Privacy Policy

Last updated: March 10, 2026

Caliber App ("we", "us", or "our") operates the Caliber mobile application and web portal (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

Account Information: When your organisation administrator registers you as a user, we store your name, phone number, and assigned role (instructor or supervisor). This information is provided by your organisation, not collected directly from you.

Authentication Data: We use phone number verification (SMS OTP) to authenticate users on the mobile app, and Google Sign-In for web portal access. Firebase Authentication manages these credentials securely.

Evaluation Data: The app collects candidate evaluation scores, game results, and assessment comments entered by authorised instructors during evaluation events. This data is collected on behalf of your organisation.

Device and Usage Data: We collect basic analytics and crash reports through Firebase Analytics and Firebase Crashlytics to improve app stability and performance. This may include device type, operating system version, and app usage patterns.

2. How We Use Your Information

To authenticate you and provide access to the Service
To deliver evaluation and scoring functionality to your organisation
To back up and restore evaluation data securely
To export results to your organisation's designated spreadsheet
To monitor and improve app performance and stability
To send SMS verification codes for authentication

3. Data Storage and Security

Your data is stored using Google Firebase services (Firestore, Firebase Storage, Firebase Authentication), hosted on Google Cloud infrastructure. Evaluation data is isolated per organisation — each organisation can only access its own data.

Database backups are encrypted using AES-256-GCM encryption before being uploaded to Firebase Storage. Encryption keys are derived from a PIN combined with event metadata using PBKDF2 key derivation (100,000 iterations).

The mobile app stores evaluation data locally on your device using an encrypted local database for offline operation.

4. Data Sharing

We do not sell, trade, or share your personal information with third parties. Your data is shared only with:

Your Organisation: Evaluation data and results are accessible to authorised administrators and supervisors within your organisation.
Google Firebase: As our infrastructure provider, Google processes data in accordance with their Firebase Privacy Policy.
Google Sheets: Final results may be exported to your organisation's designated Google Spreadsheet, as configured by your organisation administrator.

5. Data Retention

We retain your data for as long as your organisation maintains an active account with us. When an organisation's account is deactivated, associated user data and evaluation records are retained for a reasonable period before deletion, unless a longer retention period is required by law.

6. Your Rights

You have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to organisational and legal requirements)
Withdraw consent for data processing where applicable

To exercise these rights, contact your organisation administrator or reach out to us directly.

7. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

privacy@caliberapp.io