1. Introduction

This document (the "Privacy Policy") explains what information is collected when you use the Checkly mobile application (the "Application"), how we use it, with whom we share it, and how you can exercise your rights regarding it.

The Application is intended for business owners and private users to record and manage cheques received or issued. Using the Application constitutes acceptance of this Privacy Policy. If you do not agree to these terms — please refrain from using the Application.

This Policy has been drafted in accordance with the Israeli Privacy Protection Law 5741-1981, the European Union General Data Protection Regulation (GDPR), and the policies of the Apple App Store and Google Play Store.

2. Information We Collect

2.1 Information You Provide

• Account information: email address, password (stored hashed, never in plaintext), business owner name, business name, business type, tax ID, phone number.
• Cheque data: amount, due date, cheque number, payee/supplier name, notes, VAT.
• Cheque images: photos you capture or upload from your photo library, used for automatic OCR field extraction.
• Supplier data: names and labels of suppliers/customers you add manually.

2.2 Automatically Collected Data

• Technical data: device type, OS version, application version, install identifier.
• Basic usage data: login times, primary actions (for troubleshooting purposes only).
• Crash diagnostics: in case of a crash — error log and technical device data.

2.3 Device Permissions

• Camera: for capturing cheque photos. Activated only when you open the camera screen.
• Photo library: for selecting an existing cheque photo. Activated only when you tap "Pick image".
• Notifications: for reminders about cheque due dates. Can be enabled or disabled at any time.

You are not required to grant all permissions. You may decline or revoke permissions from your device settings, though certain features may not function.

3. How We Use Your Data

• To enable you to register, log in, and manage an account in the Application.
• To store and synchronize your cheques across devices.
• To perform automatic OCR extraction of cheque fields from photos.
• To send notification reminders about due dates.
• To send email confirmation and password-reset messages.
• To diagnose and fix bugs, and to improve Application performance.
• To comply with legal obligations when required.

We do not use your data for advertising, we do not sell your data to third parties, and we do not share it with ad networks or data brokers.

4. Sharing Data with Third Parties

The Application uses external service providers to operate. The following providers receive certain data, but are bound to protect it under professional agreements and applicable law:

Cheque images are sent to Anthropic for immediate processing only and are not retained in their systems, per the Anthropic Privacy Policy.

5. Data Storage and Retention

• Your data is stored on Supabase servers, encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Your password is stored as an irreversible hash (bcrypt) — no one at Checkly can read it.
• Cheque data is retained for as long as your account is active. Upon account deletion — data is removed within 30 days.
• Crash diagnostic data is retained for up to 90 days.
• Data we are legally required to keep (e.g. for investigations) will be retained per the legal requirement.

6. Data Security

We apply industry-standard security measures to protect your data:

• TLS 1.2+ encryption for all network traffic.
• Database encryption at rest.
• Row-Level Security (RLS) — every user sees only their own data.
• Sensitive API keys are stored server-side only and never exposed in the Application bundle.
• Automatic daily backups.

Nevertheless, no security method is perfect. We recommend using a strong password and not sharing it.

7. Your Rights

Subject to applicable law, you have the right to:

• Right of access: receive a copy of the data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your account and all related data.
• Right to portability: receive your data in a structured format (JSON) for transfer to another service.
• Right to object: object to specific data processing.
• Right to restriction: request to limit how your data is used.
• Right to withdraw consent: at any time.
• Right to lodge a complaint: with the Israeli Privacy Protection Authority or the relevant authority in your jurisdiction.

To exercise these rights — contact us at checklychek@gmail.com. We will respond within 30 days.

8. Children Under 16

The Application is not intended for minors under 16. We do not knowingly collect data from children. If we become aware that a child under 16 has provided us with information — we will delete it promptly. A parent or guardian who notices this is invited to contact us.

9. International Data Transfers

Your data may be transferred to and stored on servers outside your country of residence, including in the US and the EU. We ensure that any such transfer is performed in compliance with appropriate standards, including EU Standard Contractual Clauses (SCCs) where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be displayed in the Application and/or sent via email before taking effect. The last-updated date appears at the top of this document. Continued use of the Application following an update constitutes acceptance of the new version.

11. Contact Us

For any questions, inquiries, or to exercise your rights — we are happy to assist:

• Email: checklychek@gmail.com
• Signup site: registercheckly.com

Our support team will respond to your inquiry as soon as possible, and no later than within 30 business days.