Privacy Policy
This Privacy Policy explains how CE Roster App handles information when you use its website, Mac desktop app, and CE Scanner integration.
Who operates the app
CE Roster App is operated by {{OPERATOR}}. For privacy questions or requests concerning your account or data, contact {{CONTACT_EMAIL}}.
Information handled by the app
- Account information: your email address, account identifier, authentication information, and instructor details you provide. Email/password authentication is processed by Supabase. If you use an enabled Google or Apple sign-in option, that provider supplies the account information needed to authenticate you; the app does not receive your Google or Apple password.
- Training records: provider and instructor names, certification numbers, certification levels and expiration dates, course details, attendance, roster history, and signatures or other information you enter or import.
- Device and security information: browser or app information, IP addresses and request information processed by hosting, authentication, and abuse-prevention services. Local helper records may include export status, filenames, timestamps, errors, and pending roster data.
- Support communications: information you choose to send when requesting help. Please do not send passwords or unnecessary attendee information.
How information is used
Information is used to authenticate you, keep instructor accounts separate, store and synchronize your records, create rosters and exports, operate requested CE Scanner actions, troubleshoot problems, and protect the service against abuse. This app is a training-record tool; do not use it to store patient records or other information unrelated to its purpose.
Cloud services and sharing
Supabase provides account authentication and cloud record storage. Cloudflare provides website hosting and Turnstile verification. Authentication email delivery and other infrastructure providers may process information required to deliver their services. The website also loads fonts and, on the web version, supporting libraries from external providers.
When enabled and selected, Google or Apple processes sign-in under its own terms and privacy policy. When you request an export or scanner handoff, the selected roster information is saved to your device or passed to CE Scanner. Submission through CE Scanner and subsequent handling by the receiving organization are governed by that service's practices. Merely saving a roster in CE Roster App does not submit it to OEMS.
Information may also be disclosed when required by law or when reasonably necessary to protect the service or people's rights and safety. Infrastructure providers may process information in countries other than your own.
Related policies: Supabase Privacy Policy, Cloudflare Privacy Policy, Cloudflare Turnstile Privacy Addendum, Google Privacy Policy, and Apple Privacy Policy.
Local storage and browser sign-in
The app uses browser or desktop storage for settings, sign-in state, cached app files, recovery copies, and backups. The Mac app also stores scanner job records locally. Pending or failed jobs can retain their payload for retry; successful jobs remove that payload while retaining receipt information. Exported files and CE Scanner queue files remain on the device until removed through the relevant app or operating system.
Desktop sign-in opens your regular browser and uses a short-lived encrypted return to the app. Social sign-in temporarily stores its verification request in browser session storage across the provider redirect. This request expires after five minutes and is removed when its callback is consumed. Closing the tab clears its session storage. The app does not store your Google or Apple password.
Retention and your choices
Cloud records remain associated with your account until removed or replaced through the app or an account/data deletion request is processed. Operational records, backups, and records needed for security, dispute resolution, or legal obligations may be retained longer. Deleting a cloud record does not automatically erase downloaded files, device backups, or copies already submitted to CE Scanner or another organization.
You can review and edit records through the app and export a backup through Settings → Data. To request access, correction, or deletion, email the contact above and identify the account concerned. Verification of your authority may be required before acting on a request. If your information was entered by an instructor or organization, contact that instructor or organization as well. Depending on applicable law, you may have additional privacy rights.
You can clear browser/app storage or remove exported files using your device controls, but first preserve any records you need. Uninstalling the desktop app may not remove its support files or cloud account.
Security and use by children
The app uses authenticated access and account-based restrictions, but no service or device can guarantee complete security. Protect your account, device, and exported records. The app is intended for adult instructors and authorized training personnel, not for children to create their own accounts.
Changes
This policy may be updated as the app or its services change. The effective date identifies the current version. Material changes will be communicated through the app or another appropriate channel where required.