The short version
- We collect information needed for your account, CheckOns, alerts, sharing choices, and connected features.
- We never sell your data. We don't run ads.
- Location is collected only for a feature you use, such as an attached CheckOn, temporary live sharing, a place reminder, or SOS.
- You can download the account data listed below and delete eligible stored places. Some safety, organisation, billing, support, and closure records must be retained.
What we collect
Account data
Email, name, profile photo (optional), authentication records, notification preferences, timezone, and plan status.
Check-in data
Your reported answer, time, chosen schedule, related safety session, and any note or location you deliberately include.
Location data
Depending on your choices, CheckOn can store a place attached to a routine CheckOn, a temporary live-location session, a place reminder, or an SOS. Live sharing uses updates while its visible timer is active and may stop updating if your device, GPS, browser, or connection stops providing positions. CheckOn does not keep an open-ended location history.
Circles and caring records
Circle membership, invitations, responses, alerts, messages, reactions, caring notes, dates, tasks, and care-cost records are stored for the people and features you choose.
AI and routine insights
AI may reword summaries or suggest routines from structured CheckOn records you are already allowed to see. Opt-in routine learning uses your own history. AI output is stored with its sources, generation time, and confidence so it can be explained, dismissed, or corrected. AI does not determine whether anyone is safe or create or resolve an alert by itself.
Organisations and travel partners
If you join a care, campus, or work organisation, it keeps records created in that context, such as shifts or welfare answers. Personal Circle data stays separate unless you deliberately place a specific CheckOn with that organisation. Travel partners receive only the journeys and optional contact or policy details you choose to share. Withdrawing access stops future access in CheckOn; records the organisation already created may remain under its retention duties.
Device data
Browser and device information, push-notification identifiers, connectivity events, and limited service logs used for delivery, security, abuse prevention, and reliability.
Who sees what
- Your Circle sees the status and history allowed by your permissions. Chosen viewers can see temporary location while its session is active.
- Alerts and SOS show authorised responders the facts attached to that alert, which may include a permitted recent location. Delivery depends on a working connection and provider.
- Organisations and partners see records connected to their context and your consent switches, not your personal Circle merely because you belong to an organisation.
- Our support team can use audited support tools to inspect limited account and delivery information when needed to help, investigate abuse, or protect the service.
- Service providers process information needed for hosting, notifications, email, payments, and AI wording on our behalf.
How we store it
Data is hosted on Lovable Cloud and protected by authentication, access policies, and row-level database rules. Data is encrypted in transit and at rest. These controls reduce risk, but no online service can promise absolute security.
How long we keep it
- Routine location points are normally removed after one day.
- Temporary live-location points are removed when sharing ends, and no later than the configured maximum.
- Place-reminder points are normally removed after 12 hours.
- SOS locations are normally kept for one year as a safety record and cannot be deleted early.
- Other records are kept while needed for the service, safety history, legal duties, or dispute handling. The in-app Privacy Centre shows current location-retention rules.
- Closing an account removes the active account and data set to leave with it. Limited closure, organisation-owned, provider billing, and required safety or audit records may remain.
Your rights
Depending on where you live, you may have rights to access, correct, export, restrict, or delete personal data. The in-app download covers the listed CheckOn account data; ask the relevant organisation for records it controls. Email privacy@checkon.app for help.
Sub-processors
- Lovable Cloud — application hosting, database, authentication, and AI services
- OneSignal — push notifications
- Resend — transactional email
- Stripe — checkout, subscriptions, invoices, and payment records
Children
CheckOn is not designed for children under 13. We do not knowingly collect data from them.
Changes
We'll email you at least 14 days before any material change. The current version always lives at this URL.
Contact
Questions? Email privacy@checkon.app. We read every message.