Back to Home

Privacy Policy

Effective Date: August 22, 2026 Last Reviewed: August 22, 2026

Preamble

This Privacy Policy is a legally binding document that governs the relationship between you — as a user of the Check-In platform — and [Entity Name] operating as Check-In (“Check-In,” “we,” “us,” or “our”). It sets out, in clear and transparent terms, how we collect, use, store, disclose and protect your personal information when you access or use our website at thecheckin.ca and our mobile application (collectively, the “Platform”).

Check-In is a community safety reporting platform that allows residents of a neighbourhood to submit, view, and coordinate around local safety reports. The Platform is built with official data-sharing partnerships with law enforcement, including Halton Regional Police Service, to support timely and accountable community safety outcomes.

We are committed to processing your personal information lawfully, fairly and transparently, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), and other applicable provincial privacy legislation. By accessing or using Check-In, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should discontinue use of the Platform.

1. Introduction and Scope

This Privacy Policy applies to all personal information that Check-In collects and processes through its website and mobile application. It governs every interaction you may have with the Platform — whether you are browsing as a visitor, registering and verifying your identity, submitting a community safety report, acting as a neighbourhood moderator, or contacting our team.

The purposes for which we collect your information are specific and limited to operating a safe, accountable community reporting platform. Check-In does not collect personal information for commercial advertising or marketing purposes and does not sell your personal information under any circumstances.

This Policy also governs the limited and specific circumstances in which we share information with Halton Regional Police Service and with third-party service providers who support the technical operation of the Platform. Such sharing is carried out only where necessary, and, in the case of police disclosure, only in accordance with our Police Data-Sharing Agreement and applicable law.

2. Definitions

For clarity and consistency, the following terms carry the meanings set out below wherever they appear in this Privacy Policy:

  • “Personal Information” means any information about an identifiable individual — information that alone, or in combination with other information, can reasonably be used to identify a specific person. This includes your name, email address, phone number, identity verification documents, GPS location data, and any content you submit as part of a report.
  • “Platform” refers collectively to the Check-In website (thecheckin.ca) and mobile application, and all related digital services operated by Check-In.
  • “User” or “you” means any individual who accesses, registers on, or interacts with the Check-In Platform, including registered members, neighbourhood moderators, and general visitors.
  • “Report” means a community safety submission made by a User through the Platform, which may include photographs, videos, written descriptions, and associated location and time metadata.
  • “Neighbourhood Moderator” means a User appointed by Check-In to review and manage reports submitted within a specific neighbourhood or community association.
  • “Police Partner” means a law enforcement agency with which Check-In maintains a formal data-sharing relationship, including Halton Regional Police Service.
  • “Processing” means any operation performed on personal information, including its collection, storage, use, disclosure, transmission, retention, or deletion.
  • “Third-Party Service Provider” means an independent organization engaged by Check-In to provide technical services necessary for the functioning of the Platform, including Google Firebase (cloud hosting, database, and authentication).

3. Information We Collect

Check-In collects only the information reasonably necessary to operate a safe, accountable community reporting platform. The categories of personal information we collect, and how each is collected, are described below.

3.1 Identity and Account Information

When you register for an account, you provide us with:

  • Your full legal name
  • Your email address
  • Your phone number
  • Proof of identity, submitted for identity verification at registration
  • Your neighbourhood or community association

Identity verification exists to keep the Platform accountable — it allows Check-In and, where necessary, our police partners, to trust that reports come from real, identifiable community members, without displaying your identity publicly (see Section 7).

3.2 Location Information

  • GPS coordinates captured at the time you submit a report
  • The general neighbourhood location associated with your account

3.3 Content You Submit

  • Photographs
  • Videos
  • Written descriptions of incidents
  • Date, time, and location metadata embedded in submitted content

3.4 Technical and Device Information

  • Device type and operating system
  • App version
  • Session logs and error logs, retained for Platform stability purposes

3.5 What We Do Not Collect

Check-In is deliberate in what it does not collect. We do not:

  • Collect or store financial or payment information;
  • Use your personal information for commercial advertising or targeted marketing;
  • Sell your personal information to any third party; or
  • Share your identity publicly with other Platform users.

4. How We Process Your Information

The table below provides a structured overview of each category of personal information Check-In collects, how it is collected, the purpose for which it is processed, the parties with whom it may be shared, and the applicable retention period. Full retention details are set out in our Data Retention Policy.

Category Data Collected How Collected Purpose Shared With Retention
Identity & Account Full legal name, email address, phone number, proof of identity, neighbourhood/community association Directly entered by user at registration; ID submitted for verification Account creation, identity verification, secure/accountable use of the Platform Check-In staff & moderators; Firebase (hosting) Account info: duration of account + [Insert Period] after closure. ID records: [Insert Period], then securely deleted
Location Information GPS coordinates at time of report submission; general neighbourhood location tied to account Captured automatically when a report is submitted; neighbourhood set at registration Attach accurate location context to reports; route reports to the correct neighbourhood Neighbourhood moderators; Check-In staff; Halton Regional Police Service (where applicable) Tied to report retention — see below
Content You Submit Photographs, videos, written incident descriptions, embedded date/time/location metadata Uploaded directly by the user when filing a report Enable community safety reporting and review Neighbourhood members (report only, not your identity); moderators; HRPS where shared under the Police Data-Sharing Agreement Archived after 2 weeks from submission, unless subject to an active legal hold
Technical & Device Data Device type, operating system, app version, session logs, error logs Automatically generated by the app Platform stability, security, and troubleshooting Firebase (hosting/processing) [Insert Period] for security purposes

5. Purpose and Legal Basis for Processing

Check-In processes personal information only for lawful, specific, and clearly identified purposes. Under PIPEDA, we rely on your meaningful consent as the primary legal basis for collection and use. For certain processing activities — such as sharing reports with Halton Regional Police Service under our data-sharing agreement, or retaining records for platform accountability — we also rely on our legitimate interest in operating a safe and functional community safety platform, and, where applicable, on our legal obligations as a data controller working with a police partner.

The principal purposes for which we process personal information are:

  • To verify your identity and create a secure, accountable user account;
  • To enable you to submit community safety reports within your neighbourhood;
  • To allow neighbourhood moderators and Check-In staff to review submitted reports;
  • To share relevant reports with Halton Regional Police Service in accordance with our Police Data-Sharing Agreement and applicable law;
  • To send you notifications related to your account or to reports in your area;
  • To improve the safety, security, and functionality of the Platform; and
  • To comply with our legal obligations.

Check-In does not process personal information for marketing, targeted advertising, profiling for commercial gain, or any purpose unrelated to community safety reporting. We do not engage in automated decision-making that produces legal or similarly significant effects on Users.

6. Consent

6.1 How We Obtain Consent

By creating an account on Check-In, you provide meaningful consent for the collection, use, and disclosure of your personal information as described in this Privacy Policy. Before completing registration — including submission of proof of identity — you are presented with this Policy and asked to confirm your understanding. We do not collect personal information before this consent is given.

6.2 Withdrawal of Consent

You may withdraw your consent at any time by closing your account through the Platform or by contacting us at team@thecheckin.ca. Upon account closure, your personal account data will be deleted in accordance with Section 10 below. Reports you submitted may be retained in accordance with our Data Retention Policy so as not to disrupt the safety record of other community members or any active legal hold.

Please note that withdrawal of consent will result in the loss of access to all Platform features. Check-In does not discriminate against Users who choose to withdraw consent — the decision is yours to make freely and without penalty.

6.3 Age Requirements

The Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at team@thecheckin.ca and we will take reasonable steps to remove such information.

7. Information Visible to Other Users

Check-In is, by its nature, a community platform. Reports you submit (excluding your identity) are visible to verified members of your neighbourhood community within the Platform, so that neighbours can stay informed and coordinate around local safety.

Your full legal name, email address, phone number, and identity verification documents are never displayed publicly or shared with other Platform users. Your identity is known only to Check-In staff and appointed neighbourhood moderators for accountability purposes, and to Halton Regional Police Service only in the specific circumstances set out in Section 8.2.

You are solely responsible for the information you choose to include in a written report description. Check-In advises Users to exercise care and to avoid including unnecessary sensitive personal information about themselves or others in report content.

8. Data Sharing and Third-Party Disclosure

Check-In does not sell, trade, or commercially exploit your personal information in any manner. We share your information only in the limited circumstances described below.

8.1 Check-In Staff and Neighbourhood Moderators

Employees, contractors, and appointed neighbourhood moderators who require access to fulfill their roles in managing the Platform may access relevant personal information and report data. All such individuals are bound by confidentiality obligations.

8.2 Halton Regional Police Service

We may share reports and associated personal information with Halton Regional Police Service in the following circumstances:

  • Where sharing is required under our formal Police Data-Sharing Agreement between Check-In and Halton Regional Police Service;
  • Where disclosure is required or authorized by law, including pursuant to a warrant, court order, or lawful demand; or
  • Where we believe disclosure is necessary to prevent or respond to an imminent threat to public safety.

We do not share personal information with police automatically upon report submission. The process for review and sharing is governed by our Police Data-Sharing Agreement.

8.3 Third-Party Service Providers

We use the following third-party vendors, who process your personal information on our behalf as data processors:

  • Google Firebase (cloud hosting, database, and authentication) — data is processed and stored on Firebase servers, which may be located outside Canada; and
  • [Insert any additional vendors, e.g. push notification providers, analytics]

All third-party vendors are required to process personal information only as instructed by us and are prohibited from using it for any other purpose. Where data is stored outside Canada, we take reasonable steps to ensure comparable privacy protections are in place (see Section 9).

8.4 Disclosure Required by Law

Check-In may disclose personal information where required to do so by applicable law, court order, regulatory directive, or the lawful request of a government authority. Any such disclosure will be carried out only to the extent required and will, where legally permissible, be communicated to you.

8.5 No Other Sharing

Beyond the parties listed above, Check-In does not share your personal information with any other third party. Your report content visible to neighbourhood members is not transmitted to any external system beyond Firebase for storage.

9. Cross-Border Transfer of Data

Check-In is committed to complying with PIPEDA's requirements for the transfer of personal information across borders. Your data is stored on Google Firebase infrastructure, which may be located outside Canada. By using the Platform, you acknowledge that your personal information may be transferred to and processed in a jurisdiction outside Canada.

Check-In takes appropriate steps to ensure that cross-border transfers are carried out with adequate protections in place. Firebase maintains contractual commitments to data security and confidentiality. We do not authorize overseas recipients to use your information for any purpose other than the one for which it was transferred.

10. Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our specific retention periods are set out in full in our Data Retention Policy. In summary:

  • Submitted reports: archived after 2 weeks from the date of submission, unless subject to an active legal hold;
  • Account information: retained for the duration of your account and deleted [Insert Period, e.g. 30 days] after account closure;
  • Identity verification records: retained for [Insert Period] and then securely deleted; and
  • System and access logs: retained for [Insert Period] for security purposes.

You may request early deletion of your personal information as described in Section 12 below.

11. Security Safeguards

Check-In takes the security of your personal information seriously and has implemented technical and administrative safeguards appropriate to the nature and sensitivity of the data we hold, including:

  • Encryption in transit using TLS/SSL protocols
  • Encryption at rest for stored data
  • Role-based access controls limiting staff access to data required for their specific roles
  • Multi-factor authentication for administrative access
  • Regular security reviews and audits
  • [Insert any additional security measures, e.g. penetration testing schedule, SOC 2 compliance]

No security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities in accordance with PIPEDA and our Incident Response Policy.

12. Your Rights

Subject to applicable law, you have the right to:

12.1 Right to Access

You may request access to the personal information Check-In holds about you, including your account details and report history.

12.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.

12.3 Right to Deletion

You may request deletion of your personal information (“right to erasure”), subject to our legal obligations to retain certain records, such as reports under an active legal hold.

12.4 Right to Withdraw Consent

As described in Section 6.2, you may withdraw your consent to our processing of your personal information at any time.

12.5 Right to Complain

You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or Ontario's Information and Privacy Commissioner (IPC) if you believe your privacy rights have not been respected.

12.6 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at team@thecheckin.ca or through thecheckin.ca. We will respond to all access and correction requests within 30 days. Where we are unable to fulfill a request, we will explain the reason in writing.

13. Cookies and Analytics

Our website at thecheckin.ca may use cookies and analytics tools to understand how visitors use the site. [Insert specific details about cookies/analytics once confirmed.] You may adjust cookie preferences through your browser settings.

14. Children's Privacy

The Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at team@thecheckin.ca.

15. Changes to This Privacy Policy

Check-In may update or revise this Privacy Policy from time to time to reflect changes in our services, applicable law, regulatory requirements, or operational practices. Where changes are material, we will notify Users through the Platform or by email prior to the change taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms, except in circumstances where applicable law requires your explicit consent for specific changes. If you do not agree with a revised Policy, you may close your account and discontinue use of the Platform.

16. Contact and Privacy Inquiries

Check-In is committed to addressing privacy-related concerns promptly and in good faith. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which your personal information is handled, or if you wish to exercise any of the rights described in Section 12, please contact us:

Email: team@thecheckin.ca
Website: thecheckin.ca

We will acknowledge all privacy inquiries within a reasonable period and will make every effort to resolve your concern within thirty (30) days of receipt.

17. Effective Date

This Privacy Policy becomes effective on August 22, 2026 and supersedes all previous privacy notices or statements published by Check-In. It remains in force until amended or replaced in accordance with the procedure described in Section 15.