Effective March 10, 2026
Arsenal Tracker is built on a simple principle: your data is yours. We don't collect it, we don't sell it, and we don't want it. This policy explains exactly what happens with your information when you use the app.
All data you enter into Arsenal Tracker — firearms, accessories, ammunition, range trips, maintenance logs, DOPE cards, documents, and photos — is stored on your device and encrypted using AES-256 via Apple CryptoKit before any iCloud synchronization occurs. Encryption keys are stored in your device's Apple Keychain and never leave your device.
If you enable iCloud Sync, encrypted data is stored in your private iCloud container managed by Apple. Arsenal Tracker has no server, no database, and no ability to read your synced data. Apple cannot read it either — they store ciphertext only.
Firearm serial numbers are always processed and stored on-device. Serial number OCR scanning uses Apple's Vision framework entirely on your device. Serial numbers are never transmitted to any server, API, or third party under any circumstances.
Arsenal Tracker includes an optional AI-powered firearm identification feature. When you choose to use this feature:
If you never use the AI identification feature, no photos are ever sent anywhere.
The ammunition barcode scanning feature sends only the UPC number (a public product identifier) to upcitemdb.com to retrieve product information. No user identity, device identifier, Apple ID, or ammunition details are transmitted. The request is anonymous — no API key or account is used. Product data from the lookup is held in memory only during parsing and is not stored separately from your ammunition records.
There are none. Arsenal Tracker contains no analytics SDKs, no telemetry, no crash reporting services, no advertising frameworks, and no tracking pixels. We do not use the Advertising Identifier (IDFA). We do not fingerprint your device.
Arsenal Tracker interacts with the following third-party services only when you explicitly trigger the relevant feature:
No data is shared with any other third party. There are no advertising partners, no data brokers, and no social media integrations.
You can export all of your data at any time via Settings → Backup (JSON, CSV, PDF, or encrypted ZIP). You can delete all data from the device and iCloud via Settings → Clear All Data. You can disable iCloud Sync at any time to keep data local-only.
Arsenal Tracker is not directed at children under 17. We do not knowingly collect any personal information from children.
If we make material changes to this policy, we will update this page with a new effective date. Since we have no way to contact you (we don't have your email), checking this page is the way to stay informed.
Questions about this privacy policy? Reach out at support@arsenaltrackerapp.com.