Privacy Policy

1. Introduction

CheckPoint is a patrol verification platform operated by Maezo Inc., a Massachusetts-based veteran-owned company ("we," "us," "our"). This Privacy Policy describes how we collect, use, and protect information when you use the CheckPoint iOS app and web admin portal (the "Service") accessible at icheckpoints.com.

By using CheckPoint, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. What We Collect

From Officers Using the iOS App

• Badge number and name: Provided by your employer (the CheckPoint admin) to identify you as an authorized officer.
• Scan events: When you scan an NFC plaque or QR code, we record the checkpoint ID, your badge number, the timestamp, and whether the scan was made online or queued offline.
• Shift events: Start and end timestamps when you begin or end a shift.
• Incident reports: Optional notes and locations when you report issues from the field.
• Device identifier: An anonymous identifier for your iPhone to manage device counts under your organization's subscription.

From Admins Using the Web Portal

• Account details: Email, name, organization name, billing address.
• Payment information: Processed by Stripe. We do not store credit card numbers.
• Configuration data: Site names, checkpoint locations, officer roster.

What We Do NOT Collect

• Location tracking: CheckPoint does not use GPS or track officer location unless you explicitly tap an issue report that requires a location.
• Camera/microphone access: The QR scanner uses the camera momentarily only when actively scanning. No images or video are stored.
• Contacts, photos, calendar, or other phone data.
• Third-party analytics: No Facebook SDK, no Google Analytics in the app, no advertising IDs.

3. How We Use It

We use the data we collect only to:

• Make the CheckPoint Service work (sync scans, show real-time visibility, generate reports)
• Authenticate officers and admins
• Process subscription payments (via Stripe)
• Provide customer support when requested
• Detect and prevent abuse of the Service

We never use your data for advertising, marketing analysis, or to train AI models.

4. Where Your Data Lives

CheckPoint runs on Google Firebase (SOC 2 Type II certified infrastructure). Data is encrypted in transit (TLS 1.3) and at rest. Firebase servers used by CheckPoint are located in the United States.

Each customer organization's data is isolated by Firestore security rules — you cannot see another organization's scans, officers, or reports.

5. Who Sees Your Data

Within your organization, scan data is visible to admins and supervisors authorized by your employer.

We do not sell, rent, share, or trade your data with anyone outside Maezo Inc. The only third parties involved are:

• Google Firebase: Hosts the backend infrastructure.
• Stripe: Processes subscription payments.
• Apple: Distributes the iOS app via the App Store (does not receive scan or officer data).

We will only disclose data if legally required (subpoena, court order) and will attempt to notify you first when allowed.

6. Data Retention

Active subscription data is retained while your organization's subscription is active.

When a subscription is canceled, scan and shift data is retained for 90 days in case you reactivate, then permanently deleted. Audit logs are retained for one year for legal compliance, then permanently deleted.

Admins can request immediate deletion at any time by emailing Sales@Maezoinc.com.

7. Your Rights

Officers and admins have the right to:

• Access your data — request a copy of everything we have
• Correct inaccurate information
• Delete your data (subject to legal retention obligations)
• Export your scan history in CSV format
• Object to specific processing activities

To exercise any of these rights, email Sales@Maezoinc.com from the address associated with your account.

8. Children's Privacy

CheckPoint is not directed at anyone under 18. We do not knowingly collect information from minors. If you believe a minor has provided us information, please contact us and we'll delete it.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect and the right to opt out of any "sale" of personal information. We do not sell personal information.

10. European Privacy Rights (GDPR)

If you are in the European Economic Area, the legal bases we rely on for processing your data are: (a) performance of a contract (to provide the Service), (b) legitimate interest (fraud prevention, service improvement), and (c) consent (where applicable).

11. Changes to This Policy

We may update this Privacy Policy occasionally. Material changes will be communicated by email to admin contacts at least 30 days before they take effect. The "Last updated" date at the top will always reflect the current version.

12. Contact Us

Questions, requests, or concerns about privacy? Email us:

Maezo Inc.
Email: Sales@Maezoinc.com
Website: icheckpoints.com
State of incorporation: Massachusetts, USA