Legal

Privacy Policy

Last updated: July 22, 2026

This policy covers CPTED NOW Field (the mobile app), the web dashboard at app.cpted.now, and this website. It explains what we collect, why, and the choices you have. CPTED NOW is a professional tool for qualified assessors, so most data you enter is work product about a site you are assessing, not personal data about you.

Who we are

CPTED NOW is operated by CPTED NOW, a Security.NOW company. For any privacy question, contact us at support@cpted.now.

What we collect

  • Account information — your name, email address, and organization, provided through our identity provider (Microsoft Entra ID) when you sign in.
  • Assessment content you create — photos, GPS location and compass heading captured with an observation, typed notes, and audio recordings of stakeholder interviews you choose to record.
  • Reports — the finished assessment documents generated from your observations.
  • Basic diagnostic data — app logs and error reports used to keep the app working.

We do not collect data for advertising, and we do not track you across other companies' apps or websites.

How location, camera, and microphone are used

The app requests location, camera, and microphone access only to capture field observations you initiate: geotagging a photo, orienting an observation with the compass, and recording an interview. These run only while you are actively using the relevant feature. You can decline any of these permissions in your device settings; the app still works, with the related capture feature disabled.

How your data is used

We use the data you enter for a single purpose: to run the CPTED analysis pipeline and assemble your assessment report. Observation photos, notes, and audio are processed by our AI provider (AWS Bedrock) and transcription service to produce ring summaries and the final report. We do not use your assessment content to train third-party models, and we do not sell it.

Where data is stored and who processes it

  • Supabase — hosts the database and files (reports, photos, observations).
  • Microsoft Entra ID — authentication and identity.
  • Amazon Web Services (AWS Bedrock) — AI analysis of observations.
  • Transcription service — converts interview audio to text.

Each provider processes data only to deliver its part of the service. Data is protected in transit and at rest by these providers.

Sharing

Your reports are private to your account unless you explicitly share a report with another user. We do not share your data with anyone else except the service providers above, or where required by law.

Retention and deletion

We keep your reports and observations until you delete them or ask us to. To delete your account and associated data, email support@cpted.now and we will remove it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your data. Contact support@cpted.now to exercise any of these.

Children

CPTED NOW is a professional tool and is not directed to children. We do not knowingly collect data from anyone under 13.

Changes

If we change this policy we will update the date above and, for significant changes, notify you in the app.