Privacy Policy

Guard Tour Log ("the App", "we", "us", "our") is developed by Plainside Labs ("Developer"). This Privacy Policy explains how the App handles information.

Plain-language summary: Guard Tour Log is an offline-first app. Everything you create — shifts, checkpoint scans, incident reports, photos, and location stamps — is stored locally on your device. The free App does not send this data to us. If your company subscribes to Guard Tour Log Team, our paid web service, we process the account, device and report-delivery information needed to provide it, as described in section 2. We do not sell your personal data.

1. Information the App accesses

The App runs entirely on your device. It accesses the following, only on your device, to provide its features:

• Camera — to scan checkpoint QR codes and to take photos for incident reports. Photos are saved in the App's private storage on your device.
• Location (GPS) — to add a time-and-location stamp to shift events (shift start/end, checkpoint scans, incidents) so a report can show where an event occurred. Location is accessed only while you are using the App (foreground). If location is unavailable, the App still records the event without coordinates.
• Content you enter — shift details, guard name, site/location name, and incident titles and descriptions.

All of the above stays on your device. The App does not require an account, sign-in, or internet connection to work.

2. Information we collect

Free App. When you use the App without Team, we (the Developer) do not collect, receive, store on our servers, or otherwise access any of the data you create in it.

Guard Tour Log Team. If your company uses Team, we process the following on our servers to provide it:

• Account information — the company name, and each web user's name, email address and password (stored only as a secure hash).
• Report branding — the company name and logo the company adds for its reports.
• Guard seats and devices — the number of seats, any guard name assigned to a seat, activation codes (stored as hashes), and for each activated phone a random identifier generated by the App, a device credential (stored as a hash) and when it last checked in.
• Subscription and billing — the email address used at checkout, and the subscription's status, seat count and billing period, as reported to us by Paddle. We do not receive or store card or other payment details.
• Google Drive connection — if the company connects Google Drive, the Google account email, the folder reports are saved to, and an access token (stored encrypted). We request access only to files the App creates in that Drive.
• Delivered-report records — when a report is delivered to the company's Drive: the report's ID, guard name and date, the Drive file ID, and when it was delivered. The report PDF itself is passed to Google Drive and not stored on our servers.

Shift details, checkpoint scans, photos, locations and incident descriptions stay on the guard's device, apart from what is contained in a PDF report delivered to the company's Drive.

Support. If you contact us through the support form or by email, we receive your name, email address and message so we can reply.

3. How your data is shared

The free App does not automatically share your data with us or with any third party.

The only time your data leaves your device is when you choose to export a PDF shift report and share it (for example, by email or a messaging app). In that case, you decide who receives the file, and its handling is governed by whatever app or service you use to send it. We are not involved in that transfer.

For Team, information is shared only as needed to run the service: with Paddle, which processes Team payments as our merchant of record; with Google, when the company connects Google Drive and reports are delivered to it; and with the hosting and database providers that run our servers. We do not sell personal data or share it for advertising.

4. Third-party services

The App is distributed through Google Play and may use Google Play In-App Review to let you rate the App, along with standard Google Play services. Google may process certain information (such as aggregate install statistics or crash data reported by your device) under Google's own policies, independently of us. See Google's Privacy Policy: https://policies.google.com/privacy.

Team payments are processed by Paddle under its own privacy policy: https://www.paddle.com/legal/privacy. Google Drive delivery uses Google's services under Google's Privacy Policy, linked above.

If you reach our website to purchase Team from the App through Google Play's external content links flow, Google Play gives us a reporting identifier for that visit. If you start a checkout, we keep that identifier with it, and if you complete the purchase we send it to Google, as Google Play requires, to report that purchase. It is not used for anything else.

The App contains no advertising, no third-party analytics, and no tracking SDKs.

5. Data retention and deletion

Because all data is stored locally, you remain in full control:

• You can delete individual shifts, incidents, or photos within the App (where supported).
• Uninstalling the App removes all data it stored on your device.

For the free App, we hold no copy of your data and therefore cannot access or delete it on your behalf.

For Team, we keep the information in section 2 while the company's account or subscription is in use. A company can disconnect Google Drive and deactivate guard devices at any time, and can contact us to ask for its Team data to be deleted.

6. Children's privacy

The App is intended for use by security personnel and is not directed to children. We do not knowingly collect any data from children.

7. Security

Your data is kept in the App's private storage on your device and is protected by your device's own security (screen lock, operating-system sandboxing). Because the free App does not transmit or store your data externally, it is not exposed to any server-side breach on our side. You are responsible for the physical and access security of your device.

For Team, data is sent over encrypted connections, passwords, activation codes and device credentials are stored only as hashes, and Google Drive access tokens are stored encrypted.

8. Your rights

The free App does not collect or store your personal data on our servers, so for it we hold no personal data to provide, correct, or delete — you manage all of that data directly on your device. For Team, you can ask us to access, correct, or delete the personal data described in section 2. If you have questions about your rights — including under the GDPR or CCPA, where applicable — contact us using the details below.

9. Permissions summary

• CAMERA — QR checkpoint scanning and incident photos.
• ACCESS_FINE_LOCATION (foreground) — event location stamps.

The App requests each permission at the moment the related feature is first used. You can revoke permissions at any time in your device settings; the related features (scanning, photos, location stamps) will then be limited.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted at this URL with an updated effective date.

11. Contact

Plainside Labs support@plainsidelabs.com

Guard Tour Log is an independent product and is not affiliated with, endorsed by, or associated with TrackTik, Silvertrac, GuardsPro, QR-Patrol, GuardMetrics, or any other mentioned company.