Privacy Policy

CheckMate A380 · Last updated: 7 July 2026

Seneca Labs ("we," "our," or "us") operates the CheckMate A380 mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the App. By accessing or using the App you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account we collect:

• Email address (used as your login identifier)
• Password (stored in hashed form via Firebase Authentication; we never store or have access to your plain-text password)

1.2 Study and Progress Data

To provide a personalised study experience we collect:

• Flashcard progress, scores, and review history
• Study session statistics (mode used, duration, accuracy)
• Topic-level performance metrics
• Study streaks and engagement patterns
• Bookmarked questions and review-later flags

This data is stored in Google Firestore and linked to your account so that it persists across devices and sessions.

1.3 User-Created Content

If you create gameplans, scenarios, notes, or annotations within the App, this content is stored on our servers (Google Firestore) so that it is available across your sessions.

If you choose to share a gameplan to the community, that content becomes visible to other users of the App. Shared content displays the username or identifier you choose. You may delete your own shared contributions at any time, after which they are removed from the community library within 7 days. We reserve the right to remove community content that we determine is inappropriate, inaccurate, or in violation of our Terms of Use.

Reporting. If you report a shared scenario or note as objectionable or inappropriate, we record your account identifier together with the report (one report per user, per item) so that we can review and moderate community content. When an item is reported by three distinct users it is automatically hidden from the community feed pending our review.

Blocking. If you block a contributor, that preference is stored on your device so that their shared content is hidden from you. Blocking is local to your device — it is not shared with other users and is not disclosed to the blocked contributor.

We operate a zero-tolerance approach to objectionable content and abusive behaviour in community-shared content, and may remove content and restrict accounts accordingly, as set out in our Terms of Use.

1.4 Subscription Information

If you subscribe through Apple In-App Purchase, Apple processes your payment. We receive purchase confirmation and subscription status via RevenueCat, which manages our subscription lifecycle on our behalf. We do not receive or store your payment card details, bank account information, or Apple ID password. RevenueCat receives an anonymised user identifier linked to your subscription, used to validate your access tier across sessions and devices.

1.5 Usage Analytics

We collect usage data through Google Firebase Analytics to improve the App, including:

• Which study modes, topics, and question sets are used
• Session duration and frequency
• Feature engagement patterns (e.g., Scenario Builder use, community browsing)
• App performance and screen flow patterns
• Approximate location (country/region, derived from IP address)
• Device type, operating system version, and language

Analytics events are linked to a Firebase user identifier associated with your account. This data is used for product analytics and improvement only — it is not shared with advertising networks, sold, or used for marketing profiling. Analytics data is retained for 14 months by default. You may request deletion of all analytics data linked to your account by contacting us at the email address in Section 10.

1.6 Crash and Diagnostic Information

If the App crashes or encounters an error, we automatically collect diagnostic information via Google Firebase Crashlytics, including:

• Device model and operating system version
• App version and state at time of crash
• Stack trace and error logs
• An anonymised user identifier

This data is used solely to identify, reproduce, and fix bugs. Crash diagnostic data is retained for 90 days.

1.7 Information We Do Not Collect

We do not collect:

• Your name, phone number, physical address, or date of birth
• Government-issued identification
• GPS or precise location data
• Device contacts, photos, calendar, or other personal media
• Biometric data
• Browsing history outside the App

2. How We Use Your Information

We use the information described above to:

• Provide and maintain your account and study progress
• Synchronise your data across sessions and devices
• Personalise your study experience based on your performance
• Verify and manage your subscription status
• Review reports, moderate community-shared content, and enforce our community standards
• Identify and fix bugs and performance issues
• Analyse aggregated usage patterns to improve content and features
• Communicate important service updates (e.g., terms changes, security notices)

We do not use your data for advertising, marketing profiling, or sale to third parties.

3. Third-Party Services and Data Processors

The App relies on the following third-party services, each of which acts as a data processor under our instructions:

Google Firebase (Google LLC) — Authentication, database (Firestore), file storage, analytics (Firebase Analytics), and crash reporting (Crashlytics). Firebase processes account credentials, study data, user-created content, usage events, and crash diagnostics. Firebase's privacy practices are governed by Google's Privacy Policy at https://policies.google.com/privacy.

Apple Inc. — App distribution and In-App Purchase processing. Apple handles payment data and provides us with subscription confirmation. Apple's privacy practices are governed by its Privacy Policy at https://www.apple.com/legal/privacy/.

RevenueCat (RevenueCat, Inc.) — Subscription lifecycle management. RevenueCat receives an anonymised user identifier and subscription event data to validate your access tier. RevenueCat's privacy practices are governed by its Privacy Policy at https://www.revenuecat.com/privacy.

We do not integrate third-party advertising networks, social media trackers, or data brokers.

4. Data Storage, Location, and Security

4.1 Where Your Data Is Stored

Your data is stored on Google Cloud Platform servers managed by Firebase. Depending on Firebase's regional configuration, this may include data centres in the United States, the European Union, or other regions where Google operates Cloud infrastructure. Data is not stored on servers physically located in the United Arab Emirates.

4.2 Security Measures

We implement appropriate technical and organisational measures to protect your data, including:

• Hashed password storage (we cannot read your password)
• Industry-standard encryption for data in transit (TLS) and at rest
• Firestore security rules limiting data access to authenticated user-scoped queries
• Access controls limiting who within Seneca Labs can view user data
• Regular security reviews

4.3 Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days except where retention is required by applicable law. Analytics data is retained for 14 months by default; crash diagnostic data is retained for 90 days.

5. Your Rights

Depending on your jurisdiction (including the EU under GDPR and the UAE under the Personal Data Protection Law), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your study data in a portable format
• Withdraw consent to data processing
• Opt out of analytics collection (an in-app option may be made available; you may also request this directly)

To exercise any of these rights, contact us at the email address in Section 10. We aim to respond to all data requests within 30 days.

6. Children's Privacy

The App is not directed at children under 17. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 17, we will delete it promptly. Parents or guardians who believe their child has provided us with information may contact us at the email address in Section 10.

7. International Data Transfers

Because our processors operate global infrastructure, your data may be transferred to, stored in, and processed in countries other than your country of residence, including the United States, the European Union, and other regions where Google and our other processors maintain servers. We rely on Google's standard contractual clauses and equivalent legal frameworks to ensure that transferred data receives an adequate level of protection. By using the App you consent to this transfer.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the App, our processors, or applicable law. We will notify you of material changes by posting the updated policy at our public privacy policy URL and updating the "Last updated" date above. Continued use of the App after changes are posted constitutes acceptance of the revised policy.

9. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, as applicable in the Emirate of Ajman where Seneca Labs is registered. Any disputes shall be subject to the exclusive jurisdiction of the courts of the United Arab Emirates.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Seneca Labs
Email: checkmatea380me@gmail.com