# Caliber Privacy Policy

> **DRAFT. NOT IN EFFECT.** This is a working draft (version 2026-10-30-draft). Text in [BRACKETS] is still to be filled in. Passages that describe features Caliber hasn't built yet are left out until those features exist.

**Effective date:** [EFFECTIVE DATE] · **Version:** 2026-10-30-draft · **Earlier versions:** [PRIOR VERSIONS URL]

## Who we are

[WHO WE ARE — use one version:
- While one company runs both: "Caliber and Caliber Classes are operated by [OPERATOR], a Florida limited liability company ("we", "us"), [TAMPA MAILING ADDRESS]."
- Once they differ: "The Caliber app, including Caliber Pro, is published by [APP PUBLISHER] (Part A). Caliber Classes and the range listing pages on our website are operated by [OPERATOR], a Florida limited liability company (Part B). In each part, "we" and "us" mean the company named for that part. Our mailing address is [TAMPA MAILING ADDRESS]."]

For privacy questions, requests or complaints, email **support@norbrookmedia.com** or write to us at that address.

This policy explains:
- what we collect;
- why we collect it;
- who we share it with;
- how long we keep it;
- the choices you have.

## Summary

- **Caliber has two parts.**
  - **The core app (Part A):** lessons, your armory, range sessions, maintenance, Find a Range and My Ranges. It keeps what you enter on your device and in your own private iCloud. We can't see it, and the core features use no Caliber server.
  - **Caliber Classes (Part B):** the optional booking tool for requesting in-person lessons with independent instructors. It runs on our servers and collects the information described in Part B. You don't need a Classes account to use anything else in Caliber.
- **No ads, and no sale of your information.** We don't sell personal information, and we don't use it or share it for targeted advertising.
- **No tracking across apps or websites.** Caliber has no analytics of its own and no third-party advertising, analytics, tracking or payment code (see B15).
- **No firearm records.** Information about firearms you own stays on your device and in your private iCloud. Caliber Classes doesn't ask for it and has no place to enter it, and we don't keep any list or record of firearms or firearm owners.

---

## PART A — THE CORE CALIBER APP {#core}

### A1. What stays on your device and in your private iCloud

Everything you enter in the core app stays on your device. That includes:
- your firearms, including serial numbers, purchase details, notes, photos and receipt photos;
- ammunition and gear;
- range sessions, including target photos, scores and the range you logged them at;
- maintenance logs;
- lesson progress, quiz and Daily Review history, and unit mastery;
- XP, streaks and badges;
- My Ranges: saved ranges, your home range and your private range notes;
- your profile: name, skill level and goals.

It's stored with Apple's on-device database and synced only to your own private iCloud (Apple CloudKit). That way it's on your other devices and comes back if you reinstall. Apple encrypts it in transit and at rest. It sits in your personal iCloud account, and we can't access it. Nothing is posted publicly or shared with anyone.

These features don't send your entries to us, and we hold no copy of them.

### A2. Sign in with Apple in your profile (optional)

If you link Sign in with Apple in your profile, Caliber stores your Apple user identifier, plus any name and email Apple shares. They're stored on your device and in your private iCloud only, and never sent to us. Signing out removes the Apple identifier and email, and keeps your name and data.

This is separate from signing in to Caliber Classes, which is described in Part B. Sign in with Apple itself is provided by Apple, under Apple's privacy policy.

### A3. Camera and photos

Caliber asks for camera and photo access only so you can attach pictures of your firearms, gear and receipts, and photograph paper targets. Target scoring happens on your device. Your photos are stored on your device and synced only to your private iCloud.

### A4. Location (Find a Range and My Ranges)

- **Use my location.** If you tap Use my location, Caliber asks for your location while you're using the app. It uses it only on your device, to sort nearby shooting ranges. Your location is never sent to us or stored on any server.
- **Typed places.** If you type a ZIP code or city instead, Apple's geocoding service turns it into map coordinates, under Apple's privacy policy.
- **Your last search location.** Caliber remembers it on this device only, so Find a Range opens where you left off. Reset All Data and Delete Account clear it.
- **My Ranges.** Saved ranges, your home range and your range notes sync only to your private iCloud.

You can turn location access off at any time in iOS Settings.

### A5. Reminders

Reminders, such as maintenance, streak and review reminders, are local notifications. They're scheduled on your device, and no server is involved. You can turn them off in Caliber or in iOS Settings. Caliber Classes alerts are different and are covered in B14.

### A6. Reference downloads

Caliber downloads reference content that we publish on norbrookmedia.com:
- the firearm catalog;
- state-law summaries;
- news;
- the public shooting-range directory;
- range hours.

These are one-way downloads. Caliber sends none of your entries or account details with them. As with any web request, our hosting provider (Cloudflare) sees your IP address and basic device and app details, and may keep standard request logs under its own policies. Those logs aren't linked to your Caliber data.

### A7. Caliber Pro

Caliber Pro is sold and billed by Apple. We don't receive your payment details. Caliber checks your subscription status with Apple on your device.

If you have a yearly plan with auto-renew on, Caliber reads your renewal date from Apple on your device. It uses that date to remind you, about 45 days and again about 35 days before the plan renews.

### A8. Third-party code

The app contains no third-party advertising, analytics, tracking or payment code.

### A9. Backups you export

You can export a backup file of your data. It goes wherever you send it, and from then on it's governed by wherever you keep it, so treat it like a private document.

| A backup **includes** | A backup **never includes** |
|---|---|
| your entries and notes | photos |
| purchase dates and prices | receipt photos |
| sessions, with the range you logged them at | firearm serial numbers |
| lesson progress, mastery and Daily Review history | your name |
| My Ranges, with their locations and notes | your Apple user ID |
| your skill level, goals and progress | your email |

Restoring a backup replaces your current Caliber data with the backup's contents.

### A10. Deleting your data

- **One item at a time.** Delete any firearm, ammunition, gear item, session, log entry or saved range in the app. The deletion syncs to your private iCloud.
- **Reset All Data** (Profile). This erases:
  - your firearms, ammunition, gear, range sessions and maintenance logs;
  - your lesson progress, unit mastery and Daily Review history;
  - My Ranges: saved ranges, home range and range notes;
  - the photos, receipt photos and serial numbers stored with them.

  It also:
  - resets your XP, streaks and badges;
  - clears the Find a Range location saved on this device;
  - clears any backup files the app left in its temporary folder

  It keeps your profile (name, skill level and goals) and app settings such as reminder times. The deletion syncs to your private iCloud and to your other devices signed in to it. It can't be undone.
- **Delete Account** (Profile). This appears when you've linked Sign in with Apple. It does everything Reset All Data does, and also erases:
  - your name, skill level and goals;
  - your Training Stamina history;
  - the linked Apple user identifier and email.

  It doesn't delete a Caliber Classes account (see B17). It doesn't cancel Caliber Pro; manage that in Manage Subscription.
- **Deleting the app** removes Caliber's data from that device. A copy stays in your private iCloud until you delete it there, so it can come back if you reinstall.
- **Your iCloud copy.** You can remove Caliber's data in iOS Settings › [your name] › iCloud › Manage Storage, if Caliber is listed there.
- **Backup files** stay wherever you saved them until you delete them.

### A11. How long core-app data is kept

Your core-app data stays on your device and in your private iCloud until you delete it. We have no copy to keep or delete.

### A12. Requests from governments and law enforcement (core app)

We don't hold your core-app data, including your firearm records, so we have none to give anyone. Requests for data in your iCloud account must go to Apple.

---

## PART B — CALIBER CLASSES {#classes}

### B1. What Caliber Classes is

Caliber Classes is an optional marketplace inside the Caliber app. Adults use it to find, book and pay for in-person firearm-safety lessons and classes taught by independent instructors. Instructors use it to list and run their lessons.

It's for adults 18 and older. It's available for lessons in the states listed at [OPEN STATES URL]. We're opening state by state, starting with Florida.

Caliber Classes runs on our servers, which are hosted by Cloudflare, so it collects the information below. Part B also covers range listing claims on our website (B25) and range details you suggest in the app (B26).

### B2. What we collect

| What | Details | Where it comes from |
|---|---|---|
| **Account** | Your Sign in with Apple identifier for Caliber Classes; the name and email Apple shares with us (Apple may give us a private-relay address); when you joined; a Sign in with Apple token used only to revoke Apple sign-in when you delete your account | Classes sign-in |
| **Age check** | How we checked that you're 18 or older: Apple's age-range check, or your own confirmation. We don't receive or store your birth date or age range | Classes sign-in and lesson requests |
| **Your acceptances** | Which version of the Terms of Service and this policy you accepted, including your consent to message checks; when; a fingerprint of the exact text; and the IP address and app details your request came from. For instructors, the same for the Instructor Agreement, the yearly eligibility confirmation and each listing's instruction-only confirmation | Sign-in, re-acceptance screens, Instructor Studio |
| **Instructor profile** (instructors only) | Name, headline, bio, the certifications you list, your avatar and portfolio photos, your teaching city or area and state, an approximate teaching location (rounded, see B9), your time zone, weekly availability, price tier and cancellation policy | Instructor Studio |
| **Listings** (instructors only) | Your lessons and classes: title, description, type, price, length, capacity, place and state | Instructor Studio |
| **How students pay you** (instructors only) | The Cash App $cashtag, Venmo username and Zelle email or phone number you choose to enter; whether you take payment at the lesson; when you last changed them; and when you confirmed they're payment details you use for your business (see B7) | Instructor Studio |
| **Instructor subscription** (instructors only) | For your Caliber Instructor subscription: Apple's transaction ID, the product, its status, whether it's in the free trial or will renew, its expiry date and Apple's environment; and a random account token we create so Apple's record of the purchase names your Caliber account. We don't receive your payment details | Apple's App Store |
| **Requests and lessons** | What you requested or taught; when and where; the price the instructor listed; its status (pending, confirmed, declined, expired, cancelled or completed); the cancellation policy shown when the request was sent; cancellations; problem reports; and who confirmed completion. Caliber doesn't receive lesson payments, so it has no record of whether or how you paid | Requests, confirmations, Instructor Studio |
| **Booking disclaimer** | For each request: that you agreed to the booking disclaimer; its version and a fingerprint of its exact text; the Terms version in force; how your age was checked; and when. No typed name, IP address or device details | Lesson requests |
| **Messages** | Messages you send and receive (sender, conversation, text, time, read status); which keyword rules a message matched; and blocks you set | Messages |
| **Reports and reviews** | Reports you file and their outcome; automatic message flags; star ratings and any review text you write | Report, problem report, review |
| **Notifications** (if you allow them) | Your device's push token (an identifier Apple issues so alerts reach that device), the type of build, and when the token was registered | Caliber Classes notifications |
| **Searches** | The map coordinates of the ZIP code or city you type, and any search text, sent with each search. We use them to answer the search and don't store them | Find an Instructor |
| **Technical records** | A count of new conversations you start each day (to limit abuse); our own server log lines about errors and events, with account and booking IDs, never search terms; and the request details Cloudflare processes to deliver the service (IP address, the requested address, and headers such as the User-Agent) | Every request |
| **Range listing claims** (website only, if you claim a range's listing) | Your name, email, phone number and role at the range (owner, manager or staff); which range you claimed; when; whether the claim was confirmed; your private edit link's code, stored only in a one-way scrambled (hashed) form; and the facts you enter for the range (hours, prices, amenities and notes). See B25 | The claim and edit pages on our website |
| **Range details you suggest** (in the app, if you send one) | The details you enter for a range (hours, longest distance, indoor or outdoor, whether it's free or its day-pass price, rentals and lessons), how you know them, an optional note, which range, and when. No account, name, email or device details. See B26 | The "Suggest details" form on a range's page in the app |
| **Support** | What you send us by email | You |

**What we don't collect in Caliber Classes:**
- card, bank or payment-app account details. Caliber doesn't take payments for lessons;
- credential or license documents. Caliber doesn't check instructors;
- your device's GPS location;
- contacts;
- health information fields;
- government ID from students;
- information about firearms you own. We don't ask for it, Classes has no place to enter it, and we don't keep any list or record of firearms or firearm owners. Please don't put firearm details, such as serial numbers, in messages, listings, reviews, reports or your profile.

### B3. How we use it

We use this information to:
- run your account, lesson requests, confirmations, rosters and reviews;
- show a student the payment details their instructor lists, once the student has sent a request;
- decide which instructors are listed: they've accepted the agreement and have an active Caliber Instructor subscription;
- keep evidence that you agreed to the booking disclaimer for each request, and of the terms you accepted;
- keep messaging safe: keyword checks, reports, blocks and limits;
- send the alerts and emails you need: request, confirmation and cancellation alerts, safety notices, and notices about changes to our terms or this policy;
- give support, prevent fraud and abuse, and meet legal duties.

We don't use your information to send you advertising. If we ever want to use information we already hold for a materially different purpose, we'll ask for your consent first.

### B4. What we don't do

- **We don't sell personal information**, including sensitive information such as precise location, and we don't use it or share it for targeted advertising. If that ever changes, we'll ask for your consent first.
- **We don't use artificial intelligence on your information.**
  - Message checks are fixed keyword rules.
  - A person (our founder) decides what happens with any report, flag or suspension.
- **We don't keep firearm records.** We don't ask for firearm information. Our systems have no fields for firearm makes, models, serial numbers, inventories or ownership, and we don't keep any list or record of firearms or firearm owners. Please don't type firearm details in messages or listings.

### B5. Who we share it with

| Who | What | Why |
|---|---|---|
| **Cloudflare** | Everything stored on our servers, and the details of each request | Hosting, our database, file storage, email delivery (including the emails we send to people who claim a range listing, and alerts to our founder) and admin-access protection |
| **Apple** | Your Sign in with Apple identifier (including to revoke sign-in when you delete your account); your push token and the alert text; for instructors, the subscription's transaction ID when we ask Apple for its status | Sign-in, notifications and the instructor subscription |
| **Your instructor** (if you're a student) | Your name; the email on your account, in the class roster export; your requests and lessons with them; your messages with them; and when you agreed to the booking disclaimer for each request with them | To run your lesson, and as evidence |
| **Your students** (if you're an instructor) | Your public profile and listings; the payment details you list, shown to a student once they've requested a lesson with you; your messages with them | To request, pay for and take lessons |
| **Other Caliber users** (if you're a student who leaves a review) | Your review text, your first name and last initial, the lesson or class you took, and your star rating (see B13) | So people can choose an instructor |
| **The public** | Instructors' public profiles and listings (see B13); the facts a verified range claimant enters for a range (see B25); range details people suggest, once we've checked and approved them (see B26) | So students can find instructors, and people can find accurate range details |
| **Insurers and legal advisers** | Records about a lesson that's the subject of a claim, such as the booking, the booking-disclaimer record and messages | To handle a claim |
| **Government and law enforcement** | Only what valid legal process requires, or in an emergency (see B23) | Legal duties and safety |
| **A new owner** | Our records, if Caliber is sold or merged, or if it moves to an affiliated company (for example, a Caliber LLC owned by the same person) | Business transfers. The new owner must keep this policy's promises for information collected under it |

Instructors are independent businesses. Our Instructor Agreement lets them use your information only to deliver and follow up on your lessons and to meet legal record-keeping requirements. It bars them from selling it or adding you to marketing lists without your consent.

### B6. How the companies we use protect your information

Cloudflare (hosting, database, file storage, email) handles data under its Customer Data Processing Addendum.

Apple provides Sign in with Apple, push notifications and the instructor subscription under its own terms and privacy policy.

### B7. Payments

- **Caliber doesn't take lesson payments.** Students pay instructors directly, using the payment app or bank the instructor lists, or at the lesson. That service's own terms and privacy policy apply. We don't receive card numbers, bank details or payment-app account details, only the handle an instructor chooses to show.
- **Who sees an instructor's payment details.** Only a student who has sent that instructor a request, while the request is pending or the lesson is confirmed. They're never on a public profile or web page.
- **Changes.** If an instructor changes their payment details after a student sent a request, the app tells that student.
- **The instructor subscription.** It's sold and billed by Apple. Apple tells us its status through Apple's App Store Server API, and we use that only to decide whether an instructor is listed.

### B8. Tax reporting

Caliber doesn't receive or pay out lesson money, so it doesn't file tax forms about instructors' lesson earnings. Instructors are responsible for their own taxes. A payment app may report payments under its own rules.

### B9. Location

- **Searches.** A place you type is sent with each search, and with each instructor profile you open from those results, so we can show nearby instructors and classes. It isn't stored.
- **Instructor and class locations.** These are rounded to about 0.7 mile, and distances are shown in whole miles. Instructors: enter the city, ZIP code or range where you teach, not your home address.
- **Your device.** Your device's GPS location is never sent to Caliber.

### B10. Messages, automatic keyword checks and safety review

Messages between students and instructors are stored on our servers so you can both read them.

- **Keyword checks.** Each message is checked automatically when it's sent. The check uses fixed lists of words and phrases about:
  - selling or transferring firearms (for example "for sale" or "FFL");
  - unsafe ways to pay (for example gift cards, wire transfers, Western Union or MoneyGram).

  It's simple word matching, not AI.
- **What happens to a matching message.** It's still delivered. We store which rules it matched, remind the sender how to pay safely, and create a report for our founder to review.
- **Reports.** You can report or block anyone from any conversation. Reported and flagged messages may be reviewed by our founder.
- **Founder alert emails.** These contain only a report ID and a link, never the message.
- **Your consent.** Students agree to these checks when they sign in to Caliber Classes, and instructors agree in the Instructor Agreement.

We never send message content to an outside moderation or AI service.

### B11. Booking disclaimer records

Each time you request a lesson or class, paid or free, you agree to the booking disclaimer. Caliber doesn't supply a waiver. Any waiver your instructor or the range asks you to sign is theirs, and we don't receive it.

We keep a record of each agreement, and the exact disclaimer text it refers to (signed waiver records from before 2026-10-29 are kept the same way):
- for at least 6 years after the date of the lesson or class;
- longer while any claim or problem report about that lesson is open;
- even if you delete your account, because these records are evidence for you, your instructor and us.

These records can't be edited.

### B12. Instructor credentials

- **Caliber doesn't check instructors.** It doesn't ask for, collect or review credential, license or insurance documents.
- **What you list yourself.** Certifications you type into your profile are shown as you entered them, marked "Listed by the instructor · not checked by Caliber."
- **Don't upload ID.** Don't put a driver's license, Social Security or military ID number in your profile, listings or messages.

### B13. Public instructor profiles

When you're live, the following appear in the app and on the web at [CLASSES WEB DOMAIN], where search engines can find them:
- your name, headline, bio and photos;
- your teaching area;
- the certifications you list yourself, marked as not checked by Caliber;
- your average rating and number of reviews;
- your lessons and classes, with prices and places.

Your payment details are never public (see B7).

**Reviews.** When you review a lesson or class, other Caliber users can see in the app your review text, your star rating, your first name and last initial, and the lesson or class you took. The instructor can post one public reply, which appears with your review. An instructor's star rating appears once they have at least 3 reviews. On our public web pages, we show only an instructor's average rating and number of reviews, not reviewers' names or review text.

### B14. Notifications

If you turn on Caliber Classes notifications, the app sends us your device's push token. We use it only to send you alerts about new messages, lesson requests and their answers, and cancellations. A message alert shows the sender's first name and the start of the message; a message flagged by the keyword rules shows a general alert instead. Alerts are delivered through Apple's push notification service, so Apple receives the token and the alert text. Lock-screen previews can be hidden in iOS Settings.

We delete a push token when:
- you sign out;
- Apple tells us it's no longer valid;
- it's no longer one of your 10 most recently used devices;
- you delete your account.

You can turn notifications off at any time in iOS Settings or in Caliber.

### B15. Tracking, analytics and Do Not Track

- **No tracking.** We don't track you across other companies' apps or websites, and we don't let advertising or analytics companies do so through Caliber.
- **Do Not Track.** Because we don't do that kind of tracking, we don't respond differently to browser "Do Not Track" signals.

### B16. How long we keep information

We keep personal information only as long as we need it for the purposes below. Then we delete it or make it unreadable. Our deletion runs automatically every day. Anything tied to an open claim or safety report is kept until it's resolved.

| Information | How long we keep it |
|---|---|
| Account (name, email, Apple identifier) | Until you delete your account; then it's removed. A record holding only an internal ID and dates stays while other records below are linked to it |
| Instructor profile, photos, availability, location, and the payment details you list | Until you change them or delete your account |
| Instructor subscription records | While your account exists, plus 7 years after the end of the year of the last renewal |
| Search place and search text | Not stored |
| Requests and lessons, with their cancellations | 7 years after the end of the year of the lesson |
| Booking-disclaimer records (and signed waiver records from before 2026-10-29) | 6 years after the lesson, or longer while a claim, dispute or report about it is open, even after account deletion |
| Your acceptances of the Terms, this policy, the Instructor Agreement, eligibility confirmations and listing confirmations | While your account exists, plus 4 years |
| Messages and their keyword flags | 2 years after the conversation's last message. A message attached to a report, problem report or dispute is kept with that record |
| Reports, problem reports, outcomes and suspensions | 3 years after they're resolved, or 6 years if about an injury or safety incident at a lesson |
| Reviews | Shown while the instructor is listed. When you delete your account, your review text and your name are removed from your reviews, and the star rating stays in the instructor's average without your name |
| Blocks | Until you remove them or delete your account |
| Push tokens | See B14 |
| Range listing claims (name, email, phone, role, range and status) | Until the claim is decided; then 2 years after the decision or the listing's last edit, whichever is later |
| Range facts entered by a verified claimant (facts about the range, not about you) | Shown while the range has a verified claim, until the claimant changes or clears them |
| Range details you suggest (B26) | 90 days after we approve or decline them; a suggestion we haven't decided, 1 year. Details we approve stay on the range's listing until they're replaced or removed |
| Abuse-limit records, including the one-way hash of the IP address recorded with a range claim or a range-detail suggestion | 7 days |
| Our server log lines | [3 or 7] days |
| Founder alert emails | Report alerts: deleted when the report is resolved. Range-claim alerts: deleted when the claim is decided. 90 days at most either way |
| Support emails | 2 years after your last contact |

Deleted information may stay in our encrypted database backups for up to [7 or 30] days before it's overwritten. Cloudflare and Apple keep their own records under their own policies.

### B17. Deleting your Caliber Classes account

You can delete your Caliber Classes account in the app: **Profile › Caliber Classes › Delete Caliber Classes account**. You can also ask us at support@norbrookmedia.com.

**When you delete it:**
- your upcoming requests and lessons, as a student or as an instructor, are cancelled;
- the other party to each cancelled lesson sees that it was cancelled, and gets an alert if they allow notifications. Caliber doesn't handle lesson payments, so any refund of money paid directly is between the student and the instructor;
- your profile text, photos, location, weekly hours, listings and payment details are removed;
- your name and email are removed, your sign-in identifier is replaced, and Apple sign-in is revoked;
- your push tokens, blocks and any review text are deleted;
- your conversations close for everyone.

**What we keep, for the periods in B16:**
- past requests and lessons;
- booking-disclaimer records, and any signed waiver records from before 2026-10-29;
- messages, including flagged or reported ones;
- reports and their outcomes;
- instructor subscription records;
- your acceptance records.

The other party or the law may need these. When each period ends, they're deleted.

**Before you delete:**
- **Instructors:** deleting your Caliber Classes account doesn't cancel a Caliber Instructor subscription. Cancel it with Apple in Settings › your name › Subscriptions.

Deleting Caliber Classes doesn't touch your core-app data on your device or in iCloud.

### B18. Your choices

Wherever you live, you can:
- **See and download your information.**
  - Your requests and lessons are in the app.
  - For a copy of anything else we hold about you, email us.
- **Correct it.** Edit your profile and listings in the app, or email us about anything else. Disclaimer and acceptance records can't be changed, because they're evidence of what you agreed to.
- **Delete it.** Delete your Caliber Classes account in the app (B17), or email us.
- **Control notifications.** Turn them off in iOS Settings or in Caliber.
- **Control contact.** Block or report anyone from any conversation.

Email support@norbrookmedia.com. We'll answer within 30 days. We may ask you to confirm the request from the email address on your account, or in the app, so we know it's you. We won't treat you differently for asking.

### B19. How we protect your information

We protect personal information with reasonable administrative, technical and physical safeguards:
- encryption in transit and at rest;
- two-factor authentication and limited access for our accounts;
- an admin console protected by Cloudflare Access;
- private storage for photos and records, which only our founder can open;
- automatic daily deletion of records we no longer need

No system is perfectly secure.

### B20. If there's a security breach

If a security breach affects your personal information, we'll tell you by email as quickly as we reasonably can, and within the time the law requires. For Florida residents, that's no later than 30 days after we determine, or have reason to believe, that a breach occurred, unless a law-enforcement agency asks us in writing to wait or the law gives us more time. The notice will tell you:
- what happened and when;
- what information was involved;
- what we've done;
- how to reach us.

We'll also notify regulators when the law requires. For example, we notify Florida's Department of Legal Affairs when 500 or more Florida residents are affected.

### B21. Age

- **The core app.** Caliber isn't directed to children under 13. It carries an App Store age rating suited to its firearm-safety content.
- **Caliber Classes is only for adults 18 and older.** That includes browsing listings while signed in, messaging and requesting lessons. We check age before you can create a Classes account.
- **How we check.** We ask Apple's Declared Age Range service whether you're 18 or older, or ask you to confirm it. We use the answer only to decide whether you can use Classes. We don't store or share your age range; we record only that the check was done and how.
- **If you're under 18.** If Apple tells us you're under 18, you can't create a Classes account, whatever you confirm. If we learn that someone under 18 has a Classes account, we close it.
- **If you're under 13.** If we learn that someone under 13 gave us personal information, we delete it.
- **Notice to the App Store.** Before we make a significant change to the Terms or this policy, we notify the App Store as the law requires, and we tell you in the app.

### B22. Health information

We don't ask for health information. If you choose to tell us about an injury in a report or message, we use it only to handle that report. We keep it with the report for the period in B16. We don't share it except as needed to resolve the report or as the law requires.

Please describe what happened without medical details. If someone was hurt, say so, and we'll follow up.

### B23. Requests from governments and law enforcement

We give personal information to government agencies only:
- when valid legal process requires it, such as a subpoena, court order or search warrant; or
- when we believe in good faith that disclosure is needed to prevent death or serious physical injury.

How we handle each request:
- We review it and object to requests that are invalid or overbroad.
- We disclose only what the request requires.
- We tell affected users before disclosing, unless the law forbids it or it's an emergency.
- We never volunteer lists of students or instructors.

We don't hold any record of firearms or firearm owners, so we have none to provide. Requests for your core-app data in iCloud must go to Apple.

### B24. Where information is processed

Our service providers store data in the United States and may process it in other countries where they operate. Caliber Classes is offered only for lessons in the United States.

### B25. Range listing claims (our website)

Our website has a page for each shooting range in our directory, built from open map data. If you work at a range, you can claim its listing so you can keep its details up to date. You don't need a Caliber Classes account to do this.

- **What we store.** Your name, email, phone number and role at the range (owner, manager or staff); which range you claimed; when; and whether the claim was confirmed.
- **How we confirm a claim.** Our founder gets an email with your claim details, including your name, role, email and phone. The founder confirms the claim by calling the range at the phone number in its public listing, never the number you typed. We use your details only to confirm the claim and to contact you about the listing.
- **Your private edit link.** Once a claim is confirmed, we email you a private link for editing the listing. We store its code only in a one-way scrambled (hashed) form, so a copy of our database can't be used to edit listings.
- **What's public.** Your name, email and phone are never shown on the range's page. What you enter on the edit page (hours, prices, amenities and notes) is public. It appears on the range's page, marked as verified by the range, and in the public range data that the Caliber app downloads (A6). When you save changes, our founder gets an email with your name, role and email and what you saved.
- **Limiting abuse.** Each claim also records a one-way hash of your IP address, not the address itself, for 7 days.
- **How long we keep it.** See B16. To withdraw a claim or have your details removed, email support@norbrookmedia.com.

### B26. Range details you suggest (in the app)

On a range's page in the app, anyone can suggest details we don't have yet — its hours, longest distance, whether it's indoor or outdoor, whether it's free or what a day pass costs, and whether it offers rentals or lessons. You don't need an account.

- **What we store.** The details you enter, how you know them (you visited, called, read the range's website, or other), an optional note, which range, and when. We don't store your name, email, account, device details or IP address with it.
- **Who sees it.** Our founder reviews every suggestion and checks it with the range before approving it. Nothing you send is public until it's approved. Your note is never published.
- **What's public.** Approved details appear on the range's page in the app, marked "User submitted", and in the public range data that the Caliber app downloads (A6). We may edit or shorten them, and we don't say who suggested them.
- **Limiting abuse.** Each suggestion also records a one-way hash of your network address, not the address itself, for 7 days.
- **How long we keep it.** See B16. Because we don't know who sent a suggestion, we can't link it to you later; email support@norbrookmedia.com about a range's published details.

---

## PART C — CHANGES AND CONTACT

### Changes to this policy

When we change this policy, we update the effective date at the top and keep every earlier version at [PRIOR VERSIONS URL].

Before a material change takes effect, we'll:
- tell you in the app;
- email you, if we have your address;
- notify the App Store first, where the law requires.

If we want to use information we already hold in a materially different way, we'll ask for your consent first.

### Contact

**[OPERATOR]** [and, once it's a different company, **[APP PUBLISHER]** for the core app and Caliber Pro]
[TAMPA MAILING ADDRESS]
support@norbrookmedia.com

Support: norbrookmedia.com/caliber/support