CheckIn for iOS
CheckIn is an iOS application that lets you record the places you visit, add notes, photos and voice memos to them, and review your history over time. This policy explains what the app collects, why, where it is stored, and what control you have.
The app is operated by the developer of CheckIn. For any privacy question or request, contact tariq@teknawi.net.
By creating an account and using CheckIn, you agree to this policy. If you do not agree, please do not use the app.
CheckIn supports one sign-in method: Sign in with Apple. When you sign in we receive and store a Firebase account identifier, and, if Apple shares them with us, your email address and your name. If you choose Apple's "Hide My Email" option, we only ever receive a private relay address and never your real one. We record which of the two you used.
Each time you check in, the app stores a record that can contain:
If you use the paid features, the app also stores the trips you create (title, date range and your written summary), the custom tags you define, and any shared lists you create or join.
Shared lists and invitations. When you invite someone to a shared list, the email address you type is stored so the invitation can be matched. Anyone who is signed in to CheckIn and who holds that invitation code can read it. Please only invite people whose address you are comfortable sharing, and treat invitation codes as private.
Location is the core of the app, so we want to be precise about it.
You can revoke location access at any time in the iOS Settings app. The app cannot record new check-ins at your current position without it.
CheckIn asks for the following permissions. Each is optional, is requested only when you first use the related feature, and can be withdrawn in iOS Settings.
| Permission | Used for |
|---|---|
| Location | Recording where a check-in happened |
| Camera | Taking a photo to attach to a check-in |
| Photo library | Attaching existing photos, and saving exports |
| Microphone | Recording voice memos |
| Calendar | Suggesting check-ins from your events. Calendar contents are read on your device only and are never uploaded |
| Face ID | Unlocking the Private Vault view |
| Notifications | Geofence arrival reminders |
Each time you open the app, a small profile record is updated with your account identifier, the time you last opened the app, your app version and build, your iOS version, your device model identifier such as iPhone16,2, and your current subscription tier.
CheckIn also includes Google Firebase components that collect data automatically once the app starts:
These are provided by Google and are governed by Google's privacy policy in addition to this one.
CheckIn does not currently serve advertisements. No advertising SDK is active in the app and no ad is requested or displayed. Ad-free access is offered as a paid benefit because advertising may be introduced in a future version.
If you have previously seen a prompt asking permission to track you across other companies' apps and websites, you may decline it with no loss of functionality. If advertising is introduced later, this policy will be updated before it goes live, and you will be asked again.
We do not sell your personal information, and we do not share it with data brokers or advertisers.
Your data is processed by the following parties on our behalf:
| Service | Provider | What it handles |
|---|---|---|
| Authentication, database, file storage, analytics, crash reporting, messaging | Google Firebase | Your account, check-ins, photos and voice memos, and diagnostics |
| Sign in with Apple, geocoding, maps, subscriptions | Apple | Sign-in, converting coordinates to addresses, map display, purchase processing |
| Weather lookup | Open-Meteo | Receives only an approximate coordinate, rounded to about 11 metres, with no account identifier, name or device identifier attached |
We may also disclose information where we are legally required to, or to investigate abuse of the service.
Please read this section carefully. CheckIn includes an administrator function. A small number of authorised accounts, currently limited to the app's developer, can view the account details and stored check-in data of all users, including coordinates, addresses, names, notes, ratings, tags and attached media.
This access exists to operate the service, investigate faults and respond to abuse. It is restricted by server-side rules, so ordinary accounts cannot reach other users' data.
Two consequences follow from this, and we want to state them plainly:
If you would not be comfortable with an administrator being able to read something, please do not record it in the app.
On the Diamond plan you may switch on end-to-end encryption for note and review text. When enabled, that text is encrypted on your device before it is uploaded, using a key held in your device's Keychain.
That key never leaves your device and is not copied to iCloud or to a replacement device. If you lose the device, erase it, or reinstall the app, any text encrypted with that key becomes permanently unreadable, including to us. There is no recovery mechanism, by design.
Some information never leaves your phone. This includes your geofence reminders and their coordinates, unreviewed automatic check-in drafts, your calendar sync selection, your map theme, and check-ins queued while you are offline. A copy of your most recent check-ins is also kept in a shared container so the home screen widget can display them.
This on-device data may be included in your encrypted iPhone or iCloud backups, which are controlled by Apple and by your own device settings.
Check-ins are kept until you delete them or delete your account. On the Diamond plan you can enable automatic deletion of check-ins older than a retention window you choose.
You can delete your account from Profile in the app. This deletes your check-in records and your sign-in credentials.
Known limitation. Account deletion does not yet remove every trace automatically. Photos and voice memos already uploaded to storage, your profile record, and any shared lists you created may persist after deletion. We are addressing this. In the meantime, email tariq@teknawi.net and we will erase the remainder manually on request.
Depending on where you live, you may have the right to access, correct, export or erase your personal data, to object to or restrict processing, and to complain to your local data protection authority.
You can export your own check-in history at any time from the app as a CSV file, and as a PDF report on paid plans. For anything else, contact tariq@teknawi.net and we will respond within 30 days.
Google Firebase and our other providers operate globally, so your information may be stored and processed in countries other than your own, including the United States. Those countries may have different data protection laws than your own.
CheckIn is not intended for children under 13, and we do not knowingly collect data from them. Because the app records precise location, we ask parents and guardians to supervise use by minors. If you believe a child has provided us with personal data, contact us and we will delete it.
Data is transmitted over encrypted connections and stored on Google Firebase infrastructure, protected by server-side access rules and by app integrity checks. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your data, we will notify you and the relevant authorities where the law requires it.
We may update this policy as the app changes. The date at the top always reflects the current version. Material changes, such as the introduction of advertising, will be announced in the app before they take effect.