Privacy Policy

Last updated: May 13, 2026

SecureAssess ("we", "us") operates the SecureAssess mobile application (the "App"). This policy explains what personal data we collect, how we use it, and the choices you have.

Information we collect

• Account data. If you sign in, we store your email address and a server-issued user ID so we can sync your assessments across your devices.
• Assessment content. Risk assessments you create — including titles, scores, notes, photos, and emergency contacts you choose to add — are stored locally on your device and, if cloud sync is enabled, on our servers tied to your account.
• Device & diagnostic data. We collect basic, non-identifying device information (OS version, app version, crash logs) to keep the App stable.
• Subscription data. Purchase, renewal, and entitlement status are processed by Apple and RevenueCat (our subscription analytics provider). We receive a pseudonymous customer identifier and entitlement flags — never your payment card or full Apple ID.

How we use information

• To operate the App and sync your data across your devices.
• To verify your active Pro subscription and unlock paid features.
• To diagnose crashes and improve reliability.
• To respond to support requests you send us.

Information we do NOT collect or sell

• We do not sell or rent personal data to third parties.
• We do not run advertising or behavioral tracking inside the App.
• We do not access contacts, photos, camera, or location until you explicitly grant permission, and only for the feature that needs it (e.g. attaching a photo to a report).

Data sharing

We share limited data only with these processors, all of whom are bound by their own privacy commitments:

• Apple Inc. — payment processing for App Store subscriptions.
• RevenueCat, Inc. — subscription state management. See RevenueCat's privacy policy.
• Replit, Inc. — hosting infrastructure for our API and database.

Data retention & deletion

Locally stored assessments remain on your device until you delete them or uninstall the App. Cloud-synced data remains on our servers while your account is active. To delete your account and all associated data, email Andy.kelly10@me.com from the address tied to your account; we will permanently erase your data within 30 days.

Children

SecureAssess is intended for adults using it in a professional security-assessment context. It is not directed at children under 13, and we do not knowingly collect data from children.

Your rights

Depending on where you live (EEA, UK, California, etc.) you may have the right to access, correct, export, or delete the personal data we hold about you. Email us at Andy.kelly10@me.com and we will respond within 30 days.

Changes to this policy

We may update this policy from time to time. Material changes will be announced inside the App. The "Last updated" date at the top reflects the current version.

Contact

Questions about privacy? Email Andy.kelly10@me.com.