Privacy Policy Last Updated: March 20, 2026
CertDuty ("we," "us," or "our") operates the CertDuty mobile applications (iOS and Android) and the CertDuty web platform at certduty.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.By using the Service, you agree to the collection and use of information in accordance with this policy.
1. INFORMATION WE COLLECT
1.1 Information You Provide- Account Information: When you create an account, we collect your email address, legal first and last name, phone number, ZIP code, city, and county.
- Authentication Data: If you sign in using Google or Apple, we receive your name, email address, and profile photo from those services. We do not receive or store your passwords from third-party authentication providers.
- Professional License Information: You may choose to store details about your professional licenses, including license type, license number, issue and expiration dates, and related documents such as photos of license cards, training certificates, and requalification records.
- Firearms Information: If you use the Armory feature, you may choose to store information about firearms you own, including make, model, serial number, caliber, type, purchase date, purchase price, and associated CCW permit details.
- Class Enrollment Data: When you enroll in training classes, we collect the information you provide on enrollment forms, which may include your legal name, contact information, guard card number, caliber selections, and other class-specific details.
- Payment Information: Payment processing is handled by Stripe (for class enrollments) and Google Play or Apple (for subscriptions). We do not store your full credit card number, bank account number, or other financial account details on our servers. We receive and store transaction identifiers, amounts paid, and subscription status.
- Referral Information: During onboarding, we ask how you heard about CertDuty.1.2 Information Collected Automatically
- Device Information: We may collect information about the device you use to access the Service, including device type, operating system, and unique device identifiers.
- Location Information: If you enable location-based features (such as distance filtering in the training marketplace), we collect your approximate location. Location data is used only while the app is in use and is not stored on our servers. You may disable location access at any time through your device settings.
- Usage Data: We collect information about how you interact with the Service, including pages viewed, features used, and actions taken.
- Push Notification Tokens: If you enable push notifications, we collect your device token to send you license expiration reminders and other alerts.
1.3 Information from Third Parties- California Department of Consumer Affairs (DCA): If you use the license verification feature for BSIS licenses, we query the California DCA public database to verify your license status. Information returned includes licensee name, license status, expiration date, city, county, and any public disciplinary actions.- Google Play and Apple App Store: We receive subscription status and purchase confirmation data from these platforms when you subscribe to CertDuty PRO.
2. HOW WE USE YOUR INFORMATIONWe use the information we collect to:- Provide, maintain, and improve the Service
- Create and manage your account
- Process payments and subscriptions
- Track and display your professional license statuses and expiration dates
- Send license expiration reminders and compliance alerts
- Facilitate enrollment in training classes
- Verify BSIS license information through the California DCA
- Display nearby training classes based on your location
- Respond to your requests, comments, or questions
- Monitor and analyze usage trends to improve the user experience
- Detect, prevent, and address fraud, unauthorized access, or other illegal activity
- Comply with legal obligations
3. HOW WE SHARE YOUR INFORMATIONWe do not sell your personal information. We may share your information in the following circumstances:
3.1 With Training InstructorsWhen you enroll in a training class, the instructor receives your enrollment form data, including your name, contact information, and any class-specific details you provided. This is necessary to facilitate the training.
3.2 With Service ProvidersWe use third-party service providers to operate the Service:- Firebase (Google): Authentication, database, file storage, cloud functions, and analytics
- Stripe: Payment processing for class enrollments and instructor payouts
- Google Play / Apple: Subscription billing and management
- California DCA API: License verificationThese providers access your information only to perform services on our behalf and are obligated to protect it.
3.3 For Legal ReasonsWe may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
3.4 Business Transfers If CertDuty is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. DATA RETENTIONWe retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.Uploaded documents (license photos, training certificates) are stored in Firebase Storage and are deleted when you delete the associated record or your account.
5. DATA SECURITY We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of data at rest in Firebase and Stripe
- Authentication required for all data access
- Firestore security rules that restrict data access to authorized users
- Secure server-side processing for payments and sensitive operationsHowever, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. YOUR RIGHTS AND CHOICES
6.1 Account InformationYou can update your profile information at any time through the app or web dashboard. You can delete your account through the Account settings, which will remove your personal data from our systems.6.2 Location DataYou can enable or disable location access through your device settings. Disabling location will prevent distance-based class filtering but will not affect other features.6.3 Push NotificationsYou can manage notification preferences within the app or disable push notifications through your device settings.6.4 California Residents (CCPA)If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell personal information)
- Not be discriminated against for exercising your rightsTo exercise these rights, contact us at privacy@certduty.com.6.5 European Residents (GDPR)If you are located in the European Economic Area, you have additional rights including the right to access, correct, port, and erase your data, as well as the right to restrict or object to processing. Contact us at privacy@certduty.com to exercise these rights.
7. CHILDREN'S PRIVACYThe Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete it promptly.
8. THIRD-PARTY LINKS AND SERVICESThe Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
9. CHANGES TO THIS PRIVACY POLICYWe may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
10. CONTACT USIf you have questions or concerns about this Privacy Policy or our data practices, please contact us at:CertDuty
Email: privacy@certduty.com
Website: https://certduty.com