Privacy Policy

• ESAU is operated by ESAU LLC, a limited liability company organized in Missouri, United States. ESAU LLC is the controller of the information described in this policy.
• Privacy and support contact: support@esauapp.com
• Mailing address: ESAU LLC, P.O. Box 491, Edgar Springs, MO 65462, United States
• This policy and any dispute about it are governed by the laws of the State of Missouri, United States.
• ESAU is only for users 17 years of age and older.

• Display name
• Username
• Email address (used to sign in and to confirm your account)
• Password, stored only as a secure hash by our authentication provider
• Profile photo and cover photo, if you add them
• Bio, home state/county and hunter preferences you choose to enter
• A phone number, if you choose to add one to your profile. A phone number is optional and is only shared where you choose to make it visible for a feature such as a recovery contact.
• Business or operator contact information you voluntarily provide for an applicable feature — for example a business or operator name, contact person, business address, phone number, email, service area, and listing details submitted for a drone-pilot or business directory listing. These fields are only collected if you choose to use those features; no ordinary member has to provide them.
• Account identifiers: your internal account ID, sign-in timestamps, membership status, experience/level records, and your role (member, pilot, admin)
• Your recorded acceptance of the Terms of Service and Privacy Policy, including the version accepted and the time it was recorded

Location is only collected when you grant your device's location permission and use a feature that needs it. ESAU uses two kinds of location:

• Precise location — exact GPS coordinates. Used for hunt sessions, stand, trail, bedding-area and other map pins, Recovery requests, recovery pins and trail points, shot and blood markers, drone-pilot distance searches, and weather/wind at your position.
• Approximate location — county and state only. This is what other hunters see about you.
• Check-ins: a check-in records the state and county you select. A normal check-in does not itself save precise GPS coordinates as part of the check-in.
• Hunt sessions and Kill Shot: exact coordinates stay private to you; shared posts show county/state.
• Recovery: when you send a recovery request, the trail and marker coordinates you record are stored, and exact coordinates become visible to a pilot only through an accepted/approved request so they can actually search.
• Stands, trails, bedding areas and other saved map features: these may store precise coordinates. They are visible only to you (and to a camp you deliberately share with, where that feature is used).
• The distinction matters: shot locations, blood and recovery markers, recovery pins, stands, trails, bedding areas and similar saved map features may involve precise coordinates, while posts, hunts and check-ins shown to other members carry state and county only.
• Pilot searches: your position is used to measure distance against a pilot's service area. Pilots see your county/state in discovery, not your exact location.
• Weather and wind: your coordinates are sent to our weather data provider to return factual weather and wind conditions for that spot. Stand wind information is based on actual wind and the deer travel direction you enter yourself.
• Private hunting, stand, and exact-location information is not made public. It is only shared where a feature you use intentionally shares it — for example the coordinates you send with a recovery request, or a location you post yourself in content or a message.

• Camera: used when you take or record media in the app and when you broadcast Kill Shot Live or a Recovery stream.
• Microphone: used for audio on live broadcasts and recorded video. Audio is captured only while you are recording or broadcasting.
• Photos and videos: files you upload or capture are stored in our storage provider and attached to your posts, trophies, profile, or messages.
• Kill Shot Live and Recovery streams: while you broadcast, video and audio pass through our live video provider so viewers can watch, along with stream metadata such as start/end time, viewer counts, and connection quality.
• Recordings are retained. Kill Shot broadcasts are recorded — a high-quality copy captured on your device and uploaded, and a server-side recording — and stored in our object-storage provider so the footage can be replayed and attached to your trophy. Recovery footage recorded in the app is stored the same way.
• Who can see media depends on the feature and on the privacy/sharing setting of the post or trophy it belongs to. Private trophies and private replays are not shown publicly. Media you classify as Kill Shot or Recovery stays attached to its trophy and follows that trophy's privacy setting.

• Direct messages: message text, attachments, participants, and timestamps are stored so conversations work across your devices. Messages are visible to the people in the conversation. ESAU does not publish your private messages.
• Content you submit through ESAU, including posts and captions, trophy content, photos and videos, live broadcast and saved replay content, comments, likes, reactions and mentions, direct messages, camp-related communications, recovery-related communications, and any other content you choose to submit through a feature of the app.
• Community Feed audience: you control who your applicable Community Feed content is shown to — for example Public, or your Hunting Group where that option is supported. Who can see a post and the media attached to it depends on the audience you have selected and on the ESAU feature the content belongs to.
• Follows and follower relationships, and camp membership where used.
• Blocks: we store who you have blocked so we can hide that content in both directions.
• Reports: when you report content or a user, we store the report, what was reported, and who reported it so it can be reviewed and acted on.
• Notifications generated by this activity, and whether you have read them.
• Community sharing: you can share an eligible public post or business inside ESAU. A share points to the original; it does not make private content visible.
• Business @mentions: when you tag a business in a post, Harvest Story or comment, we store that tag so the business can see where it was mentioned. Tags do not widen who can see your post.
• Sponsored content: ESAU may show sponsored or promotional placements that ESAU sells and places directly. ESAU does not use a third-party ad network, does not track you across other apps or websites, and does not sell your personal information.

• Business listings: if you apply for or manage a business listing (Taxidermist, Outfitter, Meat Processor, Archery Shop or Drone Recovery), we store the business name, description, location, contact details, logo, cover photo, gallery photos and videos, and who owns or manages it. Approved, active listings are visible to members.
• Contact preferences: a business chooses whether members may call or text it; those buttons only appear when the business turns them on.
• Business media is stored as belonging to the business, not to the individual who uploaded it. Members can give High Fives and comment on business photos and videos.
• Business Chat: messages between a member and a business are stored so the conversation works. Staff reply as the business; members see the business name rather than the individual staff member.
• Drone Recovery businesses are linked to an approved Recovery provider profile.

If you apply to be a drone recovery pilot, we collect and store the information you submit and use it to review your application and to power pilot discovery:

• Business or operator name, contact person, business address, phone number and other contact information you provide for hunters to reach you
• Whether you indicate that you are FAA-certified, and any information or notes you voluntarily supply with your pilot profile or application, plus any notes from our review. ESAU stores your own indication — we do not collect FAA certificate documents or certificate numbers, and we do not independently verify FAA certification.
• Service area — your base location and search radius
• Approval and verification status, and your Recovery Pilot membership status
• Recovery history, ratings and reviews from completed requests
• Recovery invitations are sent by ESAU's server to eligible providers — currently approved, in good standing, meeting membership or beta eligibility, marked available, and whose own service area covers the request; Drone Recovery providers also need a linked Drone Recovery business. The hunter then chooses one provider. A provider's base location is never shown to hunters, and application review notes are not shown to hunters.

• Notification preferences you set, per category.
• Device push tokens, when you enable push notifications on a device. Tokens are tied to your account and device and are removed when you turn push off, sign out of that device, or delete your account.
• Notifications are generated for live broadcasts you follow, recovery requests and status updates, messages, Business Chat, follows, comments, High Fives and mentions, contest updates, and important account activity. ESAU does not currently send automated weather or stand alerts.
• Push notifications are active on the ESAU iPhone and Android apps when you allow them. Your device push token is registered with Google Firebase Cloud Messaging, which delivers notifications to Android devices and passes iPhone notifications to Apple Push Notification service (APNs). Business Chat push notifications do not include the message text.
• Notification history is kept for a limited period and older entries are cleared automatically.

• Memberships are purchased through Stripe on the web, and through Apple in-app purchase or Google Play Billing where ESAU is distributed through those stores. Your card number, CVC, and full billing details are entered with the payment provider or store and are handled by them — ESAU never receives or stores your full payment card details, and a purchase made through Apple or Google does not give ESAU your card information.
• ESAU stores the limited purchase and subscription information it needs to unlock features: the product/plan or price identifier, subscription status, current period end, and cancellation state; Stripe customer, subscription and payment-related identifiers where applicable; Apple transaction and original transaction identifiers where applicable; and Google Play purchase tokens or identifiers where applicable.
• Stripe, Apple and Google process the payment and keep their own records as the payment processor or store, under their own privacy terms.

• Basic device and browser information needed to run the app and to keep your session signed in.
• Server and security logs from our hosting, database, and live-video providers, which can include IP address, timestamps, requests, and errors. These are used to operate the service, investigate abuse, and fix problems.
• ESAU does not run a separate third-party advertising or behavioral analytics tracker, and does not run a crash-reporting or analytics SDK that collects data from users of the released app.

ESAU uses these providers to operate the app. We share only what each one needs to do its job. The map, weather, and geocoding providers below receive only coordinates or the map area you are viewing — your name, username, email, and account identifiers are not sent to them.

• Supabase (Lovable Cloud) — authentication, database, and file storage (profiles, posts, media, messages, location records).
• LiveKit — live video and audio delivery for Kill Shot Live and Recovery streams, and server-side stream recording.
• Cloudflare — application hosting, and R2 object storage for stream recordings and uploaded master recordings.
• Stripe — payment processing and subscription billing.
• Open-Meteo — weather and wind data for the coordinates you request, and place-name search.
• BigDataCloud — reverse geocoding, used to turn coordinates into a county and state label.
• Nominatim / OpenStreetMap — location search when you look up a place by name.
• Esri/ArcGIS Online and USGS National Map — map, satellite, and contour base map imagery for the map area you are viewing, rendered with the open-source Leaflet map library.
• Google Firebase Cloud Messaging and Apple Push Notification service (APNs) — your device push token and the notification content are sent to them to deliver push notifications to your device.

You can delete your account at any time from Settings. When you do:

• Web (card) subscriptions are canceled first, then your account data is deleted. App Store and Google Play subscriptions are billed by Apple or Google and are not canceled by deleting your account — cancel them with Apple or Google.
• Deleted: your profile, posts, trophies, media records, comments, likes, follows, direct messages you sent, check-ins, hunts, stands and map pins, recovery requests, notifications and push tokens, notification preferences, subscription records, pilot application/profile, your stored consent record, and your sign-in credentials.
• Deleted media: your personal photos and videos stored on our servers, and your Kill Shot and Recovery recordings held by our recording storage provider, are deleted. If a storage system is temporarily unavailable, the remaining files are queued and retried until they are removed.
• Recovery deletion: if you requested a recovery as the hunter and you delete your account, that recovery request and the recovery and map location information recorded for it — including exact coordinates — may be deleted. ESAU does not always preserve a completed recovery, and does not keep the exact recovery locations of a deleted hunter account.
• Anonymized instead of deleted: where another participant reasonably needs a shared record to remain — for example a pilot deleting their account where the hunter's record of that recovery must survive, or a shared camp other members still use — the record may be kept with identifying information removed rather than deleted. Where our system anonymizes a record, your identifying details are removed from it.
• Retained: billing and tax records held by our payment processors, which we cannot delete for legal and accounting reasons.
• Retained: security, audit and server logs held by ESAU and by our hosting, database, and live-video providers for a limited period.
• Direct messages: messages you sent are deleted. The other person keeps the rest of the conversation that belongs to them.
• Business Chat: conversation history may be kept after you delete your account, with your personal identity removed (shown as "Deleted member"). Messages sent for a business keep showing as that business. Kept history may be used for legitimate business, safety, moderation or dispute purposes.
• Businesses: business listings and their content may be kept. If your deletion leaves a business with no owner or manager, the listing is paused rather than erased. Business photos, videos, logos and covers belong to the business and are not deleted with an individual uploader's account.
• Retained: moderation reports filed by you or about you may be kept for safety, moderation, abuse-prevention and dispute purposes, with the link to your account removed. ESAU does not keep a hidden copy of deleted posts or messages just because they were reported.
• Retained: limited records involving your interactions with other users may remain where necessary to preserve those users' records, with identifying information removed or anonymized where our system does so. Records we must keep for a legal obligation, and business or directory listing information where that listing is retained, may also remain.
• Live hunts: a live hunt session that is left inactive may be closed automatically by the system. Closing a session ends the live state; it does not by itself delete the session record or any media associated with it.
• Because of the above, deletion of your account and content is immediate, but completing deletion across backups and storage systems may take a limited period.

• Access and update: view and edit your name, username, bio, photos, home area, privacy and notification settings from your profile and Settings.
• Correction: if something about your account is wrong and you cannot change it in the app, email support@esauapp.com and we will correct it where we can.
• Delete: delete your account from Settings, as described above. Individual posts, trophies, media and messages can also be deleted on their own.
• Control sharing: change a trophy or post between private and shared, block users, and turn off notification categories.
• Report content: you can report a post, comment, direct message, profile, live broadcast, business profile, business photo or video, or Business Chat message from inside the app. Reports go to our moderation queue for review. To ask about or appeal a moderation decision, email support@esauapp.com.
• Device permissions: you can revoke location, camera, microphone, photo, and notification permissions in your device settings at any time. Features that depend on them will stop working.
• Questions: email support@esauapp.com with any privacy or data question.

• ESAU is for people 17 years of age and older. It is not intended for anyone under 17.
• At signup you confirm that you are 17 or older. We store that confirmation, and the date of it, with your consent record. We do not collect or verify a date of birth.
• If we learn an account belongs to someone under 17, we will remove it.

We use reasonable security measures to help protect your information, including account authentication, per-user database access rules that keep private records such as exact coordinates and stands owner-only, and encrypted connections. No system is completely secure, and we cannot guarantee the security of your information.

We may update this Privacy Policy. When an update is material, ESAU will ask you to review and accept the new version before continuing to use the app, and your acceptance is recorded against that version.

• ESAU LLC
• Email: support@esauapp.com
• Mailing address: ESAU LLC, P.O. Box 491, Edgar Springs, MO 65462, United States