Command Post app privacy

Information we process

Account information includes your name, work email, account identifier, agency, roles, and access settings. We process device and notification identifiers to authenticate devices and deliver notifications.

Information entered by users includes operation plans, assignments, messages, notes, files, photos, training, and equipment records. Your agency controls authorized access to its records.

With your device permission and an agency-enabled active operation, we process precise location, time, accuracy, and available heading and speed to share positions and retain operation tracks. On supported iPhone app versions, collection can continue while the screen is locked or the app is in the background. See location controls and limits.

We also process connection, security, and audit information, such as IP addresses and service logs, to operate the service, investigate faults, and prevent misuse.

Use and disclosure

We use this information to provide the service, enforce access permissions, support users, and protect accounts. Operational content and positions are shared with authorized agency participants and recipients permitted by the agency’s sharing settings.

Service providers process information needed to operate the app. These include Amazon Web Services for hosting, authentication, storage, and infrastructure; Apple for iPhone notifications; and mapping services such as Esri ArcGIS. Map requests can disclose the area being viewed and your IP address to the map provider. If you open the Street View panel, the location being viewed and your IP address are sent to Google. The app also loads some map images and document-viewer components from public content delivery networks (cdnjs and jsDelivr), which receive your IP address.

We do not sell personal information or use operational data for advertising. Information may also be disclosed when required by law.

Retention and your choices

We retain information as needed to operate your account, meet agency record obligations, and comply with applicable legal requirements. Agency operational records may have different retention obligations from your sign-in account.

You may change device permissions and request account deletion from within the app. Deletion requests are handled manually within 30 days. We review any legally required retention, explain what must remain, and confirm completion. Requesting deletion does not immediately delete your account or agency records.

Request account deletion. If you cannot sign in, use the support contact for identity verification and assistance.