top of page
  • Pinterest
  • Instagram

Privacy Policy

Last updated: 8 October 2026

 

Checked In is a global travel guide and community available through our app and website (the "Services"). The Services are operated by On Point Holdings Pty Ltd (ACN 618 965 807), PO Box 644, Carlton South, Victoria 3053, Australia ("Checked In", "we", "us", "our"). Checked In runs on the Me Business platform, which is also operated by On Point Holdings Pty Ltd. We are the "controller" of your personal information for the purposes of the GDPR and UK GDPR.

 

This Policy explains what personal information we collect, why, who we share it with, how long we keep it, and your choices and rights. It applies under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU General Data Protection Regulation and UK GDPR, and US state privacy laws, wherever they apply to you. Please read it with our Terms and Conditions.

 

Summary

  • The Services are for people aged 18 and over.

  • Location is optional and off until you turn it on. Other people only see where you are when you deliberately post a public check-in.

  • We don't sell your name, contact details, check-in history or precise location to advertisers.

  • Advertisers only get aggregated, de-identified reports.

  • Audio and video calls are not recorded, and private messages are end-to-end encrypted, so we can't read them.

  • You can download, correct or delete your data in Settings or by emailing info@checkedin-app.com.

 

1. Changes to this Policy

We may update this Policy as the Services or the law change. If a change is material, we will tell you in the app or by email at least 14 days before it takes effect, except where a change is legally required sooner. Where the law requires your consent to a change, we will ask for it.

 

2. Information we collect

2.1 Information you give us

  • Account details: name, email address, username, password (stored hashed), and optionally mobile number, date of birth, home country/city, profile photo and bio.

  • Content you post: recommendations, reviews, ratings, photos, Noticeboard posts, Lounge forum posts and chat messages, check-in notes, saved places and Playlists.

  • Trip checklists: When you create a trip checklist, we process information you provide, such as checklist titles, items, optional cover images and checklist updates. If you choose to share a checklist with travel companions, the checklist information is made available to the people you invite so you can plan and manage your trip together.

  • Communications with us: support requests, reports about content or users, survey responses.

  • Marketing preferences: whether you have opted in to marketing from us.

 

2.2 Information collected when you use the Services

  • Precise location (only if you allow it): GPS and network-based location used for check-ins, "nearby" features and location-relevant content (see section 3).

  • Approximate location: city- or region-level location inferred from your IP address.

  • Check-in history: places you check in to, with timestamps and your chosen visibility.

  • Device and technical data: device model, operating system, app version, language, time zone, IP address, device and advertising identifiers (where permitted), push notification token, crash logs and diagnostics.

  • Usage data: screens viewed, searches, taps on content and placements, saves and shares.

  • Call and messaging data: see section 4.

  • Cookies and similar technologies on our website: see section 11.

 

2.3 Information from others

  • If you sign in with Apple, Google or Facebook: your name, email and profile picture as permitted by that provider. We never receive your password.

  • Other users may mention you, tag you in a post or report your content.

  • Analytics, advertising and anti-fraud partners may give us information such as which ad brought you to the app.

 

2.4 Sensitive information We don't ask for health, racial or ethnic origin, religious, political, sexual orientation or similar sensitive information. If you choose to include it in public content (for example a dietary or accessibility need in a recommendation), it will be visible to others. If you use Face ID or fingerprint to unlock the app, that check happens on your device and we never receive your biometric data. Because precise location over time can reveal sensitive details, we treat it with extra care and only collect it with your opt-in consent.

 

2.5 Age The Services are only for people aged 18 and over. We don't knowingly collect personal information from anyone under 18. If we learn we have, we will close the account and delete the information. If you think a child is using Checked In, email info@checkedin-app.com.

 

3. Location and presence features

3.1 Location access is optional and off by default. You can browse The Guide, Postcards and the Directory without it.

 

3.2 If you allow location access, we use it to let you check in, show aggregated presence counts (for example "12 travellers nearby this week"), sort the Right Now / Noticeboard feed by distance, and show content relevant to where you are. We only collect location while you are using the app, unless we ask for and you grant separate background permission for a feature that needs it.

 

3.3 Presence counts are aggregated and de-identified. To reduce the risk of anyone being singled out, we are introducing a minimum threshold so that a count only shows once at least 3 people are counted, along with short delays and approximate rather than exact distances.

 

3.4 Your identity is linked to a place only when you deliberately post a public check-in or a post tagged to a place. You can set check-ins to public, community-only or private, and pause all location features, in Settings.

 

3.5 We currently keep location data linked to your account while your account is active, and you can delete it at any time in Settings. We are introducing automatic deletion of raw device location after 30 days. Your check-in history is kept until you delete it or your account. You can view and delete it in Settings.

 

3.6 Photos can contain location data (such as GPS EXIF data) added by your camera. We are introducing automatic removal of this data from photos shown publicly. Until then, you can turn off location tagging in your camera settings before posting.

 

3.7 We do not sell your precise location, and we do not share it with advertisers or data brokers.

 

4. Messaging, audio and video calls

4.1 Where the Services let you send messages or make audio or video calls with other users (including in The Lounge), we process the content needed to deliver them and related data: who you communicated with, when, how long, device and network information, and call quality data.

 

4.2 We do not record audio or video calls. Call audio and video is transmitted in real time through our communications provider, LiveKit, and is not stored by us after the call ends. If we ever introduce call recording, we will update this Policy first, and every participant will be told and asked to agree.

 

4.3 Private messages are end-to-end encrypted. Only you and the people you message can read them. Messages are stored on our servers in encrypted form so they can be delivered, but we cannot read their content.

 

4.4 Because of this encryption, we do not and cannot monitor private messages. If you report a message or user, you can choose to share the relevant messages with us, and we will use them only to review the report. We may also review call and message metadata (such as who contacted whom and when, but not content) to investigate reports or when required by law.

 

4.5 Recording other people without their consent may be illegal where you or they are located. Our Terms prohibit it.

 

4.6 Calls through Checked In are not a telephone service and cannot be used to reach emergency services.

 

5. How we use your information

  • Create and run your account and the Services, including check-ins, messages, calls, the Noticeboard and The Lounge — Information used: Account, content, location (if allowed), call and messaging data, device data; Legal basis (GDPR/UK GDPR): Contract

  • Provide trip planning features: We use checklist information to help you organise travel plans, create packing lists, keep track of things to do and collaborate with invited travel companions. This information is used to provide the checklist functionality you choose to use.

  • Personalise content, e.g. suggested destinations based on saves and check-ins — Information used: Usage, saves, check-ins, approximate location; Legal basis (GDPR/UK GDPR): Legitimate interests; consent for precise location

  • Keep the community safe: moderation, preventing fraud, spam and abuse, enforcing our Terms — Information used: All categories as needed; Legal basis (GDPR/UK GDPR): Legitimate interests; legal obligation

  • Show and measure labelled sponsored placements and Directory listings — Information used: Approximate (city-level) location, usage, advertising identifiers where permitted; Legal basis (GDPR/UK GDPR): Legitimate interests; consent where required (e.g. device identifiers, EU cookies)

  • Send service messages (security, account, changes to terms) — Information used: Contact details; Legal basis (GDPR/UK GDPR): Contract; legal obligation

  • Send marketing, if you opt in — Information used: Contact details, preferences; Legal basis (GDPR/UK GDPR): Consent

  • Analytics, research and improving the Services — Information used: Usage, device, crash data (de-identified where possible); Legal basis (GDPR/UK GDPR): Legitimate interests

  • Comply with law and respond to legal requests — Information used: As required; Legal basis (GDPR/UK GDPR): Legal obligation.

 

Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details and you can object (section 9).

 

6. Automated decisions, personalisation and AI

6.1 We use computer programs to rank and personalise feeds (for example by distance, recency and what you have saved) and to translate public content automatically, such as recommendations, reviews and Noticeboard posts, using DeepL and Google ML Kit (which translates on your device). Private messages are not translated.

 

6.2 We do not use automated tools to moderate content or to decide whether to restrict, suspend or close accounts. Those decisions are made by people.

 

6.3 Main factors in feed order: distance from you (if location is on), recency, engagement, and your saves and follows. Sponsored placements are always labelled and are not ranked as editorial picks.

 

6.4 We do not use your personal information or content to train artificial intelligence models. Content sent for translation is used only to provide the translation, and our translation providers are not permitted to use it to train their models.

 

6.5 Automatic translations may not be accurate.

 

7. How we share information

We do not sell your personal information for money. We share it only as follows:

  • Other users: your username, profile photo, bio and anything you post publicly, including public check-ins. Messages go to the people you send them to.

  • Service providers (processors) who act on our instructions under contract: cloud hosting and databases (Amazon Web Services, Sydney region, Australia); audio and video calls (LiveKit); analytics and crash reporting (Google Play Console, Firebase Crashlytics and Sentry); email (Amazon SES) and push notifications (Amazon SNS, Firebase Cloud Messaging and Apple Push Notification service); automatic translation of public content (DeepL; Google ML Kit translation runs on your device). A current list is available on request from info@checkedin-app.com.

  • Advertising and measurement partners: where permitted and, where required, with your consent, we use partners such as Meta to measure our own marketing and to show and measure placements. These partners may receive device identifiers, IP address and in-app events. Advertisers who buy placements in Checked In only receive aggregated, de-identified reports (such as impressions and taps), never your identity, profile, check-in history or precise location.

  • Related companies: other companies in our corporate group, under this Policy.

  • Business transfers: a buyer or successor if all or part of our business is sold or restructured, subject to this Policy.

  • Legal and safety: law enforcement, regulators, courts or others where required by law, or where we reasonably believe it is necessary to prevent serious harm, protect someone's safety, or protect our rights.

  • With your consent or direction: for example when you share a post outside the app.

  • Shared trip checklists: When you invite travel companions to collaborate on a checklist, the checklist and its contents are accessible to the invited participants. Personal checklists are not shared with other users unless you choose to share them.

 

8. Security and data breaches

8.1 We use reasonable technical and organisational measures to protect personal information, including encryption in transit (TLS), end-to-end encryption for private messages, encryption at rest for all data stored on AWS, access controls limited to staff who need it, password hashing, logging and regular security updates.

 

8.2 No system is completely secure. Please use a strong unique password and tell us straight away if you think your account has been compromised.

 

8.3 If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme. For EU/UK users, we will notify the relevant supervisory authority within 72 hours where required, and affected users where the risk is high.

 

9. Your rights and choices

9.1 Everyone can: access a copy of their information; correct it; delete content, check-in history or their whole account in Settings; withdraw consent (for example turn off location or marketing); and make a complaint.

 

9.2 EU/UK users also have the rights to erasure, to restrict processing, to data portability (a machine-readable copy), to object to processing based on legitimate interests (including profiling), to object to direct marketing at any time, and not to be subject to solely automated decisions with legal or similarly significant effects.

 

9.3 US state residents (including California, Colorado, Connecticut, Virginia, Texas, Oregon and others with similar laws) may have the right to know, access, correct and delete; to opt out of the sale or sharing of personal information and of targeted advertising and profiling; and to limit the use of sensitive personal information (including precise location). To opt out, email info@checkedin-app.com with the subject line "Do not sell or share". We are adding a "Your Privacy Choices" option to the app and website, and will honour Global Privacy Control signals once it is live. We will not discriminate against you for using these rights. You may appeal our decision by replying to it, and if you are still unhappy you may contact your state Attorney General.

 

9.4 Requests: use Settings or email info@checkedin-app.com. We may need to verify your identity. We respond within 30 days (or as required by local law, which may allow an extension). Requests are free unless manifestly unfounded or excessive.

 

9.5 Marketing: you can unsubscribe using the link in any email or in Settings. We will still send essential service messages.

 

9.6 Device controls: you can turn off location, notifications, camera, microphone and ad tracking in your device settings.

 

10. How long we keep information

  • Account and profile — While your account is active, then deleted within 30 days of account deletion

  • Public content and check-ins — Until you delete them or your account

  • Raw device location — While your account is active, and you can delete it in Settings at any time (automatic deletion after 30 days is being introduced)

  • Private messages (end-to-end encrypted) — Until deleted by you or your account is deleted

  • Call metadata (not content) — While your account is active (automatic deletion after 90 days is being introduced)

  • Reports and account decisions — Up to 2 years after resolution, longer if needed for legal claims

  • Analytics and crash data — Up to 90 days, kept by our analytics and crash-reporting providers

  • Backups — Replaced every 7 days

  • Records we must keep by law — As long as the law requires

 

We keep de-identified or aggregated information (for example the most-saved venues in a city) which does not identify you.

 

11. Cookies and similar technologies

Our website uses cookies, pixels and similar tools to keep you signed in, remember preferences, understand usage, and measure our marketing (for example the Meta Pixel and Wix's built-in analytics). Some of these partners may combine this with other information they hold. Where the law requires (including in the EU/UK), non-essential cookies are only set with your consent, which you can give or withdraw using our cookie banner or settings. You can also block cookies in your browser, but some features may not work.

 

12. Overseas transfers

We are based in Australia and store our main database on Amazon Web Services in Sydney. Some providers process information overseas: Google and Firebase, Sentry and Apple (the United States); DeepL (Germany, EU); and LiveKit Cloud, which routes call audio and video through its global network of servers, usually those closest to the people on the call, which may be outside Australia (including the United States). Before sending personal information overseas we take reasonable steps, including contractual protections, to make sure it is handled consistently with the Australian Privacy Principles. For transfers out of the EU/UK we use approved safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on adequacy decisions.

 

13. Third-party links and sign-in

The Services link to third parties such as venues, booking sites, Directory providers, affiliate partners, Apple Music and Spotify. Their own privacy policies apply when you use them. If you sign in with Apple, Google or Facebook, their terms and privacy policies also apply.

 

14. Contact and complaints

Privacy Officer, On Point Holdings Pty Ltd (Checked In)
Email: info@checkedin-app.com (subject line: Privacy)
Post: PO Box 644, Carlton South, Victoria 3053, Australia

 

Please contact us first so we can try to resolve your concern. We aim to respond within 30 days. If you're not satisfied, you can complain to:

  • Australia: Office of the Australian Information Commissioner, www.oaic.gov.au, 1300 363 992

  • EU: the data protection authority in the country where you live or work

  • UK: the Information Commissioner's Office, www.ico.org.uk

  • Elsewhere: your local privacy regulator

bottom of page