Privacy Policy for AmmoVault

Effective Date: Jun 20, 2026

Last Updated: Jun 21, 2026

Nevaeh Solutions LLC (“Company,” “we,” “us,” or “our”) provides a mobile and/or web‑based application and related online services known as “AmmoVault” (the “App” and “Platform”) that help firearm owners track firearms, ammunition, round count, maintenance, range sessions, and related information to the extent such features and functions are provided on the App from time to time (“Services”). This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you use the App, the Platform, or any of our Services, and the choices you have regarding that information.

By using the App or Platform, you agree to the practices described in this Privacy Policy.

1. Scope and Roles

This Privacy Policy applies to personal information we collect:

• When you create an account or profile in the App or on the Platform

• When you input data about firearms, ammunition, maintenance, range sessions, or related usage

• When you contact us for support or otherwise interact with us online

We act as the controller/business for the personal information we collect directly from you for our own purposes (for example, operating the App and Platform, providing support, and improving our Services).

2. Information We Collect

We may collect the following categories of information when you use the App, Platform, or otherwise interact with us.

2.1 Account and Profile Information

• Name or screen name

• Email address and/or username

• Password or authentication credentials

• Country, state, or general region (if you choose to provide it)

• Communication preferences

2.2 Firearm, Ammunition, and Usage Information

At your direction, the App may allow you to store information such as:

• Firearm details (e.g., nickname, make, model, caliber, serial number – if you choose to enter it)

• Ammunition type and inventory

• Round counts and range session logs

• Maintenance history (e.g., cleaning dates, parts replaced, notes)

• Optional notes you add (e.g., comments about performance, sights, accessories)

You choose what to enter into the App. You are responsible for ensuring that information you store does not violate any law or third‑party rights.

2.3 Device, Technical, and Usage Information

When you use the App or Platform, we may automatically collect:

• Device identifiers (e.g., mobile device ID, operating system version, device type)

• IP address, approximate location inferred from IP, language, and time zone

• App and Platform usage data (e.g., features used, screens viewed, taps/clicks, access times, error logs, performance data)

• Information collected via cookies, local storage, and similar technologies in our web interface, where applicable

Third-Party Services: We use third-party providers, such as Mailchimp, for email communication and mailing list signups. These providers may use their own cookies or tracking pixels to manage the delivery and effectiveness of our communications. Please refer to the privacy policies of these specific third-party providers for more information on how they handle data.

Our App

Currently, the AmmoVault App does not use cookies, advertising SDKs, or behavioral tracking technologies.

Future Updates

Should we introduce features in the future that utilize cookies, analytics, or tracking (e.g., diagnostic tools, performance monitoring, or cloud services), we will update this policy and provide notice in accordance with applicable law.

2.4 Communications and Support

• Content of your messages when you contact us (e.g., email, in‑app support)

• Support tickets, notes, and related metadata (such as date, time, and nature of the request)

2.5 Optional Integrations and Backups

If we offer optional features such as:

• Cloud backup/sync

• Export to third‑party storage (e.g., your cloud drive)

• Integration with other apps or services

we may process the information necessary to provide those features (e.g., tokens, account IDs, or exported files), as described at the time you enable them.

3. How We Use Information

We use the information we collect for the following purposes:

• Provide and operate the App, Platform, and Services

• Create and manage your account

• Store and display your firearm, ammunition, maintenance, and range log data

• Provide reminders, notifications, and other in‑app features you enable

• Improve and secure the App and Platform

• Monitor performance and fix bugs

• Analyze usage to improve features, usability, and reliability

• Test and develop new functionalities

• Communicate with you

• Respond to your questions and support requests

• Send service‑related messages (e.g., changes to terms, privacy policy, or security notices)

• Where permitted by law, send you information about new features, updates, or related offerings (you may opt out of marketing communications at any time)

• Compliance, safety, and protection

• Enforce our terms and policies

• Protect our rights, privacy, safety, or property, and that of our users or others

• Detect, prevent, and respond to fraud, misuse, or security incidents

• Comply with applicable laws and legal obligations

We do not use your data to create a marketing profile to sell to third parties, and we do not sell personal information as “sale” is defined under California law.

4. How We Share Information

We may share personal information in the following situations:

With service providers

We use trusted third‑party vendors to host our App and Platform, store data, send emails, provide analytics, and support our operations.

These providers are contractually required to use personal information only as necessary to provide services to us and to protect that information.

With your consent or at your direction

If you use a feature that exports or shares data (for example, exporting a PDF or spreadsheet, or connecting to a third‑party storage service), we share the information as needed to fulfill your request.

With affiliates

We may share information with our affiliates for purposes consistent with this Privacy Policy (e.g., shared infrastructure, support, or internal reporting).

Business transfers

In connection with a merger, acquisition, reorganization, sale of assets, financing, or similar transaction, personal information may be transferred to a successor or related entity, subject to applicable law and any required notices.

Legal, compliance, and safety

• To comply with laws, regulations, legal processes, or reasonable law‑enforcement requests.

• To enforce our terms and policies or protect our rights, privacy, safety, or property, and/or that of our users or others.

We do not sell personal information and do not share personal information with third parties for cross‑context behavioral advertising under California law.

5. Legal Bases (Where Applicable)

Where certain laws apply (for example, if we process personal information of individuals in the EEA/UK or under state privacy laws), we may rely on:

• Contract: To provide the App, Platform, and Services under our agreement with you (e.g., to create and manage your account and store your logs).

• Legitimate interests: To operate, improve, and secure our App and Platform; prevent abuse; and perform internal analytics, where those interests are not overridden by your rights.

• Consent: For certain optional activities (e.g., some marketing communications or cookies where required), which you may withdraw at any time.

• Legal obligations: To comply with applicable laws, regulations, and legal processes.

6. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide and maintain your account and our Services

• Fulfill the purposes described in this Privacy Policy

• Comply with legal, accounting, and reporting obligations

• Resolve disputes and enforce our agreements

If you delete your account, we will take steps to delete or de‑identify your personal information within a reasonable period, unless we are required or permitted by law to retain it longer (for example, for legal or security reasons).

7. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information, subject to applicable law and exceptions. These may include the right to:

• Access / know the personal information we hold about you

• Correct inaccurate personal information

• Delete certain personal information

• Receive a copy / portability of certain personal information in a usable format

• Opt out of certain uses, such as direct marketing

• Not be discriminated against for exercising your privacy rights

You can submit a request or question by contacting us as described in the Contact Us section. We may need to verify your identity before responding.

7A. Rights of Individuals in the EEA (GDPR) – If Applicable

If you are in the European Economic Area (EEA), the General Data Protection Regulation (“GDPR”) may provide additional rights, including the rights to:

• Access your personal information

• Rectify inaccurate or incomplete personal information

• Erase your personal information in certain circumstances

• Restrict processing in certain circumstances

• Object to certain processing, including direct marketing

• Data portability, in certain situations

• Lodge a complaint with your local data protection authority

If you wish to exercise these rights, contact us as described in Contact Us. We may need to verify your identity.

8. California Privacy Notice (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), provides additional rights. The CCPA (CPRA) is a California privacy law that protects consumers’ personal information and gives them rights such as the right to know, delete, correct, and opt out of certain uses of their personal information.

8.1 Categories of Personal Information Collected

In the last 12 months, we may have collected:

• Identifiers (e.g., name, email address, IP address, device identifiers)

• Customer records (e.g., account and profile information)

• Internet or electronic network activity (e.g., usage data, logs)

• Approximate geolocation (from IP)

• Inferences drawn from the above for analytics and service improvement

We do not knowingly use or disclose “sensitive personal information” for purposes other than those permitted by California law and do not use it to infer characteristics about you.

8.2 Selling or Sharing Personal Information

We do not sell personal information and do not share personal information with third parties for cross‑context behavioral advertising as defined by California law. If this changes, we will update this Privacy Policy and provide appropriate opt‑out mechanisms.

8.3 California Rights

Subject to exceptions, California residents may have the right to:

• Request to know the categories and specific pieces of personal information we have collected about them, the categories of sources, the purposes of collection, and the categories of third parties to whom we disclose it

• Request deletion of certain personal information

• Request correction of inaccurate personal information

• Request to limit use and disclosure of sensitive personal information (to the extent applicable)

• Be free from discrimination for exercising these rights

You (or your authorized agent, where permitted) can exercise these rights by contacting us as described in Contact Us. If you use an authorized agent, we may require proof of authorization and may ask you to verify your identity directly. We will respond within the time frames required by law (generally 45 days, with possible extension).

9. Other State Privacy Laws (e.g., Colorado, Connecticut, Virginia, Utah, Texas)

Residents of some U.S. states, including Colorado, Connecticut, Virginia, Utah, Texas, and others, may have similar rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing (such as targeted advertising or certain profiling), as defined in applicable law.

We will honor applicable rights requests in accordance with those laws. Instructions to exercise those rights are provided in the Contact Us section. Some states may also provide a right to appeal our decision if we decline to act on a request; if applicable, we will explain how to appeal in our response.

10. Children’s Privacy

Our App and Platform are intended for adults and are not directed to individuals under the age of 16. We do not knowingly collect or solicit personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16 without verifiable parental consent, we will take reasonable and prompt steps to delete that information from our records in accordance with applicable laws.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. These may include:

• Encryption in transit and/or at rest where appropriate

• Access controls and authentication

• Logging and monitoring

• Vendor due diligence and periodic reviews

However, no method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

12. International Transfers (Including EU/EEA and UK – If Applicable)

Our systems and some of our service providers may be located in the United States and other countries. If you are in the European Economic Area (“EEA”) or the United Kingdom (“UK”), your personal data may be transferred outside the EEA/UK.

Where we transfer personal data from the EEA or UK to a country that does not provide an adequate level of protection, we will use appropriate safeguards in accordance with applicable law, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission and any UK addenda or International Data Transfer Agreements (IDTAs), or

• Other safeguards recognized under applicable data protection laws.

In some cases, we may rely on specific legal grounds for transfers, such as when the transfer is necessary for the performance of a contract with you or with your explicit consent.

You can contact us for more information about the safeguards we use for international transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other reasons. When we do, we will update the “Last Updated” date at the top. If we make material changes, we will provide additional notice as required by law (for example, by notifying you in the App or via email).

Your continued use of the App or Platform after the effective date of any changes means you accept the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Nevaeh Solutions LLC

Attn: Privacy Office

116 Avenue I

Redondo Beach, CA 90277

United States

Email: privacy@ammovaultapp.com