Privacy Policy

1. Information We Collect

• Account information: the email address and/or phone number you provide during sign-up. Phone numbers are used to deliver SMS one-time passcodes.
• Authentication data: tokens used to verify your identity securely via Privy.
• Wallet addresses: the public Ethereum and Solana addresses of the self-custodial wallet created for your account via Privy. We store only public addresses — never your private keys or recovery phrase, which we cannot access.
• On-chain activity: CTAG reward balances and transactions associated with your public wallet address.
• Scan data: product scan events including timestamps and product identifiers.
• Report details: information you submit in counterfeit or quality reports, including any purchase location you choose to enter. This is typed in by you — CheckTag does not collect GPS or device location.
• Payout details: if you request a reward withdrawal, the bank account details you provide (account number, bank code, and account name), which are used to set up a transfer recipient with our payment processor.
• Device information: device type, operating system, and app version for troubleshooting.

2. How We Use Your Information

• To create and manage your CheckTag account.
• To authenticate you securely and maintain session integrity.
• To process product scan events and deliver relevant content.
• To generate product summaries, health insights, and answer your product questions using AI.
• To process the reward withdrawals and payouts you request.
• To improve our services based on usage patterns.
• To send transactional communications (e.g., OTP codes).

3. Data Sharing

We do not sell your personal data. We share data with trusted third-party service providers who help us operate the platform: authentication and embedded-wallet infrastructure (Privy); payment processing and bank payouts (Paystack); SMS delivery of one-time passcodes (Twilio); email delivery; product identification via barcode lookup providers (Go-UPC, Open Food Facts, Barcode Lookup, and Barcode Spider), to which a scanned product's barcode is sent; AI product summaries and the in-app assistant (xAI / Grok), to which product and scan metadata may be sent to generate summaries and answer your questions; and cloud infrastructure and database hosting (Railway). We may also disclose data when required by applicable law.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your account and all associated data at any time via the app settings or by contacting us at support@checktag.io.

5. Rewards, Wallet & Security

Inside the app you earn reward points for verifying products, redeemable for cash-back to a linked bank account (processed via Paystack). Points are a loyalty balance, not a cryptocurrency, and the app does not buy, trade, or exchange digital assets. Separately, a non-custodial (self-hosted) wallet is provided through Privy; your private keys are generated and secured on your device and are never transmitted to, stored by, or accessible to CheckTag. You retain sole control of your wallet and any digital assets, including CTAG rewards — CheckTag cannot access, transfer, freeze, or recover your keys or funds. Any CTAG redemption or on-chain transfer is performed outside the app, on the CheckTag website, authorized with your Privy sign-in and signed by you on your device. For the data we do process, we implement industry-standard security measures including HTTPS encryption, JWT-based authentication, and access controls. However, no method of data transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

CheckTag is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately to have it removed.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you, as well as the right to object to or restrict processing. To exercise any of these rights, please contact us at support@checktag.io.

8. Third-Party Links

Our app and website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their respective privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Effective" date at the top of this page. Your continued use of CheckTag after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please reach out to us at support@checktag.io. We aim to respond within 5 business days.