Privacy Policy

1. Introduction

This Privacy Policy describes how Apparent Logic, LLC ("we," "us," or "our") handles data in connection with the Check ID mobile application (the "App").

By using the App, you agree to this Privacy Policy. If you do not agree with this policy, please do not use the App.

Check ID is designed with privacy as a fundamental principle. We believe the best way to protect your privacy is to not collect your data in the first place.

Check ID is offered as a free app, a one-time individual upgrade (Check ID Pro), and a paid business subscription (Check ID for Teams). Except where a section is specifically labeled for Teams, this policy describes the free and individual tiers, where your data stays on your device and in your private iCloud. Check ID for Teams stores certain team data on our servers — see “Check ID for Teams (Business Accounts)” in Section 2.

2. Information We Collect

We never keep an ID's personal details — no name, birth date, or ID number. On the free and individual tiers we collect no personal information from you at all; on Check ID for Teams we store the account and team data described below under “Check ID for Teams (Business Accounts),” including a one-way cryptographic pass-back code that self-deletes and, by itself, can't be used to reconstruct a name, birth date, or ID number.

ID Scanning (Barcode and NFC)

Check ID scans multiple types of identification documents:

• Physical IDs: Driver's licenses and state IDs via PDF417 barcode scanning
• Mobile Driver's Licenses: Digital IDs from Apple Wallet
• ePassports and National ID Cards: International documents via NFC scanning on supported iPhones

For all scan types: Scanning happens on your device, and an ID's personal details — name, birth date, ID number — are never stored. Team accounts keep only a pass-back code: a one-way cryptographic code derived on your device from the scanned ID. It contains no name, birth date, or ID number, and it's built so that a breach of our servers alone can't be turned into a list of your patrons — recovering an identity from it would require also having the original ID to check against. The code self-deletes after a short window.

Digital wallet IDs (mobile driver's licenses presented from Apple Wallet) are verified cryptographically at the moment of presentation, but they do not participate in pass-back detection. A wallet ID is bound to its holder's device and protected by that device's own biometrics, so the scenario pass-back detection guards against — one physical card being handed back through a line to let someone else use it — doesn't practically apply to a wallet credential.

Optional Scan History

Check ID offers an optional 7-day scan history feature. If enabled:

• A record of scan activity (date, time, age verification result) is stored locally on your device
• No personally identifiable information is retained in the scan history
• History automatically expires after 7 days
• You can disable this feature or clear history at any time in settings

Your Private Data (Stored in Your iCloud)

On Check ID Free and the individual Check ID Pro upgrade, the following information is stored in your private iCloud container and syncs across your devices. This data is protected by Apple's iCloud security and is never accessible to us or any third party:

• Guest Lists: Names and notes you manually enter into a personal guest list are stored in your private iCloud container. (Check ID for Teams works differently — see “Check ID for Teams (Business Accounts)” below.)
• App Preferences: Your settings and preferences (such as minimum age thresholds) are stored in your iCloud container.

Check ID for Teams (Business Accounts)

The commitments above — on-device scanning, optional history kept only on your device, and guest lists in your private iCloud — describe Check ID Free and the individual Check ID Pro upgrade. Check ID for Teams is a paid subscription for businesses, and it works differently: to support multiple staff, shared devices, compliance reporting, and cross-device sync, certain data is stored on our servers (“Check ID Cloud”) rather than only on your device. If your organization uses Check ID for Teams, the following also applies.

What a Teams account stores on Check ID Cloud:

• Account information: the email address and sign-in identifiers (such as passkeys or Sign in with Apple) used to create and access the account. Check ID for Teams is passwordless — we do not store passwords.
• Organization & venue details: the business or organization name and venue information you provide.
• Team members: staff names and roles, and (for shared-device check-in) optional staff PINs stored only as one-way hashes.
• Registered devices: records of the shared devices your organization activates.
• Scan events: the date, time, result (approved or rejected), method, and the staff or device attribution of each ID check. No personally identifiable information from the scanned ID is ever stored — we record that a verification happened and its outcome, never the cardholder’s name, date of birth, photo, or document data.
• Guest list entries: the names, tags, and notes your team chooses to add to shared guest lists. Unlike the personal guest lists described above, Teams guest lists are stored on Check ID Cloud, not your private iCloud — they're organization-scoped and deletable by the account owner at any time. This is information your team enters — not data extracted from scanned IDs.
• Passback detection: privacy-preserving one-way hashes used to detect the same physical ID being re-used within a short time window. These hashes cannot be reversed to reveal the name, birth date, or ID number they were derived from, and are deleted after the window. Digital wallet IDs do not participate in passback detection — see “ID Scanning (Barcode and NFC)” above.
• Audit logs: records of team-management actions (inviting a member, registering a device, changing settings, editing a guest entry) for accountability and compliance.

Roles and responsibilities. For data your organization enters or generates through Check ID for Teams (team members, guest lists, scan events, audit logs), your organization is the data controller and Apparent Logic, LLC acts as a data processor on your behalf. A Data Processing Addendum (DPA) is available on request at support@checkidapp.com.

Retention. Scan events are kept for your organization’s configured retention period (two years by default, adjustable) and then permanently deleted. Audit logs are retained for compliance. Guest list entries persist until your team deletes them. Passback hashes are deleted after the configured detection window.

Anonymous Usage Analytics

We collect limited, anonymous usage analytics to monitor the health and performance of the App. This helps us identify bugs and performance issues.

What we DO collect (anonymously):

• Feature usage statistics (e.g., which features are used most often)
• Performance metrics (e.g., app launch time, response time)
• Device type and iOS version (for compatibility testing)

What we DO NOT collect:

• IP addresses
• Customer identifiers or account information
• Any information from scanned ID barcodes
• Names, addresses, or any data from guest lists
• Location data
• Any personally identifiable information

3. How Your Information is Used

ID Scanning

When you scan an ID (via barcode or NFC), the App processes the information locally to:

• Display the cardholder's age and verify against your minimum age setting
• Show relevant ID information for visual verification
• Optionally record scan activity in your local 7-day history (no PII retained)

Your Private Data

Data stored in your private iCloud container is used exclusively for the App's functionality:

• Guest list information helps you manage entry control and track attendees
• Preferences customize the App to your specific needs
• iCloud sync allows your data to be available across all your devices

Anonymous Analytics

Anonymous usage analytics are used solely to:

• Improve app performance and reliability
• Understand which features are most valuable to users
• Ensure compatibility across different devices and iOS versions

Your personal data is never sold or rented, and never shared with advertisers, data brokers, or trackers. The limited service providers we use to run the service (see Section 5) process data only on our instructions.

4. Analytics, Tracking & Advertising

Check ID uses only anonymous, privacy-respecting analytics. Zero advertising. Zero tracking.

What We Use

We collect anonymous usage analytics to monitor app health and performance. This is limited to basic feature usage statistics and performance metrics—all without any personally identifiable information.

What We DO NOT Use

• Google Analytics or similar services — Never
• Facebook Pixel or social media trackers — Never
• Third-party analytics frameworks — Never
• Data brokers or data sharing networks — Never
• Advertising networks or SDKs — Never
• Behavioral profiling or user tracking — Never
• IP address collection — Never
• Cross-app tracking — Never

There are NO advertisements in Check ID. Your attention is not for sale.

5. Third-Party Services

We never sell or rent your data, and never share it with advertisers, data brokers, or trackers. To run the service — especially Check ID for Teams — we rely on a few trusted providers (“sub-processors”) that handle data only on our instructions.

The App and service connect to:

• Apple iCloud: On the free and individual tiers, your guest lists and app preferences are stored in your private iCloud container, governed by Apple's privacy policies.
• Apple App Store: App downloads, updates, and in-app purchases — including Check ID for Teams subscriptions bought in the App Store, which Apple bills.
• Check ID Cloud (our servers): anonymous usage analytics for all users; for Check ID for Teams accounts, the account and operational data described in Section 2, including team guest lists. No personal details read from a scanned ID are stored here — the only thing derived from an ID is the one-way, self-deleting pass-back code.
• Hosting & infrastructure: Check ID Cloud runs on DigitalOcean, which hosts our servers and database.
• Email: Amazon Web Services (SES) sends account emails such as sign-in links and team invitations.
• Payments (Business accounts): If your business pays for a subscription on the web, payment is handled by Stripe, which processes your billing contact and card details directly. We never receive or store full card numbers.

We do NOT integrate with, share data with, or connect to:

• Google or Facebook services
• Third-party analytics platforms
• Advertising networks
• Data brokers or marketing platforms
• Social media integrations

6. Data Security

We take data security seriously and implement multiple layers of protection:

Your Private Data

• iCloud Encryption: On the free and individual tiers, your guest lists and preferences are stored in your private iCloud container, protected by Apple's end-to-end encryption
• Device Security: Data on your device (including optional scan history) is protected by iOS encryption, passcodes, and biometric authentication
• No PII Transmission: An ID's personal details (barcode or NFC) are never transmitted—we never receive them. Team accounts send only a one-way cryptographic pass-back code that self-deletes
• Local Processing: All ID scanning and verification happens entirely on your device

Anonymous Analytics

• Anonymous analytics are transmitted over encrypted connections
• No personally identifiable information is included in analytics
• Analytics data cannot be linked back to individual users

While no system is 100% secure, we never collect an ID's personal details, so there's nothing to expose. The only thing derived from an ID is a one-way cryptographic pass-back code, built so a breach of our servers alone can't be turned into a list of your patrons, that self-deletes.

7. Your Rights & Control

You have complete control over all your personal data stored by the App:

• Access: View all your guest lists and settings directly in the App at any time
• Modify: Edit or update any information you've entered
• Delete: Remove individual entries or clear all data through the App's settings
• Export: Your data is included in your iCloud backups and standard iOS device backups

You do not need to contact us to exercise these rights—you have direct control through the App interface.

When you delete the App, all local data is removed. Your iCloud data persists in your iCloud account and can be managed through iCloud settings.

8. Children's Privacy

Check ID is intended for use by adults (18+) in professional age verification and access control contexts. The App is not directed at children under 13.

We do not knowingly collect personally identifiable information from children under 13. Because anonymous usage analytics contain no personally identifiable information, the App complies with the Children's Online Privacy Protection Act (COPPA) and similar regulations.

9. Legal Compliance

Check ID complies with applicable privacy laws and regulations, including:

• GDPR (General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• COPPA (Children's Online Privacy Protection Act)
• Other applicable privacy laws

Because we don't keep an ID's personal details, we have no name, birth date, or ID number on file to provide in response to legal requests, subpoenas, or court orders. The only thing derived from an ID is a one-way cryptographic pass-back code that self-deletes after a short window; on its own it cannot be turned back into a name, birth date, or ID number.

Anonymous analytics data cannot be linked to specific individuals and therefore cannot be used to identify users.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page.

Material changes will be communicated through:

• App Store update notes
• In-app notifications
• This website

Your continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy.

The current version is always available at: checkidapp.com/privacy