Privacy Policy
Effective Date: February 10, 2026 · Last Updated: February 10, 2026
This Privacy Policy describes how JIRobinson Group, Corp. ("we," "us," or "our") collects, uses, stores, and protects your information when you use the C.O.R.D.A.C.S. application ("App") on iOS, watchOS, tvOS, and macOS platforms. This App is designed for authorized internal business use and is distributed through the Apple App Store.
By using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, do not use the App.
1. Information We Collect
1.1 Account Information
When you sign in to the App, we collect:
- Username and password (credentials are stored securely in the device Keychain and are not transmitted except during authentication)
- User profile information: first name, last name, email address, phone number, job title, department, and role
- Two-factor authentication status
1.2 Health and Wellness Data
With your explicit opt-in consent, the App may collect the following health data from Apple HealthKit:
- Heart rate
- Blood oxygen saturation (SpO2)
- Respiratory rate
- Wrist temperature
- Heart rate variability (HRV)
- Resting heart rate
- Sleep and activity status during measurements
You have granular control over which health data types you share. Each type requires individual consent before collection begins. Health data collection is entirely optional and can be disabled at any time.
1.3 Location Data
When you enable location sharing, the App collects:
- GPS coordinates (latitude and longitude)
- Location accuracy, altitude, heading, and speed
- Timestamps associated with location data
Location sharing is optional and can be toggled on or off from the App settings at any time.
1.4 Device and Usage Information
The App collects limited device and usage information to maintain connectivity and functionality:
- Device model and operating system version
- App open/focused state (heartbeat signals)
- Current page within the App
- Online/offline status
1.5 Business Operations Data
In the course of using the App for business operations, you may enter:
- Inventory, warehouse, and product information
- Purchase orders, shipments, and transfer details
- Contact information (names, phone numbers, email addresses) for business contacts
- Messages and communications through integrated messaging features
2. How We Use Your Information
We use the information we collect for the following purposes:
- Authentication and Access Control: To verify your identity and provide secure access to the App and its features.
- Team Safety Monitoring: Health vitals data is used to monitor the well-being of field team members during operations, visible only to designated supervisors.
- Field Operations Coordination: Location data is used to coordinate team positions during field operations.
- Business Operations: To support inventory management, logistics, fulfillment tracking, purchase order management, and internal communications.
- App Functionality: Device and usage information is used to maintain real-time connectivity, deliver notifications, and ensure the App functions properly.
We do not use your data for advertising, marketing profiling, or any purpose unrelated to the App's core business functions.
3. Data Sharing and Third Parties
3.1 No Third-Party Data Sharing
We do not sell, rent, or share your personal data with third parties. Your data is transmitted only to JIRobinson Group, Corp. servers over encrypted connections (HTTPS/WSS).
3.2 No Third-Party SDKs
The App does not include any third-party analytics, advertising, crash reporting, or tracking SDKs. All data processing occurs through our own infrastructure.
3.3 Organizational Access
Within the organization, access to your data is restricted based on role and need:
- Health data is visible only to designated supervisors and is never shared outside the organization.
- Location data is visible to team members during active field operations.
- Business data is accessible according to your role and permissions within the organization.
4. Data Storage and Security
4.1 On-Device Security
- Authentication credentials are stored in the iOS Keychain using
kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly protection.
- Biometric authentication (Face ID/Touch ID) is available as an additional security measure.
- Local data is stored using SwiftData and is protected by the device's built-in encryption.
4.2 Network Security
- All data transmitted between the App and our servers uses HTTPS (TLS) encryption.
- WebSocket connections use secure WSS protocol.
- Each request includes a unique request identifier for traceability.
4.3 Server-Side Security
- Health data is encrypted at rest on our servers.
- Access controls enforce role-based data visibility.
- Data is hosted on infrastructure with industry-standard security measures.
5. Data Retention and Deletion
5.1 Retention Periods
- Health data: Subject to a 90-day retention policy. Health data older than 90 days is automatically deleted from our servers.
- Location data: Retained only for the duration needed for active field operations and coordination purposes.
- Account and business data: Retained for the duration of your active account and as required for business operations and legal compliance.
5.2 Your Deletion Rights
You may request deletion of your data at any time:
- Health data: Use the "Delete All My Health Data" option in the App's Health Consent settings to immediately request deletion of all your health vitals from our servers.
- Consent revocation: Revoking consent for health data sharing will stop future data collection and trigger deletion of previously shared data.
- Account data: Contact us to request full account data deletion.
6. Your Choices and Controls
| Control | How to Access |
|---|
| Health data sharing | Settings > Health Consent (per-data-type toggles) |
| Location sharing | Settings > Location Sharing toggle |
| Biometric authentication | Settings > Security |
| Revoke health consent | Settings > Health Consent > Revoke Consent |
| Delete health data | Settings > Health Consent > Delete All My Health Data |
You may withdraw consent for any optional data collection at any time without affecting your ability to use the core features of the App.
7. Apple HealthKit Data
We access Apple HealthKit data only with your explicit permission. In accordance with Apple's HealthKit guidelines:
- HealthKit data is not used for advertising or marketing purposes.
- HealthKit data is not sold to data brokers or third parties.
- HealthKit data is not used for purposes unrelated to health monitoring and team safety.
- HealthKit data is shared only with the C.O.R.D.A.C.S. backend service for the purpose of team safety monitoring, as described in this Privacy Policy.
8. Children's Privacy
The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this document. We encourage you to review this Privacy Policy periodically. Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
11. Applicable Law
This Privacy Policy is governed by applicable data protection laws in the jurisdictions where the App is made available. We are committed to complying with all applicable privacy regulations.