This is the app-specific privacy draft for Certification Command Center. It is based on code inspection of the local project and should be reviewed before public Google Play submission.
App purpose
Certification Command Center helps users organize certification goals, study resources, mission progress, bookmarks, and optional proof documents.
Data collected by the app
The app can operate in local guest mode using data stored on the device. When Supabase authentication is configured and a user signs in, progress and uploaded proof documents may be synced to ONEIROM-controlled backend services. Current code indicates account email/user ID, progress state, bookmarks, activity dates, promoted certifications, proof document metadata, and uploaded files may be processed when signed in.
Local storage
Guest state and some preferences use browser localStorage on the device. Local data may include guest-mode status, certification progress, bookmarks, activity dates, and promoted certification selections.
Files and proof documents
The app includes an optional proof-document upload flow. Users should upload only documents they are comfortable storing in the app. File type and size validation exists in the code, but the final storage, retention, and deletion behavior must be verified against the production Supabase configuration before submission.
Third-party services
- Supabase — authentication, database, and/or storage when configured.
- Vercel or hosting provider — hosting, delivery, and server logs for the web deployment.
- Google Play — app distribution, install metrics, crash/reporting data provided by Google.
No advertising SDK or payment SDK was identified in the inspected app code.
Analytics and crash reporting
No dedicated third-party analytics or crash-reporting SDK was identified in the inspected app code. Google Play may provide platform-level diagnostics to the developer.
Children
The app is not designed for children. A final Google Play target-audience answer is still required in Play Console.
Account deletion and data requests
If accounts are enabled, a support contact and deletion process must be published before production launch. The app has sign-out support, but a complete self-service account deletion flow was not verified in the inspected code.
Contact and updates
Use Certification Command Center support. A functioning support email address must be added before Google Play submission. This policy should be updated when backend configuration, storage, analytics, or account behavior changes.