CheckMasterAI ("we", "our", or "us") operates the platform available at checkmasterai.com. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

We collect information you provide directly:

• Account information — username, password (stored as a bcrypt hash), role, and branch/brand association when your account is created by an administrator.
• Inspection photos — images captured by staff through the mobile app or web portal during an inspection submission.
• Contact form submissions — name, company name, email address, and any message sent through our contact form.

We also collect limited usage data automatically, such as server access logs (IP address, request path, timestamp).

2. How We Use Your Information

• To provide and operate the CheckMasterAI inspection management platform.
• To analyse inspection photos using AI providers (see Section 4) and generate cleanliness scores and feedback.
• To respond to contact form enquiries and sales leads.
• To detect fraudulent submissions (screen captures, fake images) through automated analysis.
• To maintain audit trails for compliance purposes.

3. Data Storage

Your data is stored on Google Cloud infrastructure located in the us-central1 (Iowa, USA) region. Inspection photos are stored in Google Cloud Storage. Account and inspection records are stored in a database on Google Cloud Run persistent volumes.

4. Third-Party AI Providers

Inspection photos are transmitted to one of the following AI providers for analysis, depending on the configuration selected by your organisation's administrator:

• OpenAI — Privacy Policy
• Google Gemini — Privacy Policy
• Anthropic Claude — Privacy Policy

Photos are sent solely for the purpose of generating an inspection score and feedback. We do not authorise these providers to use your images for training their models.

5. The CheckMasterAI Mobile Application

This section describes the CheckMasterAI mobile application for Android and iOS, which staff use to submit inspections.

• Camera — the app requests camera permission solely to photograph the location being inspected. Photographs are taken live within the app; the app never reads images from your device's photo gallery, and it does not access any other media on your device.
• Sign-in credentials on your device — after you sign in, your username and password are stored on the device using the platform's secure credential storage (Android Keystore / iOS Keychain) so that you do not have to sign in again. They are transmitted only to CheckMasterAI's own servers, over an encrypted HTTPS connection, to authenticate your requests. Signing out removes them from the device.
• Photos you submit — inspection photographs are uploaded to our servers and processed as described in Sections 3 and 4. They are not stored in your device's photo library.
• Location — the app does not collect, request, or transmit device location data, and requests no location permission.
• Advertising and analytics — the app contains no advertising, no advertising identifier, and no third-party analytics or tracking SDKs.
• Language preference — your chosen interface language is stored locally on the device only.

6. Data Retention and Deletion

Inspection records and photos are retained for as long as your organisation's account is active. Contact form submissions are retained in server logs for operational purposes.

Account and data deletion. CheckMasterAI accounts are created and managed by your organisation's administrator rather than by self-registration, so there is no in-app account deletion. To have your account and its associated data deleted, ask your organisation's administrator, or contact us directly at info@checkmasterai.com from the address associated with your account. We action verified deletion requests within 30 days. Deleting an account removes its inspection records and the associated photographs from our storage, except where we are required to retain records by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. Turkish residents may exercise rights under the Kişisel Verilerin Korunması Kanunu (KVKK). EU/EEA residents may exercise rights under the GDPR. To submit a request, contact us at info@checkmasterai.com.

8. Cookies

We use session cookies required for user authentication. We do not use tracking or advertising cookies. Language preference is stored in your browser's localStorage.

9. Children's Privacy

Our service is intended for business use only and is not directed at individuals under the age of 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date above.

11. Contact Us

For any privacy-related questions or requests:
CheckMasterAI
info@checkmasterai.com
checkmasterai.com