Who we are
Field Competent is owned and run by Maution (Pty) Ltd (registration number 2026/901776/07) ("we"). We are the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA).
What we keep and why
•
Account: your email address, a password (stored only as a secure hash) or your Google / Apple sign-in, your country, and which version of the terms of use you accepted and when. Needed to give you an account.
•
Your records: firearms, licences, ammunition, range sessions, hunts, maintenance, notes and photos you add. Kept so the app can show them back to you, remind you about renewals and work out statistics.
•
Serial and licence numbers: encrypted on your device before they are stored. The key is kept apart from your records and is only released to your own signed-in devices.
•
Photos: location data (GPS) is removed from photos before they are uploaded.
•
Subscriptions: whether you have Premium, whether it is monthly or yearly, when it started and renews, the price, your choice at the end of a year, and through which payment service. Card details go to Payfast, Google or Apple, never to us. We use your email address to send the notice before a yearly plan ends and a reminder two weeks before.
•
Your personal link: if you use the lucky draw link, we keep a short code for you and note which new account came through it, so we can give tickets. Your friend is never shown to you by name.
•
Feedback: messages you send us through Feedback and ideas, with the page you were on, your device type and app version. Used to fix problems and decide what to build. We email you about it only if you tick that we may.
•
Technical: sign-in times and error logs, kept to keep the service secure and working.
What we never do
•
We do not sell your personal information.
•
We do not show your records to other users. There is no public profile, feed or location sharing.
•
We do not send your records to SAPS, the Central Firearms Register or any association. The app is a personal record. Your licences and the official registers remain the official records.
•
We do not share personal information with businesses we partner with. Offers from partners are only shown inside the app to users who choose to see them, and any figures shared with partners are anonymous totals.
Storage on your device
Field Competent sets no advertising or tracking cookies and uses no analytics. The website keeps a few things in your browser’s own storage, only because the service needs them to work:
•
Your sign-in, so you stay signed in on this device until you sign out.
•
Your light or dark setting.
•
A copy of your records, so pages open quickly and keep working without signal. It is removed when you sign out.
•
Photos waiting to upload when you have no signal. They are sent and then removed.
•
The sign-up and log-in pages use Cloudflare Turnstile, a check that you are not a robot. Cloudflare processes technical details for this check only.
Who helps us run the service (operators)
These companies process information for us under contract, only to provide their service:
•
Supabase: database, sign-in and file storage, hosted in Frankfurt, Germany (European Union).
•
Cloudflare: delivers the website.
•
Payfast: website payments. Google Play and the Apple App Store, with RevenueCat: payments in the phone apps, once they are available (coming soon to Apple and Android).
•
Resend: sends sign-in codes, reminders and notices.
•
Google and Apple: only if you choose to sign in with them.
Information sent outside South Africa
Some of these services store or process information outside South Africa, for example in the European Union. We only use services bound by agreements that protect your information to a standard comparable to POPIA (POPIA section 72).
How long we keep it
•
Your records: for as long as you have an account.
•
When you delete your account: it is closed straight away and everything is permanently deleted after 30 days. You can cancel within those 30 days.
•
Records you delete inside the app: permanently removed after 30 days.
•
Purchase records: kept for as long as tax law requires, even after you delete your account.
Your rights
•
See your information: Settings → Export my data gives you everything in one file.
•
Correct it: edit any record in the app, or ask us.
•
Delete it: Settings → Delete account.
•
Object to processing or withdraw consent, for example to partner offers, at any time.
•
Complain to us at
[email protected], or to the Information Regulator (inforegulator.org.za).
Security
Every record is private to your account, enforced by the database itself. Connections are encrypted, sensitive numbers are encrypted on your device, and access to production systems is limited. If a breach affects you, we will tell you and the Information Regulator as POPIA requires.