Privacy policy
Lemon Lime Software LLC ("LLS") provides LLS Fire Operations to participating fire departments. Your department decides what its members enter; LLS processes that data to run the service for the department.
What we collect
| Data | Why |
|---|---|
| Name, email, user and organization identifiers, role and membership | Sign-in, access control, showing who did what |
| Password (kept only as a hash by our authentication provider) | Sign-in |
| Check-off, work, meeting, preplan and hydrant records your department creates | The service, and the department's records |
| Chat messages, your block list, and reports about messages or members | Department communication and moderation |
| Optional photos you attach as check-off evidence | Evidence for that check-off |
| Precise location when you complete a location-verified check-off: one reading, only while the app is open. The coordinates, their accuracy and the time are saved with the check-off record | Verify presence at the apparatus. Never collected in the background or tracked continuously |
| Your position when you ask for nearby hydrants, and a map pin you place and choose to share: sent to our servers to find the nearest hydrants or to share the pin | Find nearby hydrants; share a location with another member |
| Push notification token and installation identifier, only if you turn notifications on | Deliver department alerts |
| Records of actions (audit log), including edited and deleted versions of messages and records of reports, blocks and terms acceptances | Security and accountability |
| The email address and reference code you submit on the deletion page, and your correspondence with the support mailbox | Verify and process your request and answer you |
Our service providers keep ordinary technical logs, which include IP addresses and the files or pages requested (for example when you download map areas). The app also keeps data on your device: a cache of hydrant and chat data, queued actions, downloaded map areas and a notification installation identifier. Apple and Google may give us diagnostic information if you have opted in to share it with developers.
Manual map pins and hydrant searches you make are used on your device to show nearby hydrants; a pin is sent to our servers only when you ask for nearby hydrants or share it. The app has no advertising, no analytics or crash-reporting SDK and no cross-app tracking. We do not sell personal information.
Service providers
- Supabase — database, sign-in, file storage and real-time messaging (United States, AWS us-west-2).
- Expo — app builds and the push-notification relay, with Apple and Google push services, only if you turn notifications on.
- Resend — carries account confirmation and password emails sent by our authentication provider.
- Google — hosts the support mailbox that receives your emails and our replies.
- Amazon Web Services — hosts the map tiles you download.
- Vercel — hosts the department administration web application.
- OVH — runs the notification dispatch server, which handles device notification tokens and recipient identifiers (notifications never contain message text).
- Cloudflare — hosts this public information site.
Map data
Maps use OpenStreetMap data © OpenStreetMap contributors; further sources are credited in the app under About and policies.
Retention
Records are kept while your department uses the service. We have not set an automatic deletion period for them. Backups, including copies held outside the live database, are kept for recovery and are overwritten on their normal schedule.
When an account is deleted (see Request account deletion), the following are kept because the department and the service need an unbroken record: the audit log (including a record that your memberships were deactivated because of your request) and the history of who was granted what authority; the department's own operational records (check-offs, work, meetings, forms, hydrant reviews), which then no longer carry your name from your profile (names typed into signatures or free-text fields remain); chat messages you posted (text and author), including earlier versions of edited or removed messages, and any reports, report details, copies of reported messages and moderation records that involve you, together with your terms acceptances and block list entries; records that notifications were delivered to you, without the device token; and the deletion request itself. Everything else personal to the account is removed or replaced with a placeholder: your name on your profile, profile photo, email address and other contact details, roster details such as an employee number, notification registrations and preferences, and your ability to sign in (sign-in is disabled).
Your choices and requests
Ask your department administrator about access to your information. To request deletion of your account see Request account deletion. We answer other privacy requests at llsfireoperations@gmail.com.
Security
Data is encrypted in transit. Each department's data is separated from other departments by access controls designed to prevent cross-department access, and access within a department is limited to people with a role that requires it. Authorized LLS personnel can access data to provide support and operate the service.
Children
The app is not directed to children.
Changes
We post changes here and update the effective date.
Lemon Lime Software LLC · Effective 2026-10-15 · Contact llsfireoperations@gmail.com