Privacy Policy

The data controller for information processed through the Admin App is the security company that licenses Recce Net and to which the signed-in administrator belongs (“your employer”). Direct any data subject request to your employer's Data Protection Officer in the first instance.

For platform-level queries relating to the Recce Net service itself, contact: privacy@recce-net.app.

Account information (about you, the administrator)

• Your full name, email address and role.
• Your authentication session token (issued by Supabase Auth and stored locally on the device for the duration of your sign-in).

Operational data displayed in the Admin App

The Admin App reads and presents operational records that are already stored in your employer's Recce Net tenant. These records are created by officers in the field application — the Admin App is a viewer / editor for that data, not a capture surface. Records you may view include:

• Officer profiles, roles and verification documents uploaded by officers.
• Recces — venue details, client names, visit dates, route plans, access points, threat observations, photographs and voice-note transcripts recorded by officers.
• Vehicle compositions, principal profiles, live-ops incident logs and post-event debriefs.
• AI-generated artefacts (risk scores, summaries, intel briefs, contingency playbooks) that were generated by the field application's server-side AI pipeline before the Admin App fetched them. The Admin App itself does not call any AI provider.
• Activity / audit logs.

Diagnostic information

• Platform (Android) and app version.
• Crash reports and error logs.

• Contractual necessity — to deliver the service your employer has contracted from us.
• Legitimate interests — to operate and secure the platform and to respond to incidents.
• Legal obligation — to keep records as required by UK law, regulators or law enforcement.

• Supabase (authentication, database queries, file URL resolution) — EU region. This is the only network destination the Admin App contacts directly.

Other third parties (OpenAI, Google Maps Platform, WeatherAPI, what3words, Firebase Cloud Messaging) are used by the separate Recce Net field application server-side and not by the Admin App.

The Admin App declares only the minimum permissions needed for a network-backed console:

• Internet (android.permission.INTERNET) — to reach Supabase.
• Network state (android.permission.ACCESS_NETWORK_STATE) — to detect online/offline status.

The Admin App does not request location (neither approximate nor precise), camera, microphone, photos / media, contacts, calendar, SMS, phone, or background-location permissions. It cannot read sensors on the device it is installed on.

Application-level personal data is retained for the duration of your employer's contract with Recce Net plus up to one month, after which it is deleted from our systems unless your employer requests a different retention period in writing. Audit logs required for compliance are kept for longer where the law requires.

Our primary data storage is in the European Union. Where any third-party processor operates outside the UK or EU, transfers rely on UK Standard Contractual Clauses and the UK's adequacy decision where available.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request that inaccurate data be corrected.
• Request deletion (“right to be forgotten”).
• Request that processing be restricted.
• Request a portable copy of your data.
• Object to processing based on legitimate interests.
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk.

See our Account Deletion page for how to close your administrator account.

Data is transmitted over TLS and stored encrypted at rest. Access is gated by Supabase Row-Level Security policies keyed to your administrator role.

Recce Net is a professional-use product for licensed security operators. It is not directed at children and we do not knowingly collect data from anyone under 18.

We may update this policy when new features are released or regulations change. The “Last updated” date at the top of this page will change accordingly.

Questions about this policy or to exercise any of your rights:
privacy@recce-net.app