Privacy policy

Who manages your information

The workplace using Checky decides why it collects employee and visitor information and who may access it. Checky processes those records to provide the service. Ask the workplace for its own privacy notice and retention policy.

Checky also uses account, billing and service information to run the product. For questions about Checky or this notice, email privacy@polarise.io.

Information collected

Account information includes your name, email address, sign-in details and any profile image you add. Workspace records may include employee names, emails, roles, departments, attendance times and kiosk PIN credentials.

Visitor records include a name, email address, any phone number supplied, host, visit dates and sign-in and sign-out times. Workplaces may also store safety acknowledgements and roll-call records. Returning visitors can be recognised by email at the kiosk.

When billing is enabled, payment providers process payment details and subscriptions. Checky uses service activity, browser and device information, error reports and account identifiers for analytics and product operation.

How information is used and shared

Information supports sign-in, workplace access, attendance, visitor management, safety roll-calls, account support and billing. Authorised workplace users can access records according to their permissions.

Service providers process information needed to operate Checky. These include Convex for application data and authentication, Resend for email delivery, PostHog for analytics and feature flags, and Autumn and Stripe for billing when enabled. Google processes authentication information when you choose Google sign-in. Providers may process data outside your country. Contact us for details about the providers, locations and transfer arrangements used for your workspace.

Cookies and analytics

Checky uses cookies and local storage for sign-in and browser state. When analytics is configured, PostHog records page views, product activity and errors, and associates signed-in activity with your account ID, name and email. Contact us with questions about analytics or your information.

How long records are kept

Visitor names, email addresses and phone numbers are anonymised 90 days after the visit; the visit itself stays in the workplace's counts. Attendance records remain until removed through the service or a deletion request is handled. Ask the workplace about its own retention requirements.

Account deletion is available in account settings. A workspace owner must transfer ownership to an admin, or delete the workspace, before deleting their account. Deleting a workspace requires any paid subscription to be cancelled first. Billing providers may retain records under their own policies and legal obligations. Contact us about deletion from backups and other service providers.

Your choices and rights

Ask the workplace that collected your information to explain its legal basis for processing and to handle requests to access, correct, delete or restrict use of your records. Depending on the law that applies, you may also have rights to portability, to object to processing, or to withdraw consent where processing relies on consent.

Email privacy@polarise.io if your request concerns your Checky account or you need help finding the right contact. You may complain to your local data protection authority. In the UK, contact the Information Commissioner's Office at ico.org.uk.