Privacy Policy
Effective from 4 September 2026
1. Who controls your data
The data controller is Aimora, Poland.
For anything related to personal data, write to biuro@aimora.pl.
We have not appointed a data protection officer. Please direct all data protection matters to the address above.
2. What this policy covers
- aimora.pl — our website, including the contact form,
- the Aimora mobile app for Android.
3. Using the app without an account
The Aimora app works without an account. In that mode we receive no data that could identify you. Game settings, detector names and training results stay in your device's memory.
The app talks to the detectors locally over Bluetooth Low Energy. That traffic never goes through the internet.
4. What we process once you create an account
An account is optional and is only needed for Premium features and for moving your settings between devices. When you create one, we process:
| Data | Where it comes from |
|---|---|
| e-mail address | you provide it at sign-up |
| password | you set it at sign-up; we store it in a form that makes its contents unreadable to us |
| account identifier | created automatically at sign-up |
| date of last app use and app version number | recorded automatically when you sign in |
| scope of your purchased Premium access and its expiry date | set by us once your access has been paid for |
| game settings and app preferences (default number of detectors, hiding names when exporting results), the colours you define, the names you give your detectors and your tournament templates | sent only when you use the cloud settings backup |
| a counter of completed events and the date of the most recent ones | updated automatically in the app; used to service your account and maintain your purchased access. We store neither event names nor any details of their participants |
| technical data concerning the accuracy of timekeeping on your device | recorded exceptionally, when we detect an irregularity; used to verify the validity of Premium access and for technical support |
What stays on your device only
We do not receive: tournaments with their competitor lists and results, the history of completed events, or the organiser logo. That data lives in the app and disappears when you uninstall it.
This means that if you enter competitors' names into a tournament, that data is never sent to us. You remain the controller of it as the event organiser.
Tournament templates describe only the shape of an event — the order of stages and their settings. We strip competitor names from them before upload, in case someone typed one into a stage configuration.
5. Customer and business contact data
If you buy equipment from us, or represent an organisation that does, we process the data needed to conclude and perform the contract: name, business e-mail address and phone number, your role, and the identifying and billing details of the organisation you represent.
Where the contracting party is an institution — a shooting range, a foundation, an association — we process the contact person's data on the basis of our legitimate interest in servicing the contract concluded with that institution. Where you are the contracting party yourself, the basis is performance of a contract.
Warranty records — details of the equipment purchased, its delivery date and any reported defects — are kept for the warranty period and then until any related claims become time-barred. Invoices and accounting records are kept for the period required by tax law.
6. Usage analytics
The app and the website use Google Analytics for Firebase. We collect events describing how the product is used (for example starting a game or opening a screen), device type and operating system version. This is used solely to improve the product.
While you are signed in, we attach your account identifier and whether the account has Premium to analytics events. This lets us see which features are actually used. We never send your e-mail address to analytics, nor the names of competitors entered into a tournament. Signing out removes the link between events and your account.
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
7. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| running your account and providing Premium features | Art. 6(1)(b) — performance of a contract |
| synchronising settings between devices | Art. 6(1)(b) — performance of a contract |
| verifying the validity of purchased Premium access | Art. 6(1)(b) — performance of a contract |
| concluding and performing sales contracts, and warranty handling | Art. 6(1)(b) — performance of a contract |
| contacting people who represent institutional customers | Art. 6(1)(f) — our legitimate interest |
| answering enquiries sent through the contact form | Art. 6(1)(f) — our legitimate interest |
| analytics and product improvement | Art. 6(1)(f) — our legitimate interest |
| account security and abuse prevention | Art. 6(1)(f) — our legitimate interest |
| establishing, pursuing or defending legal claims | Art. 6(1)(f) — our legitimate interest |
| invoicing and tax obligations | Art. 6(1)(c) — legal obligation |
8. Who processes data on our behalf
We do not sell your data and we do not share it for third-party marketing. We rely on the following processors:
- Google Ireland Limited — account authentication, cloud settings backup and analytics,
- Vercel Inc. — hosting of aimora.pl,
- Resend — delivery of contact form messages.
Data may be transferred outside the European Economic Area, in particular to the United States. Such transfers rely on a European Commission adequacy decision or on Standard Contractual Clauses together with additional safeguards.
9. Data security
We apply technical and organisational measures appropriate to the risk, as required by Art. 32 GDPR. Access to account data is limited to those who need it, and traffic between the app and our services is encrypted.
For security reasons we do not disclose the details of those measures. Should a personal data breach occur that is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay.
10. How long we keep data
- Account data — until you delete your account. We complete deletion within 30 days at the latest; after that the data cannot be restored.
- Correspondence — for as long as needed to handle the matter and then until any related claims become time-barred.
- Accounting records — for the period required by tax law, counted from the end of the tax year they relate to.
- Analytics data — according to the retention period configured in Google Analytics for Firebase, in a form not linked to your account.
11. Your rights
You have the right to:
- access your data and receive a copy of it,
- have inaccurate data corrected,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent where processing is based on it — without affecting the lawfulness of processing carried out before the withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) or with your local supervisory authority.
We handle requests without undue delay and no later than one month from receipt. For complex matters that period may be extended, and we will let you know if it is.
Deleting your account
In the app open the side menu, choose Account, then Delete account and confirm with your password. You can also write to biuro@aimora.pl. Our account deletion page sets out exactly what is erased, how long it takes and what stays on your device.
12. Is providing data required
Providing data is voluntary. Without an e-mail address you cannot create an account, and therefore cannot use Premium features or the cloud settings backup. Every other feature of the app works without an account.
13. Age
Accounts may be created by people aged 16 or over. Younger users can use the app without an account or under an account created by a guardian.
14. Cookies and similar technologies
aimora.pl uses cookies and similar technologies necessary for the site to function, as well as the analytics tools described in section 6.
Necessary cookies are used on the basis of our legitimate interest. Storing or reading information on your device for purposes other than strictly necessary ones requires your consent, which you may withdraw at any time. You can also manage cookies in your browser; restricting them may affect how the site works.
15. Changes to this policy
We may update this policy when the app or the website changes. The current version is always available at this address and its effective date is shown at the top. We will notify you by e-mail about significant changes affecting accounts.