Privacy Policy

Who we are

Checkin (the iPhone app, its share extension and this website) is operated by Naomi Martinez (OMI STUDIO), located in Mexico (“Checkin”, “we”, “us”). We are the data controller (in Mexico, the responsable) for the personal data described here.

Questions, requests or complaints about privacy: itscheckinapp@gmail.com.

Information we collect

Accounts

Checkin doesn’t offer accounts in the current version. There’s no sign-in, and your places stay only on your iPhone. If optional accounts are offered in a future version and you create one, we’ll collect:

• Your email address and a user ID, through Sign in with Apple, a one-time email code, or Google sign-in if it’s offered.
• Your name, only if you choose to share it with Sign in with Apple.
• Sign-in tokens, which would be stored in your iPhone’s Keychain.

We’ll update this policy before any of that becomes available.

Your places and library

The places you save, their categories, your notes, Must Go flags, check-ins and visit dates, reactions, trips, collections and recent searches are stored on your device.

In the current version, your library isn’t backed up or synced to our servers. It moves to a new iPhone only with your iPhone’s own backup (iCloud or a computer) or Quick Start, and you can export it at any time in Settings › Data export. If optional accounts are offered in a future version and you sign in, Checkin would also keep a private backup copy of your library in our cloud storage so you can restore it on a new phone. Only you would be able to access it, and it would be deleted when you delete your account.

Links you share or paste

When you share a post or paste a link, we receive the link and up to 500 characters of the text that came with it. To find the places mentioned, we retrieve the public content of that post: caption, title, transcript or subtitles, the creator’s public handle, top public comments and up to four images. We may store copies of those public images to show where a place came from.

We use this content only to identify places and to show you the source. We don’t use it to build a profile about you.

Location

Checkin asks for location permission only when you first use a feature that needs it, such as centering the map or finding places near you. Permission is “While Using the App” only. Checkin never collects your location in the background.

Your location is used on your device to center the map and sort places by distance. When you search for places nearby, your approximate coordinates are sent with that search to our server and to Google Places so results are relevant to where you are. We don’t keep a history of your location.

Photos

If you pick a profile picture, you choose it with the iPhone’s photo picker. Checkin can’t see the rest of your library. The picture stays on your device and isn’t uploaded to us.

Sharing

There are no public profiles or public collections in the current version: nothing you save is published or visible to other Checkin users. When you share a place, a list or an image of your stamp, it goes through the iPhone’s share sheet only to the person or app you pick, and that app’s own terms apply to what you send.

If public profiles or collections are offered in a future version, they’ll be optional and off unless you turn them on, and we’ll update this policy to describe what becomes visible before they’re available.

Purchases

Premium subscriptions are sold and billed by Apple. We never see your payment card or billing details. The app receives your subscription status from Apple on your device.

Usage, device and security data

• A random install ID created on your device. It isn’t linked to your Apple ID or advertising identifier.
• In-app usage events (for example, that a place was saved) are logged only on your device and are never sent to us. You can switch them off in Settings › Data & privacy.
• Abuse prevention. To stop automated abuse of the import service, we create a one-way hash of your IP address and browser or device user agent and keep it in our request logs.
• We don’t use advertising SDKs, and Checkin doesn’t access the advertising identifier.

This website

This website uses Vercel Web Analytics, which counts visits without cookies and without identifying you across sites. Our hosting provider processes your IP address and browser information to deliver pages and keep them secure. The Easter egg counter on our home page is saved only in your browser’s local storage. Details are on our Cookies page.

When you contact us

If you write to us, we use your message and contact details to answer you.

How we use information

We use personal data to:

1. Provide Checkin: read the links you share and find the places in them, show place details and places near you, and run trips, Spin and check-ins. (Performance of our contract with you.)
2. Keep Checkin safe and working: prevent abuse and fraud, rate-limit imports, fix bugs. (Our legitimate interests.)
3. Improve Checkin: understand, in aggregate, how this website is used, with the cookieless analytics described above. In-app usage events stay on your device. (Our legitimate interests.)
4. Communicate with you: answers to your questions and important notices about the service or these terms. (Contract and legitimate interests.)
5. Meet legal obligations: respond to lawful requests and keep records required by law. (Legal obligation.)

Where we rely on your consent, such as location or photo access through iOS permissions, you can withdraw it at any time in your iPhone’s Settings.

We don’t sell your personal data, we don’t share it for cross-context behavioral advertising, and we don’t use it for automated decisions that have legal or similarly significant effects on you.

AI processing

Checkin uses artificial intelligence (currently the Google Gemini API) on our servers to read the content of the posts you import and identify the places mentioned. We send the post’s content, not details about you. AI can make mistakes: you review what Checkin found before keeping it, and you can edit or delete anything. You can turn this off in Settings › Data & privacy › “Let AI read my links and add tips”.

Who we share it with

We share personal data only with providers that help us run Checkin. They process it on our behalf and under contracts that limit their use of the data:

Provider	What they do for us	Data involved
Supabase	Database, file storage and server functions (and sign-in, if optional accounts are offered in a future version)	Import records, place details and public post images, abuse-prevention logs (and account data and library backup, if accounts are offered in a future version)
Google (Gemini API)	AI analysis of imported posts	Public post content and images
Google (Places API)	Place details, photos and search	Place searches, approximate location for nearby searches
Bright Data	Retrieves the public content of TikTok, Instagram, YouTube and Facebook links you import	The link you shared
Apple	Maps (MapKit), App Store purchases	As described in Apple’s privacy policy
Vercel	Hosts this website, cookieless analytics	IP address, browser information, page views

We may also disclose information if required by law or to protect the rights and safety of our users or others. If Checkin is involved in a merger or acquisition, your data may be transferred, and this policy will continue to protect it.

International transfers

Our main servers are in the United States. If you use Checkin from another country, your data will be transferred there. Where required (for example from the EU, UK or Mexico), we rely on safeguards such as the European Commission’s Standard Contractual Clauses or your consent, and we require our providers to protect your data.

How long we keep it

• Your library (places, trips, collections, notes, stamps and preferences): on your iPhone until you delete it with Settings › Delete my data or delete the app. We don’t keep a copy.
• Account data and library backup, if optional accounts are offered in a future version: until you delete your account.
• Import records (the link and shared text): up to 14 days after the import.
• Public post images and place details stored to show the source of a place: as long as they’re needed for that place.
• Abuse-prevention logs: only as long as they’re useful for security, then deleted or kept only in anonymous, aggregated form.
• Support messages: as long as needed to help you and to keep a record of the request.
• Copies in our providers’ backups are overwritten on their regular cycle, typically within 30 days.

Deleting your data

In the app, tap your passport picture (top right of Map or Library), then the gear icon to open Settings, scroll to the bottom, tap Delete my data and confirm. This erases all your places, trips, collections, notes, stamps and preferences on your device, and Checkin goes back to the welcome screen. It can’t be undone, so export your places first (Settings › Data export) if you want a copy.

A few things can stay on our servers without being linked to a name or account: links you imported remain in our import records for up to 14 days after each import, abuse-prevention logs are kept as described above, and public business information and public post images remain part of our place catalog. To ask us to delete import records sooner, contact us.

Deleting your data doesn’t cancel a Premium subscription. Cancel it in your iPhone’s Settings › Apple Account › Subscriptions. More details are on our Delete your data page.

Your rights

Depending on where you live, you have the right to:

• Access and portability: export your places at any time in the app (CSV and GPX), or ask us for a copy of your data.
• Correction: edit your places, notes and profile in the app, or ask us.
• Deletion: delete your data in the app (Settings › Delete my data), or ask us.
• Objection and restriction: turn off AI reading of your links or in-app usage events in Settings › Data & privacy, revoke permissions in iOS Settings, or object to other processing by contacting us.
• Withdraw consent at any time, without affecting earlier processing.
• Complain to your data protection authority.

Mexico: you can exercise your ARCO rights (access, rectification, cancellation and opposition) and revoke your consent as described in our aviso de privacidad.

California: you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing. We don’t sell or share personal information as those terms are defined by California law, and we won’t discriminate against you for exercising your rights.

To make a request, contact itscheckinapp@gmail.com. We may need to verify your identity before acting on a request. We reply within the time required by law (for example, one month under the GDPR and 20 business days under Mexico’s law).

Children

Checkin is not directed to children under 13, and we don’t knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we’ll delete it. In places where a higher age applies to consent for online services, users under that age need a parent’s permission.

Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers, and access is limited to people who need it. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your data and will notify you and the authorities of a breach when required.

Changes to this policy

If we change this policy, we’ll update the date at the top. For important changes, we’ll also let you know in the app or on this website before they take effect.

Contact

Naomi Martinez (OMI STUDIO) · itscheckinapp@gmail.com