Aimwright Back to home

Privacy Policy

Last updated: 13 October 2026

Who we are

Aimwright is a dry-fire training app for people who carry a firearm for self-defence. It is run by VREEHUB (PTY) LTD, a private company registered in South Africa. In this policy, "we", "us", "our" and "the Service" mean Aimwright. "You" means anyone who visits the website (aimwright.com) or uses the app (app.aimwright.com).

This policy explains what personal information we collect, why we collect it, how we protect it and what your rights are under the Protection of Personal Information Act (POPIA). Our Information Officer can be reached at privacy@aimwright.com.

What we collect

We collect what we need to run your account and your training record. Nothing more.

Your account. To create an account you give us an email address, a username and a password. These three are required. Without them we cannot create your account. Your email address is used to log you in, confirm your account and reset your password. It is private, and other members never see it. Your username is your public name inside Aimwright. It can be a nickname, so if you would rather stay anonymous, do not use your real name. Your password is stored in scrambled, encrypted form by our login provider. We cannot see or read it.

Your training. We keep your training record and your app choices, such as reset time and signal type, so the app remembers them, saves your progress and shows your stats. The app also keeps a copy of your training record and your login on the device you use, so it keeps working when your signal drops. That copy stays in your browser on that device until you clear your browser data or remove the app. When you delete your account, the app also removes the copy on the device you deleted it from.

Your safety acknowledgement. Before you train, you confirm that you understand the risks of dry-fire training. We record when you accepted it and which version you accepted. This record shows that you were told about the risks, and it protects our legal and business interests.

Your membership and payments. We keep your membership status, your plan, your trial dates and any access code you used. When you pay, our payment provider sends us a subscription reference and the payment status. We never see or store your card details. The payment provider handles them.

When you contact us. If you email us, we keep your email and our reply so we can help you.

Technical information. Our hosting and database providers keep standard technical logs, such as IP addresses, browser type and the time of a request. These logs keep the service running and secure. They are not used to track you.

What we do not collect

We do not ask for your ID number, firearm licence, firearm serial numbers or home address, and we do not use analytics, advertising or tracking cookies.

Aimwright is for people 18 years and older. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will delete it.

Why we use it

We use your information only to run your account and training record, give you the access you are entitled to, keep a record that you accepted the safety notice, answer your questions and keep Aimwright secure. If we ever want to use it for something new, we will tell you first.

Who sees your information

We do not sell, rent or trade your personal information. Only the service providers who run Aimwright for us process it, and only on our instructions:

We may share information when the law requires it.

How we protect it

All traffic to and from Aimwright is encrypted (HTTPS). Each member can only see their own training record. Passwords are stored in hashed form by the login provider, backups are encrypted and only the owner has administrator access.

Your information is stored on your device and synced to Supabase in Ireland. Ireland falls under the European Union's General Data Protection Regulation (GDPR), which protects your information in a way similar to POPIA.

We have built Aimwright to keep your information secure, but no online system is perfectly secure. If a breach affects your personal information, we will tell you and the Information Regulator.

How long we keep it

We keep your account and training record for as long as your account is open. When you delete your account, we delete your login, your detailed training record and your settings within 30 days. Deleted information can stay in our encrypted backups until those backups are replaced.

South African law requires us to keep some records for longer, even after you delete your account. We lock them away, use them only for the reason we kept them and delete them when the period ends:

In these kept records your email address is not stored in readable form.

Your rights

Under POPIA you have the right to:

You can export your training record yourself: in the app, open Profile and choose Export. You can delete your account in the app under Profile. For anything else, email privacy@aimwright.com from the email address on your account. We will reply within 30 days. There is no charge for a reasonable request.

When you delete your account, we delete everything except the records the law requires us to keep, as explained above.

Emails from us

We email you about your account, for example to confirm your sign-up or reset your password. We also email you when this policy or our terms change, because that affects your account. We only email you about new features if you have agreed to it in the app, and you can change that choice in Profile at any time.

Changes to this policy

We may update this policy from time to time. When we do, we change the date at the top. If a change affects how we use your information, we email you before it takes effect, and the app asks you to read and accept the new version.

Contact