Privacy policy

Effective 2026-09-28.

Controller: ALGD LTD, 121 Glencam Road, Omagh, Tyrone, BT79 7HB, United Kingdom. Data-protection contact: support@guardround.app.

What we hold

Account details for each firm (firm name, contact name and email), a login per staff member (email and a scrypt hash of the password — never the password), and the operational records the firm creates: sites, checkpoints, shifts, tour checks, incidents, incident photos and generated reports.

Incident photos and personal data

Incident records may contain images of identifiable people or property, and are entered by the firm's own guards. The firm is the controller of that content and decides what is captured, how long it is kept and who receives a client link; we are the processor.

Where it lives

On servers provided by Fly.io (US region, iad) with the database and media on an encrypted-at-rest volume, and payment details held by Stripe, Inc. — cards are never stored by us.

Cookies

One cookie: a session cookie (HttpOnly, SameSite=Lax) that keeps a signed-in user signed in. No analytics, no advertising trackers, no third-party embeds.

Retention and your rights

Records are kept while the firm's account is open and deleted 30 days after cancellation on request. A firm's administrators can export everything at any time. Data subjects can write to support@guardround.app to exercise access, correction or deletion rights; we hand requests that concern a firm's records to that firm.