (or the app store's) own pages and never reach our servers.
• Anonymous sessions — if you analyse a target without an account, we create an anonymous account identified only by a random ID in a cookie, so your group can be saved, shared or claimed later.

The ballistic calculator runs entirely in your browser; your inputs are kept only in your browser's local storage and are not sent to us. We use only essential cookies (to keep you signed in) — no advertising or analytics trackers.

• To provide the service you asked for: saving, syncing and sharing your groups and profiles (performance of a contract).
• To process subscriptions and meet tax and accounting obligations (contract and legal obligation).
• To send essential account emails — verification, password reset, billing notices (contract).
• To keep the service secure and prevent abuse (our legitimate interest).

We do not sell your personal information, use it for advertising, or use it for direct marketing without your separate consent.

Only with operators who process it on our behalf, under written agreements, and only as needed:

• Paystack — payments and subscription management.
• Vercel Inc. — hosting of the website and our servers, and storage of target photos.
• Neon Inc. — our database, hosted in Frankfurt, Germany.
• Google (Google Workspace) — sending account emails such as verification and password resets.
• Google or Apple, only if you choose to sign in with them.

A group or session you share gets a public link; anyone with the link can see that group's photo and statistics (never your email or session location). You can revoke a link at any time. We may disclose information where the law requires it.

Some of these providers store or process data outside South Africa. Where that happens we rely on section 72 of POPIA: the recipient is bound by law, binding corporate rules or a written agreement giving protection substantially similar to POPIA, or the transfer is necessary to provide the service you requested.

In practice your data is stored in the European Union (our database, in Germany, which is covered by the GDPR) and the United States (website hosting and photo storage with Vercel, under its data processing agreement). Google and Paystack may process the data they handle for us in other countries under their own POPIA- and GDPR-aligned safeguards.

• Account and shooting data: for as long as your account exists. Deleting your account erases it, including photos.
• Anonymous sessions that are never claimed: deleted, with their photos, after 12 months without activity.
• Sign-in security records: until the session expires (30 days) or is revoked.
• Subscription and payment records: as long as South African tax law requires us to keep them.
• Backups: our database provider keeps short-term recovery backups, which are overwritten within 30 days.

Under POPIA you may:

• Access your information — download everything we hold from your account (“Download my data”).
• Correct it — edit rifles, loads, sessions and groups directly in the app, or ask us.
• Delete it — “Delete my account” on your account page removes everything immediately, including photos.
• Object to processing based on our legitimate interests, and withdraw consent you've given.
• Complain to the Information Regulator (South Africa) — inforegulator.org.za. We'd appreciate the chance to fix things first.

Passwords are hashed, sign-in tokens are kept in secure, http-only cookies, all traffic is encrypted in transit, and photo metadata is stripped. No system is perfectly secure; if a breach affects your information we will notify you and the Information Regulator as POPIA section 22 requires.

MeanRadius is meant for adults. We don't knowingly collect information from anyone under 18.

Information Officer: Tiaan Fourie, hello@quantumcode.co.za. Registered office: 234 Loveday Street, Muckleneuk, Pretoria, Gauteng, 0002. See also our contact page.

We'll update this policy as the service changes and show the new effective date at the top.