Privacy policy

1. Information we collect

• Account and company details: your name, email address, phone number, username, account identifier, role, company membership and sign-in information. Your organisation may create your account or provide these details.
• Patrol and shift records: assigned sites and checkpoints, NFC or QR checkpoint identifiers, schedules, shift times, checkpoint scans, missed rounds, incident and SOS reports, notes and handover information.
• Location: coordinates, accuracy and location-verification results associated with actions such as starting a shift, checking a checkpoint or sending an SOS. Site locations are also part of company records.
• Photos and other work content: shift selfies, checkpoint and incident photos, floor plans, and the text or files you or your organisation submit.
• Device and service information: push notification tokens, app and device information, and operational or security logs. Service providers receive network information, such as your IP address, when handling requests.
• Diagnostics: crash and performance reports, including launch time, hangs and memory use, help us fix reliability problems. Patrol’s diagnostic uploads are sent without your signed-in account attached.

The information collected depends on your role, the features you use and your device permissions. Work submissions are associated with your account or company.

2. How we use information

We use information to sign you in, control access, verify checkpoint visits, record shifts, deliver alerts, prepare reports, synchronise queued work, respond to support requests and protect the service. Diagnostics help us investigate failures and improve app performance.

If your employer or another organisation provides Patrol, it decides how its work records are used and which staff may access them. Sentrifiq operates the service for that organisation and handles service administration, security and support. Read this policy alongside your organisation’s workplace privacy notice.

3. Device permissions

• Location: Patrol requests location while you use relevant patrol features. The iOS app does not request always-on background location permission. Location attached to a submitted work record remains in that record.
• Camera and selected images: used for QR scanning, shift selfies, patrol evidence and images you choose to attach. Submitted images are uploaded for the relevant work feature.
• Microphone: used when you choose to dictate a note. Supported speech transcription takes place on the phone; the recording is not retained or uploaded. The resulting text is included when you submit the note.
• Face ID: if you enable the app lock, your device performs authentication. Patrol does not receive your Face ID template. A shift selfie is a separate photograph stored as work evidence.
• Notifications and Live Activities: used to display patrol updates and alerts. Work information may appear on your Lock Screen.

Change permissions and notification previews in iPhone Settings → Apps → Patrol, or Settings → Privacy & Security. Turning off a permission can limit the feature that needs it; it does not delete information already submitted.

4. Who can access information

Your organisation’s authorised owners, administrators and managers can view work information according to their roles. Reports shared or exported by authorised users may also reach clients or other recipients selected by your organisation.

We use Supabase for account authentication, databases, file storage and server processing, and Google Firebase and Apple’s notification services to deliver notifications using device tokens and message content. Apple’s on-device services support features such as location, speech transcription and diagnostics.

Service providers receive information needed to perform their functions and must protect it consistently with this policy and applicable requirements. Their infrastructure may process information outside your country. Contact us about your organisation’s hosting arrangements if you have a data residency question.

We may disclose information when required by law or when necessary to investigate misuse, protect people or the service, or manage a business transfer with appropriate privacy safeguards.

5. Retention and security

We retain account and work information while needed to provide your organisation’s service, address corrections or disputes, and meet applicable record-keeping obligations. Retention depends on the type of record and your organisation’s requirements; there is no single automatic deletion period for all patrol evidence.

Patrol uses encrypted service connections, sign-in controls, company-level access restrictions and protected file access. Local queues and caches allow work to synchronise after a connection returns. Protect your device with a passcode. No system can guarantee absolute security.

Deleting an active record does not immediately erase protected backup copies before their normal rotation. Reports or notifications already delivered to others may remain in their systems.

6. Delete your account

In Patrol, open Settings → Delete my account and follow the confirmation steps, including entering your password. A company owner must leave another owner in place, hand over ownership, or choose to delete the whole company.

Personal account deletion removes your sign-in, identifying profile details and account-linked photos and notification tokens. Historical patrol and shift records remain for the company’s operational history and display “Deleted user”. Retained records may still contain checkpoint, time, location or work content that your organisation can associate with a particular event; account deletion does not erase every company record.

The whole-company deletion option removes the company’s accounts, data and stored files. Copies previously exported, emailed or delivered as notifications are not recalled.

Signing out, uninstalling the app or deactivating an employee is different from deleting an account. If you cannot access your account, or want to request deletion of remaining personal information in work records, email [email protected]. We may verify your identity and coordinate with your organisation about records it must retain.

7. Your privacy choices

You can ask to access, correct or delete your personal information and, where applicable, withdraw consent, object to processing or exercise other rights provided by local law. Your company administrator can help with work-record corrections; you can also contact Sentrifiq directly. Where the law permits, you may raise a complaint with the relevant data protection authority.

Device permission alone does not establish a legal basis for workplace monitoring. Your organisation is responsible for its employment-related processing and for explaining its requirements to you.

8. Children and policy changes

Patrol is intended for authorised adult workplace users, not children. Contact us if a child’s personal information has been submitted so we can investigate and address it.

We update this policy as the service or its data practices change. The date above identifies the current version. Material changes will be communicated through appropriate app, account or organisation channels.

9. Contact Sentrifiq

For privacy questions, account deletion or access requests, email [email protected].

Include “Patrol” and your organisation’s name so we can identify the right service. Do not send your password or one-time codes.