Draft for legal review. Not yet in effect.
Privacy Policy
This policy explains what 24On ("the app", run by [COMPANY LEGAL NAME], "we") collects, why, who it goes to, how long we keep it, and how you can delete it. It covers the app on iPhone, Android and the web.
What you can do without an account
You can open this week's free trainings, workouts and recipes without signing up. In that case we store nothing about you on our servers. Your choices (like which screen you saw last) stay on your device.
What we collect when you have an account
Account details: your email address, and your name if you sign in with Google or Apple. If you use Sign in with Apple and choose "Hide My Email", we only get Apple's relay address.
Profile you choose to fill in: name, rank, service (EMS, Fire, LE or Special Teams), department or agency name, and a profile photo. All of these are optional.
Training records: the drills, workouts and meals you save, the ones you mark done, the date, and the minutes you log. Daily Plans you build, and training and workouts you write for yourself (only you can see them).
Face ID and fingerprint: on the website, a passkey stores a public key and a device label (like "iPhone") with us. In the phone apps, the app lock asks your phone to check your face or finger. Your face and fingerprint never leave your device and we never see them.
Department alerts: if you turn them on, a push token for your phone so we can send you a notification when your department assigns training, shares a training day, or an assignment for you is overdue (officers also get a short list of who has not finished it). Turning alerts off or signing out removes it.
Purchases: your plan, when it renews or ends, and the store transaction ID. Card numbers go to Apple, Google or Stripe, never to us.
Department plans: if you run a department, the names and email addresses of the people you invite. If you join one, your department's officers can see your name, service, and the training and workouts you log (what, when and how long): the plan owner, agency admins and training officers for the whole department, and company officers for their own station and shift. The plan owner, agency admins and training officers also see your email. If you add your legal name and a license or certification number to your profile, the officers who can see your training also see them, for certificates and lesson plan rosters they send to your state or medical director. Meals you log are never shared.
Training certificates (department members and admins only): your legal name, and for each certificate you request, the drill, its date, the minutes you logged and its objective. When your department decides, we also store the approved hours, any approval or course number, the name and title of the person who approved it, the date, and the reason if it was not approved. Your department's training officers and admins see your requests.
Department roles and crew records: if you join a department, its admins record your role (for example company officer) and your station and shift. An officer can log a drill or workout for you when you trained with their crew, and can mark a drill you logged as verified; those entries show the officer's name and become part of your training record. Assignments can be sent to the whole roster or to chosen members.
Department reports and exports: officers who can see your training can download it as reports, lesson plans and spreadsheet files (for example to import into their records system or a state licensing portal), and a department admin can have a monthly training summary emailed to people the department chooses. The monthly summary shows station and shift totals, and shows member names, hours and who is behind only if the admin turns that on. What happens to a report after the department downloads or receives it is up to the department.
Department content: drills, workouts and local protocol notes a department writes for its own roster, and protocol files (PDFs) its training officers attach. If an admin submits an item for review for the main library, we receive a copy of it with the admin's email address.
Basic technical data our providers record to run the service, such as IP address, device type and error logs.
Our marketing website (24onapp.com, separate from the app) uses Google Analytics to count visits and see which pages people read, using cookies. We do not turn on Google's advertising features, and Google Analytics is not used anywhere in the 24On app itself. You can block it with your browser's privacy settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
Usage counts: the app adds up how many times each screen and feature is used each day (for example, how often the grocery list is sent) and sends those totals with your platform. They carry no account, device ID, name, email or anything you typed, are combined with everyone else's into one total per day, and can be turned off in Account > Language and privacy.
Crash reports: if the app hits an error, it sends the error message, the technical trace, the app version, your platform (iPhone, Android or web) and which screen you were on. Crash reports do not include your account, name, email or anything you typed, and are used only to fix bugs.
Apple Health and Health Connect (phone apps, only if you turn them on)
If you connect Apple Health (iPhone) or Health Connect (Android), the app can save the workouts you log (type, start and end time) and, if you choose, the calories of a meal you log. Those are written to the health store on your phone.
The app can also read workouts already there, such as ones from an Apple Watch or another fitness app, but only to show you a list. A workout becomes part of your training log, and is stored with us, only when you tap "Add to log". We read nothing else from them.
We never use this health data for advertising or marketing, never sell it, never store it in iCloud, and never share it with third parties. You can change or remove access at any time in the Health app (Profile > Apps) on iPhone or in Health Connect settings on Android.
What we do not collect
We do not collect your location, contacts, heart rate, weight, body measurements or medical records, and we do not read those from Apple Health. We do not show ads and we do not sell or rent your personal information.
How we use it
To run your account, keep your saved items and training records in sync across devices, unlock paid content, run department rosters and training reports, send department invites, answer support requests, prevent fraud and abuse, and fix problems. We do not use your data to build advertising profiles.
Who we share it with
Service providers that run parts of the app for us: Google Firebase (sign-in, database, file storage, server code, and App Check: on the website, Google reCAPTCHA looks at technical signals from your browser to check that requests come from the real 24On site and not a script; Google's Privacy Policy and Terms apply to reCAPTCHA), RevenueCat (subscription records), Stripe (web payments), Apple and Google (app store purchases and sign-in), and Resend (department invite emails, certificate emails with the certificate attached, and monthly department report emails). Each one gets only what it needs to do its job and is bound by its own terms to protect it at least as well as this policy does.
Your department's officers and admins, if you accept a department invite (see above), including the certificate requests you send them, and the people or systems your department chooses to send its reports, lesson plans and exports to. You can leave a department at any time from More > Account.
When the law requires it, such as a valid court order, or to protect someone's safety.
If the business is sold or merged, your information would move with it under this same policy, and we would tell you first.
How long we keep it
We keep your account data while your account is open. When you delete your account, we delete your profile, saved items, training records, Daily Plans, your own training and workouts, passkeys, department memberships, and any certificate requests that were not approved, right away. Backups held by our providers roll off within 180 days.
Approved certificates are part of your department's training records, so they stay with your department after you delete your account or leave it, for as long as the department keeps its records. You keep the copy that was emailed to you. If a department admin closes the department or deletes their account, the department's records, including approved certificates, are deleted.
Some records we must keep longer: purchase and tax records held by Apple, Google, Stripe and RevenueCat under their own rules, and security logs for up to 30 days.
Each time you agree to the Terms of Use and this Privacy Policy, we keep a record of it: your account ID, email address, how you signed in, which version you agreed to, the date and time, how you agreed (for example, on the sign-up screen), and the app version, device type, language and browser or phone software you used. We keep these records after you delete your account, for 7 years, to show that you agreed if there is ever a dispute, and for no other purpose. They cannot be changed once made.
Deleting your account and data
In the app: More > Account, then Delete account. This deletes your account and the data above. If you signed in with Apple, we also cancel the app's access to your Apple ID.
Without the app: email info@24onapp.com from the address on your account and ask us to delete it. We will confirm within 30 days.
Deleting your account does not cancel a subscription bought through Apple or Google. Cancel it in your phone's subscription settings first, so you are not charged again.
Your choices and rights
Approved certificates cannot be removed from the app, because they are your department's record of the training. To have one corrected or removed, ask your department admin or email us.
You can see and change your profile in More > Account, remove any saved item or training entry, leave a department, or delete everything. Depending on where you live (for example California, Washington, Colorado, Virginia, or the EU and UK), you may also have the right to ask for a copy of your data, to correct it, to delete it, or to withdraw consent. Email us and we will answer within the time your law sets. We will not treat you differently for using these rights.
If you live in Washington, Nevada or another state with a consumer health data law, see our Consumer Health Data Notice.
Security
Data travels over encrypted connections and is stored with Google Cloud's encryption. Access rules limit each person to their own records, and department officers to the records their role allows (company officers to their own station and shift). No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
Children
The app is made for working first responders and is not meant for anyone under 18. We do not knowingly collect information from children under 13. If you think a child has given us information, email us and we will delete it.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.
Contact
[COMPANY LEGAL NAME], [MAILING ADDRESS]. Email: info@24onapp.com.