Privacy Policy

When you create an account we store your email address and, if you enter one, your name. Passwords are handled by our authentication provider and are never visible to us.

When you run a check we store what you submitted — a product name, a company name, a website address or another listing — together with the report we produce from it.

If you submit a link, we store the original link and a tidied-up version of it, plus the website's domain name. We visit and analyse only publicly available pages; we never log in to a website on your behalf.

Completed checks are saved to your account so you can reopen them from your dashboard. Your checks are private to your account. We do not publish them, and we do not sell them.

Accounts, checks and reports are stored in a hosted Supabase (PostgreSQL) database. Access rules are applied at the database level so that a signed-in person can only read their own records.

To research an item we send the text you submitted, and the public search results we find, to a small number of external services: a web-search provider (Tavily), an AI analysis service accessed through Lovable AI, and a website security-reputation service (VirusTotal) when you submit a web address.

We share only what is needed to run the check. We do not send your name, your email address or your account details to these services.

Like any website, our hosting records ordinary technical details of a request, such as the network address it came from, the browser used and the time. We use a short-lived record of this kind to stop the same connection from running an unreasonable number of checks, which protects us from runaway research costs.

We use your information to run the checks you ask for, to show you your own history, to apply your monthly allowance, to keep the service working and secure, and to reply to you if you contact us.

We do not sell your personal information, and we do not use your checks to advertise to you.

Data is transmitted over encrypted connections, access to your records is restricted per account at the database level, and provider keys are held on the server only and never sent to your browser. No service can promise perfect security, and we make no such promise here.

Your checks and reports are kept until you delete them. You can delete any report from your dashboard at any time, which also deletes its stored sources and findings. If you want your whole account and its data removed, email us and we will delete it.

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. You can also run a check without an account, in which case the result is not saved to any account.

Checkif is not intended for children under 13, and we do not knowingly collect their information.

If we change how we handle information we will update this page and change the date below. Continuing to use Checkif after a change means the updated policy applies to you.

Questions about privacy: privacy@checkif.co.