Privacy Policy
Field holds sensitive information about the people you protect. This page explains, in plain words, what Field holds, where it is kept, who can see it, and what we never do with it.
Who we are
720OPS Field is made by Shield Group Holding B.V., Oude Apeldoornseweg 45-67, 7333 NR Apeldoorn, the Netherlands (Chamber of Commerce / KvK 34290724). You can reach us at support@720ops.com.
Two roles: yours and ours
Field is a working tool for executive-protection professionals. It holds two kinds of personal data, and the responsibility differs:
- Your own account — your e-mail address, name and settings. For this data we are responsible (the "controller").
- The data you put into Field about others — clients, principals, their families and staff, your team members, and people or vehicles that matter to an operation. For this data you (or the company you work for) are responsible. We only store and process it on your behalf, to run the app for you (we are the "processor"). Contact us if you need a data processing agreement.
What Field holds
Field holds only what you and your team enter, add or photograph. Depending on how you use it, that can include:
- Account and team details: names, e-mail addresses, phone numbers, roles and rights.
- Client cards: names or code names, contact details, addresses, family and staff, next of kin, protocol, threat picture and pattern of life, identity documents (such as passport number and expiry), and vehicles with number plates.
- Medical details, where you enter them: blood type, conditions, medication, allergies, doctor and insurance.
- Photos and documents you add.
- Operation records: rosters, travel, checklists, status messages, incidents, sweep results and reports.
- Location — see below.
- Technical details needed to run the service: a push-notification token for your phone, and a usage log of AI features (see below).
Where it is stored, and who can see it
- Data is saved on your phone first, so Field keeps working without a signal. When there is a connection, it is synced to our servers at Supabase, located in the European Union (Ireland). Connections are encrypted.
- Within a team, every person sees only what their role allows. The account owner sets the roles. Medical details are only shown to people who have the medical right.
- Clients can be named by a code name in documents and messages. Push notifications never contain the client's name.
- Access ends when the job ends: when someone is removed from a team, they lose access and the team's data is wiped from their phone.
- Your app lock code is kept in your phone's secure storage.
Location
- Field asks for location only while the app is in use.
- When you send your position, it is read once, at that moment.
- Live location is a switch you control. While it is on, your position is shared with your team in the app, and in WhatsApp if you choose to share it there. Turn it off and sharing stops.
- To find addresses, places and travel times, Field uses Google (Maps, Places and Routes).
Phone permissions
- Camera, microphone and photos — only to add the photos, video and documents you choose.
- Calendar — write-only, to add flight times. The client's name is never written to your calendar.
- Contacts — read only when you search your contacts to add someone. Nothing is uploaded.
- Bluetooth and Wi-Fi — only for the sweep tool, to list nearby devices and networks.
AI features
Some features use AI: summaries, the bio builder, roster help and the security brief. When you use one, the text or document you choose is sent to Anthropic (the maker of the Claude AI models, based in the United States) to produce the result. Anthropic does not use this data to train its models. We do not store the content of AI requests. To keep fair-use limits, we log only who used which feature, when, and how much — never the content.
The security brief draws on public government travel advice and public news sources. AI output can be wrong; always check it before you rely on it.
The client intake form
An operator can send a client a secure link to an online intake form. The link is valid for 7 days. Every question can be answered "Not provided". The form is shown under the operator's own brand; the operator is responsible for the data collected with it, and we process it on their behalf. Answers go straight to our European servers. The submitted form is deleted as soon as the operator has reviewed it, and in any case after 30 days.
Sharing
We do not sell your data, and we do not share it with anyone for their own purposes. Data only leaves Field when you share it — for example a report by e-mail or a message by WhatsApp. That always goes through your phone's own apps, and only after your own tap.
Services we use
- Supabase — database, file storage and server functions (European Union).
- Anthropic — AI features (United States).
- Google — Maps, Places and Routes; and Firebase Cloud Messaging to deliver notifications on Android.
- Apple — to deliver notifications on iPhone.
- Expo — to route push notifications to your phone.
- Cloudflare — hosts the web pages for team invitations and the intake form. These pages store nothing themselves.
- WhatsApp and your e-mail app — only when you choose to share something.
- App Store and Google Play — to download the app, and for payment where applicable.
Each of these companies handles data under its own privacy policy.
No tracking
Field contains no advertising, no analytics software and no third-party trackers. We do not build a profile of you. Field does not use face recognition.
How long we keep data
- Your data is kept while your account is active.
- Data you delete is removed from the app.
- Intake form submissions: see above — deleted after review, at the latest after 30 days.
- To delete your account and its data, write to support@720ops.com.
Your rights
Under the GDPR (AVG) you have the right to see, correct, export or delete your personal data, and to object to its use. Write to support@720ops.com. If your data was entered by an operator or company — for example as a client — please contact them first; they are responsible for it, and we will help them.
You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to this policy
If this policy changes, the new version appears on this page with a new date above.
Contact
Questions about privacy? Write to support@720ops.com.
See also the Field terms of service. Looking for 720OPS Status? See the Status privacy policy.