Privacy policy
Brassroll’s Arsenal (“the app”) is published by Brassroll Pty Ltd (ABN 77 702 959 939), 6/50 Miller St, North Sydney NSW 2060, Australia. This policy explains what the app does with your information, and what we do with anything you send us.
Summary
The app sends nothing to us or to anyone else. It has no internet access, no account, no analytics, no advertising and no crash-reporting service. What you enter stays on your phone unless you choose to export or share it. If you email us, we receive what you send: see “If you contact us”.
What the app stores, and where
- Your records (firearms, licences, permits, ammunition, activities, maintenance, equipment, insurance, wishlist and the other records you enter) are stored in an encrypted database on your phone. The encryption key is protected by your phone’s secure hardware (the Android Keystore).
- Photos you attach are encrypted and stored in the app’s private storage. Photos keep their original details, such as the time and place they were taken, so they can be used as a record.
- Settings are stored in the app’s private storage.
- Club documents you add, and their photos, are stored encrypted like other records. When you ask the app to suggest points from a PDF, the PDF is read on your phone.
- Waypoints you save (a name and a GPS position) are stored in the encrypted database like other records.
- Widget numbers. If you add the home-screen widget, the numbers it shows (days and counts, no names or details) are stored unencrypted so it can display them while the app is locked.
Android’s own cloud backup and device-to-device transfer are switched off for this app. Your records are not copied to Google or to another phone except in a backup or transfer file you make yourself.
When information leaves the app
Only when you ask for it:
- Backups you make, manually or on a schedule, are encrypted with a password you choose and saved where you choose.
- Moving to a new phone. The transfer file is encrypted with a one-time code that the app generates and shows only on the old phone’s screen; the code is never in the file. The file goes wherever you send it from the share sheet (for example Quick Share, directly to the new phone). A copy stays in the receiving phone’s Downloads until you delete it.
- Reports and exports (PDF, CSV and Excel files, shared log entries and the open JSON export) are not encrypted. They go only where you save or share them. The app warns you before each one.
- The estate pack is encrypted with a password you choose.
- Phone calendar. If you switch on calendar sync, reminders are written to a calendar on your phone. If that calendar is linked to an online account (for example Google), your calendar provider will copy those entries to that account. Discreet titles are on by default, and a calendar kept only on the phone is offered.
- Shared text. File notes and other text you choose to share are not encrypted and go only where you send them.
- Crash reports. If the app crashes, a technical report is saved on your phone. It is sent only if you choose to share it, and you can read it before sending. If you send it to us, see “If you contact us”.
If you contact us
The feedback page opens your email app with a message addressed to us. The message includes the app version and your phone’s Android version, which you can see, and delete, before sending.
If you send it, we receive your email address, what you write or attach (including any crash report you choose to share) and those version details. We use them only to reply to you and to improve the app. We keep them until you ask us to delete them.
Our email is hosted by Spaceship, Inc. (Spacemail), a company in the United States, so your email may be stored or accessed outside Australia. We do not share what you send except as the law requires. To ask what we hold about you, or to have it corrected or deleted, email info@brassroll.com.
Testing
If you join a test of the app, Google Play gives us the email address you joined with. We use it only to run the test.
Permissions
| Permission | Why |
|---|---|
| Notifications | Reminders about expiries, deadlines and tasks. |
| Biometrics | Unlocking the app with your fingerprint or face. |
| Calendar (read and write) | Only if you switch on calendar sync; asked for at that point. |
| Location (precise) | Only for waypoints and first and last light; asked for when you first open them. The phone’s GPS is read while one of those screens is open, never in the background, and positions are kept only in the waypoints you save. No maps or internet are used. |
| Microphone | For the shot timer and, on Android 12 and later, for Say it; asked for when you first use either. While the timer runs, the loudness of the sound is measured on the phone to detect shots. Say it turns speech into text with the phone’s own on-device recogniser. No sound is recorded, stored or sent by the app. |
The camera is used through your phone’s camera app, only when you choose to take a photo; the app does not hold the camera permission.
Text and barcode reading (Google Play edition). This uses Google’s ML Kit, which runs on your phone. Google states that ML Kit can send diagnostic information to Google. Because this app has no internet permission, ML Kit cannot send anything from it.
Say it (voice entries). On Android 12 and later the app uses the phone’s on-device speech recogniser, which works without a connection. Where that is not available, your phone’s speech service (for example, Google’s) turns what you say into text and gives the text to the app. That service is not part of the app and may send your voice to its provider, unless offline speech recognition is set up on your phone; its own privacy policy applies. The app asks for offline recognition where available. The app itself receives only the text; it stores no audio.
The pressure sensor, on phones that have one, is read only when you tap the barometer button in the drop calculator.
Children
The app is for adults aged 18 and over.
Your choices
You can delete any record, a whole profile, or the app and all its data at any time. We receive nothing from the app itself. If you have emailed us, you can ask what we hold and have it corrected or deleted (see “If you contact us”).
Changes
If this policy changes, the new version will be published at https://brassroll.com/arsenal/privacy and in the app’s release notes.
Contact
info@brassroll.com · Brassroll Pty Ltd (ABN 77 702 959 939), 6/50 Miller St, North Sydney NSW 2060, Australia
This is the same policy the app shows (from the app's source, 2026-10-28).