Privacy Policy

Who we are

My Gun Notes is operated by Coda Evolution, 15223 Herriman Blvd, Noblesville, Indiana, US 46060 ("we", "us"). Questions about this policy or your data: sales@codaevolution.com.

The short version

Your firearm records live on your own device by default. We cannot read them. If you enable cloud sync, we store only encrypted data we cannot decrypt. We do not sell personal information, we do not run advertising, and we collect the minimum needed to operate accounts, subscriptions, and the features you turn on.

Your records stay on your device

Collection records, ammunition logs, storage locations, NFA records, range sessions, maintenance history, valuations, and documents are stored locally on your device. This data is never transmitted to our servers unless you explicitly enable encrypted cloud sync or create a share.

Encrypted sync and sharing

Cloud sync is optional and end-to-end encrypted. Your data is encrypted on your device with a passphrase-derived key before upload; our servers store ciphertext only and never receive your passphrase or keys. If you lose the passphrase, we cannot recover the synced data. Shares (trustee and household access) work the same way: the shared copy is encrypted on your device with a per-share key carried only in the invite link, which never reaches our servers.

What we do collect

• Account: your email address and sign-in identity, handled by our authentication provider (Clerk).
• Billing: handled by Stripe. We never see or store your card details; we store your subscription status and Stripe customer reference.
• Referrals: if you use a referral code we record who referred whom, reward status, and a coarse last-active timestamp used to qualify rewards.
• Law change alerts: if you subscribe, your email address and chosen states, with double opt-in and one-click unsubscribe. Unsubscribing deletes the record.
• Push notifications: if you enable them, a push subscription token and your notification preferences.
• Signup source: if you arrive via a referral or share link, which channel brought you, used in aggregate to understand growth.

Cookies

We use cookies for sign-in sessions and, when you arrive through a referral or invite link, a short-lived cookie that remembers the code through signup. We use no advertising cookies and no third-party ad trackers.

Service providers

We use Clerk (authentication), Stripe (payments), Vercel (hosting), Neon (database, ciphertext and account records), and a transactional email provider for opt-in alerts. Each processes data only to provide their service to us. Data is processed in the United States.

What we never do

We do not sell or rent personal information. We do not run advertising. We do not build profiles of what you own; we structurally cannot, because those records are encrypted or never leave your device. We disclose personal information only if required by law.

Your choices and deletion

You can use the app entirely locally with no account features, turn sync off at any time, revoke any share instantly, unsubscribe from any email in one click, and export your data free on every plan. To access, correct, or delete the personal information we hold, email sales@codaevolution.com. Deleting your account removes your server-side records.

Age

My Gun Notes is intended for users who are at least the age of majority in their state of residence.

Changes

If we change this policy we will update this page and the date above. Material changes will be announced in the app.