Sporting Ledger Sporting Ledger Privacy Policy
Effective date: 28 May 2026
Operator / controller: Riverslaney Technologies
Website: https://riverslaney.com/sportingledger
Support: support@riverslaney.com
Product contact: sportingledger@riverslaney.com
Privacy contact: privacy@riverslaney.com
This Privacy Policy explains how Riverslaney Technologies processes personal data in connection with Sporting Ledger.
Sporting Ledger is a privacy-focused, offline-first personal shooting diary for individual shooters in Ireland and the United Kingdom. It is designed to collect as little information as reasonably possible for its purpose and to give you control over whether your shooting log is kept only on your phone or also saved to your account.
1. Summary
- Sporting Ledger works offline.
- Your log is stored securely on your phone.
- You can choose to keep your log on this phone only.
- If you enable online saving, a copy of your log is saved to your account using Amazon Web Services in Ireland.
- We do not use advertising SDKs.
- We do not sell personal data.
- We do not collect firearm serial numbers.
- Diagnostic reports are optional and off by default.
- You can delete your account in the app.
2. Data we process
Depending on how you use the app, Sporting Ledger may process the following information.
Account information
- Email address
- Password authentication information handled by Amazon Cognito
- Authentication tokens stored securely on your device
- Verification and reset code flows
Your password is not stored in plain text by Sporting Ledger.
Shooting log information
You may choose to enter:
- Firearm make, model, calibre or gauge, notes and optional photos
- Ammunition brand, type, category and optional photos
- Places, location names, notes and latitude/longitude
- Shooting entries, dates, day notes and activity information
- Species, counts, outcomes, tags, rounds fired, descriptions and photos
- Saved places, free-text place labels or GPS coordinates
- Custom activity labels and notes
Device and operational information
We may process:
- Timestamps used to save and update records
- App version and operating system version in diagnostic reports, if enabled
- IP address and request metadata in standard cloud infrastructure logs
- Error or warning messages in diagnostic logs, if enabled
Data we do not intentionally collect
Sporting Ledger does not intentionally collect:
- Firearm serial numbers
- Payment or billing information
- Contacts
- Calendar data
- SMS or call logs
- Advertising IDs
- Social graph or social sharing data
- Club membership or licence numbers, unless you choose to type such information into notes or tags
3. Sensitive context
Your log may include precise locations, photos, shooting activity and information that implies possession or use of firearms. We treat this as sensitive contextual information and design the app accordingly. You should avoid entering information that you are not comfortable storing on your phone or, if online saving is enabled, in your account.
4. How your data is stored
On your phone
Sporting Ledger stores structured log data in an encrypted local database. Photos are encrypted on disk. Authentication tokens and encryption keys are stored using secure device storage. Android backup rules exclude the database and sensitive files from ordinary app backup.
In your account
If you choose “Save online with my account”, your log is copied to your account. Online account data is hosted using Amazon Web Services in the eu-west-1 region in Ireland.
Online storage may include log metadata in DynamoDB and encrypted photo objects in S3. Authentication is handled by Amazon Cognito. Transactional emails may be sent using Amazon SES.
Phone-only mode
If you choose “Keep on this phone only”, your shooting log is not uploaded to your account. If your phone is lost, damaged, wiped, replaced, or the app is deleted, your phone-only data may be permanently lost.
5. Why we process data
We process personal data to:
- create and manage your Sporting Ledger account;
- let you record, view, update and delete your shooting log;
- save a copy to your account if you choose online saving;
- restore your log from your account if you ask us to;
- secure the app and prevent unauthorised access;
- send verification and password reset emails;
- provide support;
- diagnose errors, but only where diagnostic reports are enabled or where infrastructure logs are necessary for security and operations;
- comply with legal obligations.
6. Lawful bases
Depending on the context, we rely on one or more of the following lawful bases under GDPR and UK GDPR:
- Contract: to provide the app, account and online saving features you request.
- Legitimate interests: to secure, maintain, troubleshoot and improve the app, provided those interests are not overridden by your rights.
- Consent: for optional diagnostic reports where consent is required or appropriate.
- Legal obligation: where we must keep or disclose limited information to comply with applicable law.
7. Diagnostics
Diagnostic reports are optional and off by default. If you enable them, the app may send scrubbed error or warning information to CloudWatch Logs to help us fix problems. The app is designed to redact emails, paths and coordinates from diagnostic reports where implemented.
Diagnostic reports are not intended for advertising or user profiling.
8. Third parties and processors
We use selected third-party services to provide Sporting Ledger:
- Amazon Web Services, including Cognito, SES, API Gateway, Lambda, DynamoDB, S3 and CloudWatch Logs.
- OpenStreetMap or related tile providers when maps are viewed.
- Device operating system geocoding services for address search, depending on the device and platform.
We do not sell personal data and do not use advertising SDKs.
9. International transfers
Sporting Ledger’s online account storage is designed to use AWS eu-west-1 in Ireland. Users in the UK may have data processed in the European Economic Area. Where international transfer rules apply, we intend to rely on applicable adequacy arrangements, safeguards, or other lawful transfer mechanisms.
10. Retention
We keep your live account data for as long as your account exists, unless you delete it or ask us to delete it sooner and we are able or required to do so.
If you delete individual records in the app, deletion is reflected locally and, where online saving is enabled, in your account according to the app’s saving behaviour.
11. Account deletion
You can delete your account in the app:
Account → Delete account → enter password → tick confirmation → Delete account
When account deletion completes, Sporting Ledger is intended to remove:
- your Cognito sign-in;
- live cloud log data in DynamoDB;
- live cloud photo objects in S3;
- the encrypted local database and photos on your phone;
- local auth tokens and account-owner preferences.
Deletion requires an internet connection. If deletion fails, retry when online or contact support@riverslaney.com or privacy@riverslaney.com.
Residual data after deletion
Account deletion removes your live app account and live cloud copy, but some limited residual data may remain temporarily or separately:
- optional diagnostic logs may persist for a limited period after deletion;
- operational infrastructure logs may contain request metadata such as IP address and timestamps;
- backup copies may persist until they expire under backup retention schedules;
- already-sent verification or password reset emails cannot be recalled from email systems.
We do not use these residual records to recreate your account or restore your deleted shooting log.
12. Your data protection rights
Subject to applicable law, you may have rights to:
- access your personal data;
- correct inaccurate data;
- delete your data;
- restrict certain processing;
- object to certain processing;
- withdraw consent where processing is based on consent;
- request portability of data you provided, where applicable;
- complain to a data protection authority.
For privacy requests, contact privacy@riverslaney.com. We may need to verify your identity before acting on a request.
13. Data portability and access
You can view your log in the app. If online saving is enabled, you can load your log from your account on another device. A dedicated machine-readable export feature is not part of the current version. If you need an access or portability request, contact privacy@riverslaney.com.
14. Children
Sporting Ledger is not intended for children. You must not use the app if you are not legally permitted to engage in the activities you record.
15. Security
We use reasonable technical and organisational measures designed to protect your data, including local encryption, secure token storage, TLS, JWT-protected APIs, server-side scoping by user, encrypted photo storage, and rate limits.
No security system is perfect. You are responsible for keeping your device, account and password secure.
16. Changes to this policy
We may update this Privacy Policy as the app, law, or our processing changes. If changes are material, we will take reasonable steps to notify you, for example in the app or on our website.
17. Contact
Privacy requests: privacy@riverslaney.com
General support: support@riverslaney.com
Product contact: sportingledger@riverslaney.com