Privacy Policy

We collect information you provide when registering, including your name, email, phone number, state, and security/firearm license details and documents. We also collect messages, photos, and voice messages you send through in-app chat, a push notification token so we can alert you about shifts, device information, and location data as described below. We also process incident and user reports, supporting evidence, ratings, support requests, and app usage and diagnostic information. Locations you choose to share in chat are visible to the recipients.

Your data is used to match you with shifts, verify your license, process payments and payouts, and improve platform performance. We do not sell your personal information to third parties. We may also email you directly about important account activity, such as license status updates and expiration reminders.

Your private email and phone number are not exposed through general contact lookup to other users; access is limited to you and authorized administrators. A separate phone-access process allows an eligible agency to request your phone number after an accepted or completed assignment or a mutual accepted contact. The agency can retrieve it only after you approve and while the permission remains valid. You can revoke this access. An application, favorite or conversation alone does not disclose your phone or email. Information you choose to send in chat is visible to its recipients.

Payouts are handled by Stripe, our payment processor. Oniris does not store your full bank account or card numbers. That information is held directly by Stripe under its own privacy policy. Oniris stores only what Stripe reports back to us, such as your account status and the last 4 digits of a connected account.

With your device permission, Oniris obtains location at clock-in to verify attendance and may obtain it at clock-out to record where the shift ended. Attendance location can be available to the agency responsible for the shift. The app also uses location for nearby-shift discovery and stores your last-known location when you open or return to the app, with refreshes limited to once per 30 minutes, to notify you about nearby shifts. Incident reports may include your location for the relevant agency and authorized reviewers. If you choose to send your location in chat, the conversation participants can see it. These features use foreground location; Oniris does not continuously track you in the background. You can manage location access in device settings.

Face ID, fingerprint and other biometric checks are processed by your device operating system. Oniris does not receive or store your biometric templates. If you enable biometric sign-in, the app stores your sign-in credentials in secure device storage and uses them to authenticate with Google Firebase after the device check.

Optional AI features share data with a third-party AI service provider, only after you allow it. License field extraction sends the selected license photos, including any visible name, portrait, address, license number and dates. Writing assistance sends the draft bio and account role, shift duties and title, or incident narrative and category. Assist sends your question, recent conversation and account role. No other account records are sent by these features. Declining leaves your draft unchanged or lets you enter license fields manually; required license review by Oniris still applies. You can also use Email support. Oniris keeps a minimal permission record with your account ID, provider, dates, notice version and permission status; that record contains no submitted photos or text. Your permission stays active until you withdraw it or this notice changes. AI sharing notice version: 2026-10-06.3. You can withdraw permission in Privacy & Security → Withdraw AI permission. Withdrawal blocks new optional AI requests for your account; using AI again requires a new explicit acceptance. Withdrawal does not recall data already sent. Contact support@onirisgroup.com to request a copy, correction or deletion of related records. We respond within 30 days.

Oniris Protection Group LLC uses Google Firebase for authentication, database storage, uploaded files and backend services. When enabled, PostHog processes app usage events and device information for analytics, and Sentry processes error and performance diagnostics. Stripe processes payments and payouts, and Anthropic processes the optional AI requests described in this policy. Resend delivers account emails using your email address and the relevant message content. Expo Push delivers notifications using your push token and notification content. These providers process the information needed for their respective services. Oniris administrators may access records for support, verification, safety, disputes and account administration. We do not sell your personal information.

Deleting your account disables your login and removes or anonymizes identifying profile fields; it does not erase every record or uploaded file. Conversations and their history remain available to other participants in their archive, with your account name replaced. Shift and payment records may remain for legal, tax and dispute purposes. Phone-access audit records and AI permission records can also remain. For eligible resolved user reports, evidence is scheduled for removal after 12 months from closure and report records after 3 years. Open reports, reports with restrictions or suspensions, and records affected by an active safety measure are excluded from that routine purge. We do not currently apply a fixed automatic deletion period to retained conversation history or AI permission records. Contact support@onirisgroup.com about retained data or a deletion request.

To request a copy of your data, correct inaccuracies or request deletion, email support@onirisgroup.com. You can also delete your account in Privacy & Security settings. Retention exceptions are explained in Data Retention & Deletion. You can manage location, camera, microphone, photo and notification permissions in your device settings; disabling a permission may limit the feature that needs it. We respond to requests within 30 days.

We collect information you provide when registering, including your agency name, email, phone, state, and business license documents. We also collect messages, photos, and voice messages you send through in-app chat, a push notification token so we can alert you about applications, shift history, and usage analytics. We also process incident and user reports, supporting evidence, ratings, support requests, and app usage and diagnostic information. Locations you choose to share in chat are visible to the recipients.

Your data is used to operate the platform, process payments, verify your business license, and match you with qualified security professionals. We do not sell your data to third parties. We may also email you directly about important account activity, such as business license status updates.

Payments are handled by Stripe, our payment processor. Oniris does not store your full card or bank account numbers. That information is held directly by Stripe under its own privacy policy. Oniris stores only what Stripe reports back to us, such as card brand and the last 4 digits.

Agencies can view professional profile information, license status and ratings available for staffing. General private contact lookup is restricted to the account holder and authorized administrators. An eligible agency may request a guard phone number after an accepted or completed assignment or a mutual accepted contact; retrieval requires the guard approval and an active permission, which the guard can revoke. Favorites or conversations alone do not disclose private email or phone details. Information voluntarily shared in chat is visible to its recipients. Use professional data only for the staffing and communication purposes for which it was provided.

Face ID, fingerprint and other biometric checks are processed by your device operating system. Oniris does not receive or store your biometric templates. If you enable biometric sign-in, the app stores your sign-in credentials in secure device storage and uses them to authenticate with Google Firebase after the device check.

Optional AI features share data with a third-party AI service provider, only after you allow it. License field extraction sends the selected license photos, including any visible name, portrait, address, license number and dates. Writing assistance sends the draft bio and account role, shift duties and title, or incident narrative and category. Assist sends your question, recent conversation and account role. No other account records are sent by these features. Declining leaves your draft unchanged or lets you enter license fields manually; required license review by Oniris still applies. You can also use Email support. Oniris keeps a minimal permission record with your account ID, provider, dates, notice version and permission status; that record contains no submitted photos or text. Your permission stays active until you withdraw it or this notice changes. AI sharing notice version: 2026-10-06.3. You can withdraw permission in Privacy & Security → Withdraw AI permission. Withdrawal blocks new optional AI requests for your account; using AI again requires a new explicit acceptance. Withdrawal does not recall data already sent. Contact support@onirisgroup.com to request a copy, correction or deletion of related records. We respond within 30 days.

Oniris Protection Group LLC uses Google Firebase for authentication, database storage, uploaded files and backend services. When enabled, PostHog processes app usage events and device information for analytics, and Sentry processes error and performance diagnostics. Stripe processes payments and payouts, and Anthropic processes the optional AI requests described in this policy. Resend delivers account emails using your email address and the relevant message content. Expo Push delivers notifications using your push token and notification content. These providers process the information needed for their respective services. Oniris administrators may access records for support, verification, safety, disputes and account administration. We do not sell your personal information.

Deleting your account disables your login and removes or anonymizes identifying profile fields; it does not erase every record or uploaded file. Conversations and their history remain available to other participants in their archive, with your account name replaced. Shift and payment records may remain for legal, tax and dispute purposes. Phone-access audit records and AI permission records can also remain. For eligible resolved user reports, evidence is scheduled for removal after 12 months from closure and report records after 3 years. Open reports, reports with restrictions or suspensions, and records affected by an active safety measure are excluded from that routine purge. We do not currently apply a fixed automatic deletion period to retained conversation history or AI permission records. Contact support@onirisgroup.com about retained data or a deletion request.

If you choose to share your location in chat and allow device location access, Oniris obtains your current location and sends it to the conversation participants. Agencies may also receive guard attendance locations and locations included in incident reports for their shifts. Device location permission can be managed in your device settings.

To request a copy of your data, correct inaccuracies or request deletion, email support@onirisgroup.com. You can also delete your account in Privacy & Security settings. Retention exceptions are explained in Data Retention & Deletion. You can manage location, camera, microphone, photo and notification permissions in your device settings; disabling a permission may limit the feature that needs it. We respond to requests within 30 days.