Your data stays yours

Armory360 is built so that we never have your collection. This page explains, in plain language, exactly what stays on your iPhone and the few things that leave it — only when you choose.

Effective October 19, 2026

Local-first. Everything you enter is stored on your device, encrypted, behind your PIN and Face ID or Touch ID.
No account. There’s no sign-up, and we run no server that holds your collection.
No analytics, no ads, no tracking. The app contains no analytics or advertising code and doesn’t track you across apps or websites.
Data leaves your device only when you make it: backups and exports you create, and optional iCloud Sync into your own private iCloud — encrypted on your device first, with a key that reaches your other devices only through your iCloud Keychain.

What stays on your device

Everything you put into Armory360 — firearms and serial numbers, photos, ammunition lots, range days, drill and course results, maintenance records, IDs, permits and other documents, and your settings — is stored on your iPhone (or iPad), encrypted, and nowhere else unless you turn on iCloud Sync. We have no copy and no way to see it.

Your PIN is never stored in readable form and never leaves the device. Face ID and Touch ID are handled by iOS; the app only receives a yes or no.
Photos you add have their location and other camera metadata (EXIF, GPS, XMP) stripped before they’re saved, and are stored encrypted.
Barcode scanning matches a box against the ammo lots already in your vault. Nothing is looked up online.
Documents in the wallet are encrypted on the device.
Target photos used for scoring are analyzed on the device and are kept (encrypted) only if you turn that on.

When data leaves your device

Only in these cases, and only because you chose to:

Backups and exports you create
A backup is a .a360 file encrypted with your PIN. CSV and PDF exports are plain, readable files. You decide where they go — Files, AirDrop, email or anywhere else — and once they leave the app, that destination’s privacy terms apply. We never receive them.
iCloud Sync (optional, part of Full)

Off until you turn it on, separately on each iPhone and iPad. When it’s on, your records, photos and documents are encrypted on your device before they leave it, with a key made on your device. That key reaches your other devices only through iCloud Keychain, which Apple describes as end-to-end encrypted, so iCloud Sync needs Passwords & Keychain turned on in your iCloud settings.

The encrypted data is stored in your own private iCloud (Apple’s CloudKit) and uses your iCloud storage. There’s no server of ours: we can’t see or read any of it. Apple stores it encrypted: Apple can see how many items there are, their sizes and dates, but not what they contain.

Your PIN, Face ID and lock settings never sync. Turning sync off keeps everything on your devices. Delete iCloud copy in the app removes your vault and its key from iCloud and leaves everything on your devices.

iCloud Sync is not a backup. Deleting something on one device deletes it on every device. If iCloud Keychain is reset, or every device is lost, the iCloud copy may no longer be opened. Keep a backup file made in the app (Settings → Back up vault).

Features that stay on your devices

Notifications are scheduled on the device and never name a firearm or document. They read only “Maintenance reminder” or “Document reminder”.
Widgets show counts only if you opt in. Siri and Shortcuts never speak serial numbers.
NFC tags you set up hold only a random link that opens the right firearm in your app; no firearm details are written to the tag.
The microphone is never used. Armory360 does not ask for microphone access; the par timer only plays beeps.
The range day on your Lock Screen shows elapsed time, a round count and the drill’s name — nothing else from your vault.

Purchases

In-app purchases are processed by Apple through the App Store. We don’t receive your name, email or payment details; the app only learns which items your Apple Account owns.

Crash reports

The app has no crash-reporting or diagnostics SDK. If you’ve chosen in iOS Settings to share analytics with app developers, Apple may pass us anonymous crash logs. These contain technical details about the crash, not the contents of your vault.

No PIN recovery

Because we never have your PIN or your data, we can’t reset your PIN or recover your vault. Keep a recent backup, and remember the PIN it was made with. See Support for what to do if you forget it.

This website

armory360.app uses no cookies, analytics or third-party scripts, and its fonts are served from this site. It’s hosted on Vercel, which, like any web host, processes standard request logs (such as IP address and browser type) to deliver and protect the site.

Email

If you email support@armory360.app, we’ll see your email address and whatever you choose to include, and use it only to answer you. Please don’t send serial numbers or photos of documents.

Children

Armory360 is intended for adults and isn’t directed at children.

Changes

If how the app handles data changes, we’ll update this page and its effective date before the change reaches you.

Contact

Questions about privacy: support@armory360.app.