Privacy Policy

1. Information We Collect

• Account information: email address provided during sign-up.
• Authentication data: tokens used to verify your identity securely via Privy.
• Wallet addresses: the public Ethereum and Solana addresses of the self-custodial wallet created for your account via Privy. We store only public addresses — never your private keys or recovery phrase, which we cannot access.
• On-chain activity: CTAG reward balances and transactions associated with your public wallet address.
• Scan data: product scan events including timestamps and product identifiers.
• Device information: device type, operating system, and app version for troubleshooting.

2. How We Use Your Information

• To create and manage your CheckTag account.
• To authenticate you securely and maintain session integrity.
• To process product scan events and deliver relevant content.
• To improve our services based on usage patterns.
• To send transactional communications (e.g., OTP codes).

3. Data Sharing

We do not sell your personal data. We may share data with trusted third-party service providers who assist us in operating our platform, including authentication and embedded-wallet infrastructure (Privy), payment processing (Paystack), cloud infrastructure (Railway), and database services. We may also disclose data when required by applicable law.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your account and all associated data at any time via the app settings or by contacting us at support@checktag.io.

5. Security & Wallet Custody

CheckTag provides a non-custodial (self-hosted) wallet through Privy. Your private keys are generated and secured on your device and are never transmitted to, stored by, or accessible to CheckTag. You retain sole control of your wallet and any digital assets, including CTAG rewards — CheckTag cannot access, transfer, freeze, or recover your keys or funds, and all on-chain transactions are authorized and signed by you on your device. For the data we do process, we implement industry-standard security measures including HTTPS encryption, JWT-based authentication, and access controls. However, no method of data transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

CheckTag is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately to have it removed.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you, as well as the right to object to or restrict processing. To exercise any of these rights, please contact us at support@checktag.io.

8. Third-Party Links

Our app and website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their respective privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Effective" date at the top of this page. Your continued use of CheckTag after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please reach out to us at support@checktag.io. We aim to respond within 5 business days.