GuardlanternPrivacy Policy
The short version
Guardlantern holds your company's records so you can run your guard company. We never sell anyone's data, we don't show ads, and we don't use tracking or advertising cookies. Your company decides what goes in and can have it exported or deleted.
Who decides what is collected
Your company (the guard company) decides what to record about its officers, office staff, clients and sites. We process that data for your company to run the service. Questions about your own records at a guard company go to that company first; we will help them answer.
What we collect
Accounts: name, email, phone, role, language and a hashed password. Officers: what the company enters (license and training records, pay rate, emergency contact, hire date) and what the officer app records while on duty: clock-in and clock-out times and location, a selfie photo at clock-in when the company turns it on, location every 3 minutes while clocked in and the app is open, checkpoint scans, reports, photos, video and voice notes. We don't track location off duty and we don't do face recognition on selfies. Clients: contacts, sites, requests, visitors and report ratings. Pilot requests: the name, company, contact and details you send on the pilot form. Technical: a sign-in cookie, your language choice in the browser, and server logs with IP addresses for security.
How it is used
To run Guardlantern for your company: schedules, time and pay, patrols, reports, client reports, compliance alerts and invoices; to keep accounts secure; and to fix problems. The app's workforce views (for example hours trends and check-in answers) are for the company's managers and are based only on data in the app.
Who else processes it
Anthropic (Claude), when AI report writing is on: the text needed to draft that report (for example the incident details, site and people's names, or a lesson's text for a quiz) is sent to Anthropic's API to write the draft. Under Anthropic's commercial terms, that data is not used to train their models. Browser push services (Apple, Google, Mozilla) deliver notifications a user turned on. Map tiles are loaded from OpenStreetMap, which sees the map area being viewed. Once connected: an email delivery service for invites and reports, and Stripe for card payments. We don't share data with anyone else unless the law requires it.
How long we keep it and backups
We keep your company's records while your account is open, because guard companies often must keep reports and time records for years. Every night we back up the database and uploaded files, and we keep the last 14 nights. When a company leaves and asks for deletion, we delete its data within 30 days; backups that contain it age out within 14 days after that.
Your choices and rights
Your company can correct records in the app and ask us for a full export or deletion. A person can ask the company, or us, to see, correct or delete their personal data, subject to what the company must keep by law. Officers can decline notifications in their browser. If your state gives you more privacy rights (for example California), we honor them.
Security
Data is sent over HTTPS, passwords are stored hashed, each company only sees its own data, and every sign-in has a role that limits what it can see and change. Changes to important records are kept in an audit log.
Children
Guardlantern is for businesses and their staff. It is not meant for anyone under 18.
Changes and contact
If this policy changes, we post the new version here with a new date and tell account owners in the app. Questions or requests: use the request form on the founding pilot page, or ask in the app.