Privacy Policy

Chekkd collects the information needed to create an account, operate verification levels, protect the service, and carry out sharing or connection actions you request.

• Account and profile information, including your name, email address, phone number, mailing address, authentication records, and the profile fields you choose to publish.
• Identity Verification records, including provider references, completion and review outcomes, and limited identity fields returned to operate the verification, such as name, date of birth, address, and document type.
• Current Bank-connection records described below, limited to the provider connection and masked account metadata needed for Level 4 and account management. Earlier Bank versions may also have created bank-held identity, identity-match, or balance-enrichment records; those legacy records are not used by the current Bank flow and remain subject to Chekkd's reviewed retention and deletion process.
• Security and service information, including login history, IP address, browser or device context, verification requests, Connections, and audit records.
• Optional analytics data described below when analytics is permitted for your region and preferences.

Plaid Identity Verification handles document and liveness capture. Plaid may process identity and biometric information under its own notices. Chekkd receives the limited results and fields needed to operate your verification record; this is separate from the Plaid Link bank connection described below.

If you choose to connect a bank, Chekkd uses Plaid Link to confirm that you can connect and control an eligible financial account and to establish or maintain Level 4 — Bank. Bank proof reflects connection evidence and connection health; it is not a payment, lending, creditworthiness, solvency, account-standing, or available-funds determination.

• Chekkd keeps the encrypted Plaid connection token and Item identifier required to manage the connection.
• Chekkd keeps the institution name and selected account metadata needed to display and manage the connection, such as account name, type, subtype, and masked identifier.
• Chekkd keeps connection-health status and relevant connection, repair, removal, and security timestamps.

The current Level 4 flow does not collect new bank-held Identity or Balance enrichment. Earlier versions may have created bank identity, identity-match, balance-snapshot, or related derived records. Those records are not used by the current connection flow; Chekkd is reviewing the appropriate retention or deletion treatment and will honor applicable deletion and legal-retention requirements.

Plaid may process information from your financial institution under Plaid's own privacy policy and the choices shown in Plaid Link. This section describes what Chekkd receives and keeps.

Review how Plaid handles information: Plaid End User Privacy Policy

• Operate your Passport, Verification levels, TrustBadge, account access, and Connections.
• Verify evidence, prevent fraud and abuse, and protect service integrity.
• Display verification and profile fields on the sharing or public-profile surfaces you enable.
• Maintain, troubleshoot, secure, and improve the service.
• Send requested service messages, security alerts, and notifications.
• Comply with valid legal obligations and enforce our terms.

We disclose information to service providers as needed to operate Chekkd, to a recipient or public profile when you direct that sharing, or when valid legal process or safety and fraud-prevention needs require it. A public Passport or accepted Connection may include your display name, avatar, and customer-safe Verification level state according to your settings and the applicable sharing scope.

Chekkd uses layered safeguards appropriate to the service, including TLS for supported client-to-service transport, encrypted Plaid access tokens at rest, authenticated ownership checks for Bank management, verified provider webhooks, access controls, and bounded operational logging. Provider access tokens are not returned to the browser.

No system can guarantee absolute security. See our public Security page for a current, plain-language summary and contact support@chekkd.com if you believe your account or information is at risk.

We retain information only for as long as needed to provide and secure the service, preserve required audit evidence, resolve disputes, and meet legal obligations. Retention depends on the category and purpose rather than a single period for every record.

Disconnecting a bank asks Plaid to remove the Item, removes that connection from active Bank evidence, and prevents it from continuing to support Level 4. Deleting your Chekkd account is a separate action. Plaid may retain or delete Plaid-held information under its own policy and privacy controls.

• Access: request a copy of your personal data.
• Correction: update or correct inaccurate information.
• Deletion: request deletion of your account and data.
• Portability: export your data in a machine-readable format.
• Opt-out: unsubscribe from marketing communications.
• Object: object to certain data-processing activities.
• Revoke consent: withdraw consent for sharing with specific partners.

To exercise these rights, contact us at support@chekkd.com.

• Essential storage: authentication, session management, security, and remembering your privacy choice.
• Optional analytics: pseudonymous page, acquisition, and completed-funnel events processed through Google Analytics 4. Analytics is enabled by default for visitors identified as being in the United States unless they previously turned it off or use a supported Global Privacy Control signal. Prior opt-in is required for other countries and when location is unavailable.
• Preferences: remembering your settings.

Chekkd's analytics implementation removes query strings and replaces request tokens, profile usernames, referral codes, and record IDs with generic route labels before a page-view event is sent. We do not use account or form fields such as names, email addresses, phone numbers, dates of birth, form messages, authentication codes, request links, Plaid identifiers, or bank details as analytics event parameters. Campaign labels supplied in landing-page links may be recorded after basic safety filtering and should never contain personal information.

Google advertising storage, advertising user data, ad personalization, and Google advertising signals remain disabled. You can turn optional analytics on or off at any time through the Analytics settings link in the site footer or the app's Privacy settings. You can also clear cookies in your browser, though disabling essential storage may limit account functionality.

The essential cookie that remembers your analytics choice lasts up to 180 days. A short-lived regional setting lasts up to 24 hours, and Chekkd's bounded campaign-attribution cookie lasts up to 90 days when analytics is enabled. Google Analytics first-party measurement cookies may last up to two years unless you turn analytics off, clear them, or your browser removes them sooner. Chekkd's Google Analytics property is configured for 14 months of event and user-data retention.

Our service uses providers with their own terms and privacy practices, including Plaid for Identity Verification and Bank connection, Supabase for authentication and database services, Vercel for hosting, Railway for API hosting, and Google Analytics 4 for optional analytics. Information may be processed in countries outside your jurisdiction, including the United States, with safeguards applied where required.

Our service is not intended for users under 18. We do not knowingly collect personal information from children. If you believe your child has provided us data, contact us immediately at support@chekkd.com.

Depending on where you live, you may have rights to know or access information, correct it, request deletion, receive a portable copy, restrict or object to processing, opt out of sale or sharing where applicable, and appeal or complain to a regulator. We will not discriminate against you for exercising applicable privacy rights.

We may update this policy to reflect changes in our practices, technology, or legal requirements. We will provide notice of material changes through an appropriate service or account channel.

Questions or concerns about this Privacy Policy? Reach us any time at support@chekkd.com.