Privacy Policy

RangeX, RangeShift and RangePay · Last updated: 13 August 2026

This one page covers everything in the RangeX suite: the range-x.co.uk website, the RangeShift staff app, and the RangePay owner's app. RangeX is a product of Eagle Approach Golf Ltd, which is the data controller.

None of these are public services. You only have an account or an app because you work for us, or because you run a driving range that uses our equipment.

1. Your RangeX account

A RangeX account is what you sign in with at range-x.co.uk, and it is also what signs you in to the RangePay app. Accounts belong to owners and managers. Range staff do not have one — they sign in to RangeShift with a PIN instead, covered in section 2.

• Your email address and your name, so we know who you are and can contact you about the account.
• Your password, as a one-way hash only. There is no column anywhere that holds a readable password. Nobody here can look yours up, and a copy of our database would not reveal it.
• Which companies you may act for, and in what role — owner, admin or member. One person can hold a role at more than one company.
• Your sign-in sessions — when each began, when it expires, when it was last used, and which company you were acting for. We store only a hash of the session token, never the token itself.
• When you last signed in.

We do not record your IP address, your browser's user-agent, or any device fingerprint against your account.

2. The RangeShift app (staff)

RangeShift is the staff app for running the rota: shifts, clocking in and out, tasks, faults, checklists, expenses and pay. Your manager creates your account and you sign in with a PIN.

• Who you are — your name, your role (staff or manager), and your pay rate. Your PIN is stored only as a one-way hash; nobody, including us, can read it back.
• Your work — the shifts you are rostered for, when you clock in and out, hours worked and whether they have been approved, plus tasks you do, faults you log, checklists you complete, breaks you take, shift swaps, and the time off and availability you set.
• Your location — only at the moment you clock in or out. Starting or ending a shift takes a single GPS reading and stores it on that shift, together with how far from the range you were, so we can confirm you were on site. This reading is attached to you by name and your manager can see it on your timecard.
  The app does not track you in the background, does not follow you between shifts, and cannot see where you are at any other time. There is no location reading anywhere in the app except those two taps.
• Photos you take in the app — pictures attached to checklist items, task completions, and expense receipts. These are stored against your name.
• Money — expense claims you submit (amount, description, whether the receipt shows VAT, and the receipt photo), the payslips issued to you, and the pay rate recorded against approved hours.
• Your device, if you turn notifications on — a push token so that Apple or Google can deliver a notification to your phone. It is stored against your name and removed when you turn notifications off.
• Manager actions — an audit record of changes such as amended hours, so that any correction to your pay can be traced and explained.

3. The RangePay app (range owners)

RangePay shows the owner or manager of a driving range what its ball dispensers have taken: takings, individual sales, machine health and prices. It is a reporting and control app for your own equipment.

What the app holds about you

Almost nothing. RangePay signs you in with your RangeX account (section 1) and then sends that account identifier to our servers with each request, because we cannot show you your range's takings without knowing which account is asking. That is the only personal data involved.

• The app never sees your email address or your password. You type those into the RangeX sign-in page, which opens in a separate, secure browser window provided by your phone. The app cannot read what you type there, or script it. It is handed back a short-lived code — useless on its own — and exchanges that for a session.
• Your session is kept in the iOS Keychain, the same protected store your phone uses for saved passwords.
• The app asks for Face ID or Touch ID to unlock. That check happens entirely on your phone; your biometrics are never sent to us and are not something we can access.
• RangePay uses no location, no camera and no photo access whatsoever.

What about the sales it shows?

The takings and sales in RangePay are your business's records, not personal data about anyone. A sale record holds the amount, the number of balls, whether they were dispensed, the time, and technical detail about the machine.

Customers who buy balls are not identified anywhere. We do not hold their name, their email, or their card number — the card payment is taken by SumUp on their own card reader and we never receive those details. The app shows the sale; it cannot show you who made it.

4. What we never do

• We don't track your location in the background, in any app.
• We don't use advertising, analytics or behavioural tracking. There is no advertising or analytics software in either app at all.
• We don't track you across other companies' apps or websites.
• We don't sell or share your data with anyone for marketing.
• We don't profile you beyond running the rota, paying you correctly, and showing a range its own takings.

5. Who else is involved

The systems run on our own servers and databases. A small number of third parties are necessarily involved:

• Cloudflare — serves our sites over an encrypted connection.
• Apple and Google — deliver push notifications to RangeShift, if you have turned them on. Notification delivery is handled through Google's Firebase Cloud Messaging.
• Open-Meteo — supplies the weather shown in RangeShift. We send the range's coordinates, never yours.
• OpenStreetMap — supplies the map tiles a manager sees on a timecard.
• SumUp — takes the card payments at the dispenser. They are the card processor; we never receive card details from them.
• Apple and Google also distribute the apps themselves, including through TestFlight.

6. Who can see your data

In RangeShift: your colleagues can see the rota — who is working when — and the tasks and faults raised at the range. Your pay rate, payslips, expenses and clock-in locations are visible only to you and to managers.

In RangePay and on range-x.co.uk: you see only the companies you hold a role at, and only the ranges belonging to them. Access is checked on every single request, so removing someone's role takes effect immediately.

7. How long we keep it

Shift, hours and pay records are kept for as long as we are required to keep employment and payroll records. Sales and machine records are kept as business accounting records. Operational data — tasks, faults, checklists — is kept while it is useful for running the range. Sign-in sessions expire on their own and can be revoked at any time. When you leave, your account is deactivated and can no longer be signed in to.

8. Why we are allowed to hold it

For staff, we process this information to run your employment: to roster you, to record the hours you worked so you are paid correctly, to meet our record-keeping obligations as an employer, and to keep the site safe and accountable. In data-protection terms that is our legitimate interest as your employer, plus what we are legally required to keep.

For owners and managers, we process your account details to give you access to your own company's equipment and records — the contract between us — and to keep that access secure.

9. Your rights

You can ask us for a copy of what we hold about you, ask us to correct anything that is wrong, or ask us to delete data we no longer need to keep. You can object to how we use it. Ask a manager, or contact us at info@range-x.co.uk.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

10. Contact

RangeX, a product of Eagle Approach Golf Ltd
info@range-x.co.uk