Effective date: October 20, 2026
App, developer and scope
This is the mobile app privacy policy for Case Files Professional, also described as Case Files Mobile or Case Files Pro, intended as the public privacy-policy resource for Google Play and the Apple App Store. The currently documented release is the Android app, package com.casefilesprofessional.mobile. The software provider is Case Files Professional; privacy contact: info@casefilespro.com. The app is an add-on to an agency’s Case Files Professional PI case management installation. It is not a public background-check service or an independent personal account system. The iPhone version is pending and is not currently available. Android-specific disclosures below describe the reviewed Android release. Before an iPhone release is submitted, this same page will be updated to describe its actual iOS permissions, storage, notification services and other data practices; Android implementation details must not be read as claims about an unreleased iPhone app.
Your agency and the connected server
You enter your agency’s HTTPS server address and use an agency-authorized account. Your agency controls the investigative records, assignments, user permissions and operational retention for that installation. In a self-hosted installation, the agency and its selected providers operate the server. In a deployment hosted through Case Files Professional, we handle hosting data as needed to provide the contracted service. The app sends operational records to the server you selected; those records are not automatically copied to a separate developer case database. The provider may receive information through hosting, support or notification services as described here.
Account, authentication and technical information
The app transmits your sign-in information to the selected agency server, including credentials and any required authentication or challenge response. It uses authentication tokens for subsequent requests. Account and profile details returned by the server identify the authorized user and accessible agency workspace. The app and server also handle request and security information, such as IP address, request time, API actions, error responses and an Android device label. Authentication tokens are sensitive; never disclose them to another person.
GPS check-in and check-out
When you actively select check-in or check-out for a case, the app requests a current device location using Android location services, subject to your permission and device settings. It sends latitude, longitude, location accuracy and the device observation time to your agency server with the case and authenticated user context. The server records the event and its time; the history may show an approximate address when the connected system provides one. Authorized agency users can review these records for field activity and assignment administration. A successful event requires server confirmation. Location accuracy varies and an event is not conclusive proof of attendance or activity.
No continuous background location tracking
The Android app does not request background-location permission and does not continuously record your movements, routes or location between check-in/check-out actions. Push notifications may arrive while the app is closed; their delivery does not start GPS tracking. You may deny or revoke location permission in Android settings. Other permitted features can still be used, but GPS check-in/check-out cannot be completed without the location information required by that workflow. Your agency must explain any employment or assignment requirements separately; Android permission is not a substitute for its legal obligations.
Case records, notes and selected evidence
The app retrieves records you are authorized to access, which may include case references, assignments, subjects, contact or address details, photographs, documents, notes and activity history. Information about people involved in a case can be sensitive. Notes or log entries you submit, and files you select for upload, are sent to the connected agency server. An upload can include file contents, filename, file type and associated evidence descriptions or custody details you enter. Files may contain embedded metadata, including location data supplied by the original recording device. The app does not need unrestricted access to your photo library: Android’s file selection interface lets you choose the files to provide. Review both the file and its metadata before submission.
Notifications and Google Firebase
The Android app integrates Firebase Cloud Messaging, provided by Google, for push notifications. Firebase processes app installation identifiers, messaging registration tokens and technical delivery information. The app registers its messaging token with the agency server so notifications can reach the relevant installation. Notification payloads may include a case reference, title, message or routing information supplied by the connected service. Notification text can appear on your device’s lock screen according to Android settings. Manage notification permissions and lock-screen previews in Android. Disabling visible notifications does not necessarily stop Firebase token generation or all messaging service processing. Google’s handling of service data is described in its Firebase privacy information.
Device storage, drafts and device unlock
The app stores configuration and preferences locally. Authentication tokens and offline text drafts use Android Keystore-backed encryption. Drafts are associated with the agency/account context and are not automatically submitted merely because connectivity returns. GPS events require an online request rather than a queued offline GPS draft. Selected files may be staged temporarily during an upload, and opened documents or downloads may leave copies in app storage or destinations you choose. Optional device-unlock protection uses Android’s system authentication; the app does not receive your biometric template or device PIN. Signing out, clearing app storage or uninstalling does not delete records already submitted to the agency server. Removing local storage can also remove unsent drafts.
Purposes and recipients
Information is used for authentication, authorized case access, field activity records, evidence handling, notifications, security and technical support. Recipients include the agency, its authorized staff and other parties the agency lawfully authorizes, its hosting/storage providers, Google for Firebase messaging, and Case Files Professional where needed to supply hosting or support. Android location services and device providers may process location-service requests under their own terms. We may disclose information where law requires it or to protect legal rights and system security. The Android app does not include advertising functionality and does not sell personal or sensitive app data or use it for targeted advertising. Your agency is responsible for disclosures it makes through its investigation workflow.
AI and other connected-system features
The reviewed Android app does not directly integrate an AI SDK for processing your case content. The agency’s connected web system can offer optional AI, mapping, research or external storage functions. If the agency uses server-held records with those functions, its configuration and the relevant provider’s terms govern that further processing. Agencies must disclose and authorize such uses as required. This policy does not authorize confidential evidence to be submitted to an external AI service.
Retention and security
Operational records, GPS history, uploads and audit information are retained by the agency according to the case purpose, service arrangement and applicable legal or evidence-preservation requirements. No single deletion period applies to every agency. Local information remains until removed by the relevant app action, Android storage controls or uninstallation; server copies and backups are separate. The app requires HTTPS connections, excludes ordinary Android app backup and uses encrypted storage for tokens and drafts. These measures reduce risk but cannot guarantee security. Protect your device and notify your agency promptly if it is lost or compromised.
Account and data deletion requests
Accounts are provisioned and managed by the agency; this app does not provide public self-service registration. To request account deletion or deletion of associated personal data, contact your agency administrator or email info@casefilespro.com with the subject “Case Files Professional Mobile — Account/data deletion.” This email route is available even if you cannot sign in. Include your agency name or server domain, account email/username and what you want deleted; do not include passwords, case evidence or full identification documents. We may verify identity, confirm the responsible agency and coordinate the request with it. Disabling an account or signing out is not the same as deleting its data. Records that must be retained for legal duties, investigations, evidence integrity, security or legal claims may be retained to the extent permitted or required, with an explanation where applicable. Backups may retain copies until their normal rotation and remain subject to preservation duties. Applicable law determines the response deadline and available exceptions.
Permissions, rights and choices
Android settings let you change location and notification permissions. The app does not request access to your contacts, call logs, SMS or microphone, and it does not itself request camera access; uploads use files you select. You can ask your agency about its authorized recipients, retention periods and rights process. Depending on applicable law, rights may include access, correction, deletion, portability, restriction, objection, withdrawal of consent or a complaint to a regulator. Email info@casefilespro.com if you need help identifying the responsible party. A request concerning another person’s case information may require additional authority and may be limited by that person’s rights or lawful investigative restrictions.
Children, international processing and updates
The app is intended for authorized professional users, not for use by children under 13. Investigative records may contain information about minors when the agency has lawful grounds; that does not make the app a children’s service. Processing locations depend on the agency’s server and service providers, including Google messaging infrastructure. Required international-transfer safeguards are the responsible organization’s obligation. We will update this policy when practices materially change and provide additional notice where required. Contact Case Files Professional at info@casefilespro.com for questions about this policy.
Provider information: Firebase privacy and security.