CHECKLL exists to help people prove they are trustworthy — so we hold ourselves to the same standard with your data. This page explains, plainly, how we protect it.
🔐 Encrypted🛡 Access-controlled🙈 Privacy by design🚫 We never sell your data
Encryption
In transit: every connection to CHECKLL uses HTTPS/TLS, so data moving between your device and our servers is encrypted.
At rest: your data is stored on secure cloud infrastructure with encryption at rest.
Access control
Row-level security. Our database enforces access rules at the row level — you can only reach your own data, and a full report is disclosed to another party only when you consent.
Staff access is restricted and logged. Authorised CHECKLL staff can access data only as needed to run the service, review complaints, and prevent fraud — and that access is role-restricted and recorded in an internal activity log.
Anti-scraping limits. Search is rate-limited and audited to stop bulk harvesting of profiles.
Sign-in & accounts
You sign in with a one-time code sent to your email — there is no password on CHECKLL to be stolen or reused.
Sessions are managed by our authentication provider using industry-standard tokens.
Biometric & sensitive data
Facial-recognition data derived from your selfie is used only to check your selfie matches your ID and to detect duplicate or fraudulent accounts — with your consent. It is never used for advertising and never sold.
We practise data minimization — we collect only what the service needs.
We strip location (GPS/EXIF) metadata from every uploaded photo to protect your whereabouts.
Privacy by design
Your full report stays private — employers, lenders and others see it only when you specifically consent.
We do not use advertising or cross-site tracking cookies.
We do not sell your personal data.
Our practices are aligned with major data-protection laws (GDPR, South Africa's POPIA, Nigeria's NDPA). See our Privacy Policy.
Content safety
Listings, photos and messages can be reported and reviewed, and we remove content that breaks our rules.
Illegal content — in particular child sexual abuse material — is removed and reported to the relevant authorities.
Trusted infrastructure. CHECKLL is built on cloud infrastructure that is independently SOC 2 Type II certified — our database/auth provider (Supabase) and our hosting provider (Netlify). This means the platforms our service runs on meet recognised, independently-audited security standards. CHECKLL is committed to pursuing its own formal independent security certification as the platform scales.
Reporting a security issue
If you believe you've found a security vulnerability, please email us at [email protected]. We take reports seriously and will respond promptly.