Ch'rps Privacy Policy

Because Ch'rps is a workplace tool, there are two relevant relationships:

• Company account data (e.g., billing, subscription, company settings): Ch'rps acts as the data controller.
• Employee/User work-activity data (e.g., task completions, NFC scan logs, schedules): Ch'rps processes this data on behalf of, and at the direction of, the Company that administers your account. The Company is responsible for ensuring it has the right to share your information with us and for informing its employees about its own workplace monitoring and data practices.

If you are an employee using Ch'rps because your employer requires it, questions about how your data is used inside your workplace should first be directed to your employer. This Policy describes how Ch'rps itself handles data across the Service.

We collect the following categories of information:

A note on location data

Ch'rps does not track your GPS location or continuously monitor your movement. Task verification works by scanning NFC tags that are physically mounted at fixed locations chosen by the Company (e.g., a walk-in cooler, a host stand). A scan event tells us which tag was tapped and when — not where your device is at any other time.

Information we do not collect

• We do not collect precise GPS/location tracking of your device.
• We do not access your device contacts, photos, or messages.
• We do not currently collect photos as part of task verification (a photo-verification feature may be added in the future and, if so, this Policy will be updated first).
• We do not currently charge for the Service and do not collect or store any payment card information. If paid subscriptions are introduced in the future, this Policy will be updated to describe how billing information is handled before that change takes effect.

We use the information described above to:

• Provide, operate, and maintain the Service, including shift-based task lists, NFC scan verification, and recurring/anytime tasks;
• Authenticate Users via Google sign-in and maintain secure sessions;
• Send push notifications and Live Activity updates related to task lists, reminders, and escalations;
• Generate analytics and reporting for Company managers and administrators (e.g., completion rates, missed-task trends);
• Operate corrective-action and escalation workflows configured by a Company;
• Maintain the security, integrity, and proper functioning of the Service, including diagnosing technical issues;
• Communicate with you about the Service, including support requests you initiate;
• Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use employee task-activity data to serve third-party advertising.

We share information only as needed to operate the Service, and with the following categories of recipients:

• Your employer (Company): Managers and administrators at your Company can see task completion records, timestamps, and related activity data for Users at that Company, as part of the core function of the Service.
• Service providers: We use third-party vendors to host and operate the Service, including Vercel (application hosting), MongoDB Atlas (database hosting), Apple Inc. (push notifications via APNs), and Google (sign-in authentication). These providers process data only as necessary to perform services for us and are bound by their own data-protection obligations.
• Legal and safety reasons: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Ch'rps, our users, or others.
• Business transfers: If Ch'rps is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

We do not share personal information with third parties for their own independent marketing purposes.

We retain Company and User information for as long as the Company maintains an active subscription, and for a reasonable period afterward to allow for account reactivation, comply with legal or accounting obligations, and resolve disputes. A Company administrator may request deletion of its account and associated data by contacting us; certain records may be retained where required by law or legitimate business need (such as billing records).

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encrypted connections (HTTPS/TLS), authenticated sessions via Google OAuth, and access controls scoped by company and role. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Access and correction: You may review and update certain account information within the app, or by asking your Company administrator or contacting us directly.
• Push notifications: You can disable push notifications at any time through your device settings, though this may limit certain features (e.g., task-start alerts, Live Activities).
• Account deletion: Because Ch'rps accounts are provisioned by an employer, deletion requests are generally handled by your Company administrator. You may also contact us directly and we will coordinate with the relevant Company as appropriate.

If you are a resident of a U.S. state with a comprehensive privacy law, you may have additional rights regarding your personal information under that state's law; you may contact us using the information below to make a request, and we will respond consistent with applicable law.

Ch'rps is a workplace tool intended for use by employees of business Customers and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Our web dashboard may use essential cookies and similar technologies (such as session identifiers) required for authentication and core functionality, and may use limited analytics tools to understand how the Service is used and to improve it. We do not use cookies for third-party advertising.

The Service is hosted in the United States and intended for use by Companies and Users located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will post the updated Policy with a revised "Effective date" above, and, for material changes, will provide additional notice where appropriate (such as in-app notice or email to Company administrators).

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Ch'rps
Attn: Boston Bijold
Email: bostonrbijold@gmail.com
Location: Utah, United States

(A dedicated company email will replace the address above once available; the current version of this Policy is always the one linked in the app and on our website.)

This Policy and any dispute arising from it will be governed by the laws of the State of Utah, without regard to its conflict-of-laws principles, unless otherwise required by applicable law.