Privacy Policy for AmmoVault

PRIVACY POLICY

Last Updated: August 28, 2026

Nevaeh Solutions LLC (“Company,” “we,” “us,” or “our”) provides a mobile and/or web-based application and related online services known as “AmmoVault” (the “App” and “Platform”) that help firearm owners track firearms, ammunition, round count, maintenance, range sessions, purchases, and related information, and may provide artificial intelligence-assisted features, to the extent such features and functions are provided on the App from time to time (“Services”). This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you use the App, the Platform, or any of our Services, and the choices you have regarding that information.

By using the App or Platform, you agree to the practices described in this Privacy Policy.

1. Scope and Roles

This Privacy Policy applies to personal information we collect or process:

• When you use the App, Platform, or Services;

• When you input data about firearms, ammunition, purchases, maintenance, range sessions, or related usage;

• When you use receipt scanning, AmmoVault Intelligence (“AVI”), or other artificial intelligence-assisted features;

• When you create an account or profile, if account functionality is offered;

• When you contact us for support or otherwise interact with us online.

We act as the controller/business for personal information we collect directly from you for our own purposes, such as operating the App and Platform, providing support, securing our Services, and improving our Services.

2. Information We Collect and Process

We may collect or process the following categories of information when you use the App, Platform, or otherwise interact with us.

2.1 Account and Profile Information

The current version of the AmmoVault App does not require an AmmoVault account. If we offer account or profile functionality in the future, we may collect:

• Name or screen name;

• Email address and/or username;

• Password or authentication credentials;

• Country, state, or general region, if you choose to provide it;

• Communication preferences.

2.2 Firearm, Ammunition, Purchase, and Usage Information

At your direction, the App may allow you to store information such as:

• Firearm details (e.g., nickname, make, model, caliber, serial number, if you choose to enter it);

• Ammunition type and inventory;

• Ammunition purchase information, including information extracted from receipts;

• Round counts and range session logs;

• Maintenance history (e.g., cleaning dates, parts replaced, notes);

• Gear, attachments, accessories, and related maintenance or battery information;

• Optional notes you add (e.g., comments about performance, sights, accessories).

The current version of AmmoVault is designed as a local-first application. Your AmmoVault inventory and related records are generally stored locally on your device. Nevaeh Solutions does not currently maintain a cloud-based AmmoVault account or cloud database containing your AmmoVault inventory.

You choose what to enter into the App. You are responsible for ensuring that information you store does not violate any law or third-party rights.

2.3 Receipt Scanning and AI-Assisted Processing

AmmoVault may provide receipt scanning and other features powered by AmmoVault Intelligence (“AVI”) or third-party artificial intelligence services.

When you use the current receipt scanning feature, the receipt image is initially processed on your device using Apple technologies, including optical character recognition (“OCR”), to extract text from the receipt. The receipt image itself is not transmitted to OpenAI as part of the current receipt-processing workflow.

Extracted receipt text may be processed and sanitized on the device before information necessary to interpret the purchase is transmitted through our backend infrastructure, including Cloudflare, to OpenAI's application programming interface (“API”). The AI service processes that information to generate structured purchase information, which may include ammunition brand, caliber, bullet type, quantity, rounds per box, price, and other purchase-related information.

AI-generated results are returned to the App for review and may be saved to your locally stored AmmoVault inventory at your direction.

Information transmitted to our cloud and AI service providers may be processed or temporarily retained by those providers in accordance with their applicable service configurations, contractual terms, security requirements, and retention practices. Such processing or retention may include information necessary to provide the requested service and limited security, abuse-prevention, diagnostic, operational, or logging information.

Nevaeh Solutions does not use users' receipt information, AmmoVault inventory data, prompts, or AI-generated responses to train an AmmoVault artificial intelligence model.

OpenAI states that data submitted through its business/API products is not used to train its models by default. Information submitted through the OpenAI API may nevertheless be processed for purposes necessary to provide and secure the service, including inference, security, abuse prevention, and related operational purposes, subject to OpenAI's applicable terms, policies, and service configuration.

2.4 AmmoVault Intelligence and Future AI Features

AmmoVault may offer additional AVI or other artificial intelligence-assisted features that allow you to ask questions, analyze information, obtain recommendations, classify or organize information, or otherwise interact with information stored in or provided to AmmoVault.

When an AI-powered feature requires third-party processing, information reasonably necessary to provide the requested feature may be transmitted to our cloud infrastructure and/or AI service providers. Depending on the feature, this may include portions of information you provide, information stored within AmmoVault that is relevant to your request, your prompt or question, and information necessary to generate a response.

The specific information processed may vary depending on the feature you choose to use. We seek to minimize the amount of user information transmitted to third-party AI and infrastructure providers where reasonably practicable.

Artificial intelligence features may change as the Services evolve. We may use additional or replacement AI, cloud, infrastructure, or technology service providers in the future, subject to this Privacy Policy and applicable law.

2.5 Device, Technical, and Usage Information

When you use the App or Platform, we may automatically collect or process, directly or through service providers:

• Device identifiers (e.g., mobile device ID, operating system version, device type);

• IP address, approximate location inferred from IP, language, and time zone;

• App and Platform usage data (e.g., features used, screens viewed, taps/clicks, access times, error logs, performance data);

• Information collected via cookies, local storage, and similar technologies in our web interface, where applicable;

• Technical, diagnostic, security, and operational information generated when accessing cloud-supported features.

Third-Party Services: We may use third-party providers to provide specific functionality and support our operations. These currently may include:

• Apple, for device functionality and on-device technologies;

• Cloudflare, for backend infrastructure, routing, security, and related services;

• OpenAI, for artificial intelligence inference and processing used by certain AVI-powered features; and

• Mailchimp, for email communications and mailing-list signups.

These providers process information according to their applicable terms, privacy practices, and our service configurations.

Our App

Currently, the AmmoVault App does not use advertising SDKs or behavioral tracking technologies for cross-context behavioral advertising.

Future Updates

Should we introduce features in the future that utilize additional analytics, tracking, cloud services, or other technologies, we will update this Policy and provide notice as required by applicable law.

2.6 Communications and Support

We may process:

• Content of your messages when you contact us (e.g., email or in-app support);

• Support tickets, notes, and related metadata (such as date, time, and nature of the request).

2.7 Optional Integrations and Backups

If we offer optional features such as:

• Cloud backup or synchronization;

• Export to third-party storage (e.g., your cloud drive);

• Integration with other apps or services;

we may process the information necessary to provide those features (e.g., tokens, account IDs, or exported files), as described at the time you enable them.

3. How We Use Information

We use or process information for the following purposes:

• Provide and operate the App, Platform, and Services;

• Store and display your firearm, ammunition, purchase, maintenance, and range log data on your device;

• Process receipt scans and extract purchase information;

• Provide AVI and other artificial intelligence-assisted features you choose to use;

• Generate structured information, responses, recommendations, or other outputs requested through AI-assisted features;

• Create and manage your account, if account functionality is offered;

• Provide reminders, notifications, and other in-app features you enable;

• Improve and secure the App and Platform;

• Monitor performance and fix bugs;

• Analyze usage to improve features, usability, and reliability;

• Test and develop new functionalities;

• Communicate with you;

• Respond to your questions and support requests;

• Send service-related messages;

• Where permitted by law, send you information about new features, updates, or related offerings;

• Enforce our terms and policies;

• Protect our rights, privacy, safety, or property, and that of our users or others;

• Detect, prevent, and respond to fraud, misuse, abuse, or security incidents;

• Comply with applicable laws and legal obligations.

We do not use your data to create a marketing profile to sell to third parties, and we do not sell personal information as “sale” is defined under California law.

4. How We Share Information

We may disclose personal information in the following situations:

With service providers

We use third-party vendors to provide infrastructure, artificial intelligence processing, communications, security, and other services supporting AmmoVault.

For example, information necessary to provide an AVI-powered feature may be transmitted through Cloudflare infrastructure to OpenAI for AI inference and returned to AmmoVault. These providers process information on our behalf or as otherwise described in their applicable terms and privacy practices.

We seek to provide service providers only with information reasonably necessary for the applicable service.

With your consent or at your direction

If you use a feature that exports, shares, analyzes, or otherwise sends information to a third-party service, we may disclose information as necessary to fulfill your request.

With affiliates

We may share information with our affiliates for purposes consistent with this Privacy Policy.

Business transfers

In connection with a merger, acquisition, reorganization, sale of assets, financing, or similar transaction, personal information may be transferred to a successor or related entity, subject to applicable law and any required notices.

Legal, compliance, and safety

We may disclose information:

• To comply with laws, regulations, legal processes, or reasonable law-enforcement requests;

• To enforce our terms and policies; or

• To protect our rights, privacy, safety, or property, and/or that of our users or others.

We do not sell personal information and do not share personal information with third parties for cross-context behavioral advertising under California law.

5. Legal Bases (Where Applicable)

Where certain laws apply, we may rely on:

• Contract: To provide the App, Platform, and Services you request, including receipt processing and AI-assisted functionality;

• Legitimate interests: To operate, improve, and secure our App and Platform, prevent abuse, and perform appropriate internal analysis, where those interests are not overridden by your rights;

• Consent: For certain optional activities or processing where consent is required, which you may withdraw as permitted by applicable law;

• Legal obligations: To comply with applicable laws, regulations, and legal processes.

6. Data Retention

Information stored locally in AmmoVault generally remains on your device until you modify or delete it, delete the App, or otherwise remove the applicable data.

Nevaeh Solutions does not currently maintain a cloud-based database containing users' AmmoVault inventory.

Information processed through third-party infrastructure or artificial intelligence services may be retained temporarily by those providers in accordance with applicable service configurations, contractual terms, security requirements, and retention policies, including for security, abuse prevention, diagnostics, or other operational purposes.

Other personal information we collect directly, such as communications with us or mailing-list information, may be retained for as long as reasonably necessary to:

• Fulfill the purposes described in this Privacy Policy;

• Comply with legal, accounting, and reporting obligations;

• Resolve disputes and enforce our agreements; and

• Protect the security and integrity of our Services.

If account functionality is offered in the future and you delete your account, we will take steps to delete or de-identify applicable personal information within a reasonable period, unless we are required or permitted by law to retain it longer.

7. Your Privacy Rights

Depending on where you live, you may have certain rights regarding personal information we hold or process about you, subject to applicable law and exceptions. These may include the right to:

• Access or know the personal information we hold about you;

• Correct inaccurate personal information;

• Delete certain personal information;

• Receive a copy or portable version of certain personal information;

• Opt out of certain uses, such as direct marketing;

• Not be discriminated against for exercising your privacy rights.

Information stored solely on your device generally remains under your control and can be modified or deleted using applicable App functionality or by removing the App and its locally stored data.

You can submit a request or question regarding information held by Nevaeh Solutions by contacting us as described in the Contact Us section. We may need to verify your identity before responding.

7A. Rights of Individuals in the EEA (GDPR) – If Applicable

If you are in the European Economic Area (EEA), the General Data Protection Regulation (“GDPR”) may provide additional rights, including the rights to:

• Access your personal information;

• Rectify inaccurate or incomplete personal information;

• Erase your personal information in certain circumstances;

• Restrict processing in certain circumstances;

• Object to certain processing, including direct marketing;

• Data portability, in certain situations;

• Lodge a complaint with your local data protection authority.

If you wish to exercise these rights, contact us as described in Contact Us. We may need to verify your identity.

8. California Privacy Notice (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), may provide additional rights.

8.1 Categories of Personal Information Collected or Processed

In the last 12 months, depending on the Services used, we may have collected or processed:

• Identifiers (e.g., email address, IP address, or device identifiers);

• Customer records or information you choose to provide;

• Internet or electronic network activity (e.g., usage data or logs);

• Approximate geolocation derived from IP;

• Firearm, ammunition, purchase, receipt, maintenance, range-session, and related information you choose to provide;

• Information submitted to or generated through AVI or other AI-assisted features;

• Inferences generated as necessary to provide requested features or improve the Services.

Some information users choose to enter into AmmoVault could be considered sensitive or private depending on its content and applicable law. We do not use sensitive personal information to infer characteristics about users for advertising or unrelated profiling purposes.

8.2 Selling or Sharing Personal Information

We do not sell personal information and do not share personal information with third parties for cross-context behavioral advertising as defined by California law. If this changes, we will update this Privacy Policy and provide appropriate opt-out mechanisms.

8.3 California Rights

Subject to applicable law and exceptions, California residents may have the right to:

• Request to know the categories and specific pieces of personal information we have collected about them, the categories of sources, purposes of collection, and categories of third parties to whom we disclose it;

• Request deletion of certain personal information;

• Request correction of inaccurate personal information;

• Request to limit use and disclosure of sensitive personal information to the extent applicable;

• Be free from discrimination for exercising these rights.

You or your authorized agent, where permitted, can exercise these rights by contacting us as described in Contact Us.

9. Other State Privacy Laws

Residents of some U.S. states, including Colorado, Connecticut, Virginia, Utah, Texas, and others, may have similar rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing, as defined in applicable law.

We will honor applicable rights requests in accordance with those laws. Instructions to exercise those rights are provided in the Contact Us section. Some states may also provide a right to appeal our decision if we decline to act on a request.

10. Children's Privacy

Our App and Platform are intended for adults and are not directed to individuals under the age of 16. We do not knowingly collect or solicit personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16 without appropriate authorization, we will take reasonable and prompt steps to delete that information in accordance with applicable law.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. These may include:

• Encryption in transit and/or at rest where appropriate;

• Access controls and authentication;

• Logging and monitoring;

• Vendor due diligence and periodic reviews.

The App may also offer optional device authentication, such as Face ID. Authentication using Face ID or your device passcode is handled by Apple's device authentication technologies. Nevaeh Solutions does not receive or store your Face ID biometric information or device passcode.

However, no method of transmission or storage is completely secure. You are responsible for maintaining the security of your device and any applicable credentials.

12. International Transfers (Including EU/EEA and UK – If Applicable)

Our systems and some of our service providers, including providers supporting cloud infrastructure and artificial intelligence features, may be located in the United States and other countries. If you are in the EEA or UK, your personal data may therefore be transferred outside the EEA/UK.

Where required, we will use appropriate safeguards in accordance with applicable law, such as Standard Contractual Clauses, applicable UK addenda or International Data Transfer Agreements, or other legally recognized transfer mechanisms.

You can contact us for more information about applicable safeguards.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, service providers, legal requirements, or Services, including changes to artificial intelligence functionality.

When we do, we will update the “Last Updated” date. If we make material changes, we will provide additional notice as required by applicable law.

Your continued use of the App or Platform after the effective date of any changes means you accept the updated Privacy Policy to the extent permitted by applicable law.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Nevaeh Solutions LLC
Attn: Privacy Office
116 Avenue I
Redondo Beach, CA 90277
United States
Email: privacy@ammovaultapp.com