Privacy Policy & Terms of Service

Last updated: October 26, 2026 · Applies to Centurion Blue (the “Service”).

On this page: Privacy Policy · Who can see what · Service providers · Apple Health and Health Connect · Employers and clients · If you received an invitation · Terms of Service · Refunds and cancellation · Community rules

Privacy Policy

Who we are

Centurion Blue (“we,” “us”) is operated by Centurion Blue Consulting LLC, a Colorado company. The Service is the Centurion Blue app for iPhone and iPad on the App Store, the Centurion Blue app for Android on Google Play, the same app in any browser at centurionblue.com/app, and this website. Questions: support@centurionblue.com or text (303) 802-0272 (text only).

Information we collect

• Account information: the email address and password you use to create an account. When you create one, we email that address a link to confirm it is yours.
• Registration details: your name, phone number, a personal email, and your department. On the Denver edition, also your badge number, which is checked against the department roster.
• Your home address, if you enter it in Settings, used as the starting point for mileage.
• The records you enter: your off-duty and secondary-employment jobs (employer, address, dates, hours, pay), overtime, mileage, expenses, receipt photos, your schedule and personal calendar events, and leave balances. You choose what to enter.
• Contacts and calendar invitations, if you use calendar invitations: the names and email addresses of the people you add as contacts, the name you choose to show on your invitations, and a record of the invitations you send (who each one went to, the event details that were sent, and when), and the answers your guests give on the invitation page.
• Your W-9, if you put one on file. We store only the finished PDF. That PDF contains your Social Security number or EIN, because a W-9 does. The number is not saved as a separate field. The stored PDF is encrypted in our database.
• Tax Center details, if you use the Tax Center: filing status, your salary, spouse income, and a label and birth year for each child or dependent, along with related amounts you type in. We do not ask for anyone's Social Security number there.
• Retirement planner details, if you use the Retirement tab (Premium): an optional birth month and year (never a full date of birth), a service start month if you type one, the yearly pay figures, Social Security wages and credits, and years of service you buy that you type in, retirement balances and contribution amounts you type in, the names you give accounts and scenarios, checklist dates, and the scenarios you save. No Social Security number, and nothing is connected to any retirement account. Like the rest of your account, these details can also sit in routine backups for a limited time.
• W-2 and 1099 files: a photo or PDF of a form, if you attach one in the W-2 Tracker.
• Wellness and fitness data, if you use the Wellness or Fitness tabs: fitness test results, gym log sessions and nutrition entries, and workouts from Apple Health or Health Connect when you turn that on (see below).
• DIA log entries (Denver edition), if you use the DIA Log.
• Job Exchange posts, Marketplace listings and Marketplace messages (Denver edition), if you post or write them, including photos you add to a listing.
• Scheduler data: if you are a scheduler, the jobs, shifts, client contact details and officer roster you enter. If a scheduler adds you to a roster, your name, badge number and email as the scheduler entered them, and the shifts you are assigned.
• Location: read only at the moment you tap “GPS check in” or check out on a shift where your scheduler turned on GPS check in, or when you tap “Use my location” in the DIA Log. The app never tracks your location in the background.
• Push notification tokens: if you allow notifications, the token your phone or browser issues so alerts can be delivered to that device.
• How you found us: the campaign tags or referring site (for example a search engine or social network) from your first visit, saved with your account when you sign up.
• Support messages: emails and texts you send us, and questions you type into the automated chat assistant.
• Payment information: handled by Stripe, Apple or Google. We never see or store your full card number.
• Basic technical data: standard information your browser or phone sends to load and secure the Service, such as your IP address. We also use the IP address to limit abuse of the chat assistant and, the first time you open the Tax Center without a state chosen, to suggest your state as a starting point you can change anytime. Our hosting provider works out the state from the IP address. We do not store the IP address or the lookup for this, only the state itself, which is saved in your tax settings like one you picked yourself. This does not use your phone's GPS.

How your information is stored

Your data is saved on your device and synced to your account in our hosted database so it follows you across your devices. Receipt photos are kept in private file storage tied to your account. Access is limited to your own account, apart from the specific sharing described in the next section.

Who can see what

Most records are visible only to you. These are the exceptions, and each one exists because of a feature you chose to use.

How we use it

• To provide the Service: saving your entries, calculating pay and mileage, and generating your reports.
• To send the calendar invitations you choose to send, if you use calendar invitations. Nothing is sent to a contact unless you send it yourself. Your contacts' names and email addresses are used only for that, and to show you your guests' answers in the app and in your phone alerts. They are never used for marketing, and a contact is never added to any mailing list.
• To send you account and support communications by email or text, for example a welcome message, replies to your questions, and the alerts you turned on. You can reply STOP to a text to opt out of texts, turn alerts off in Settings, and ask us to stop non-essential messages at any time.
• To process your subscription.
• To understand how people find Centurion Blue.

Your data is not sold, and it is not shared with any police department or agency. It reaches an employer or client only in the ways listed above: a W-9 your scheduler passes along for a job, a coverage link your scheduler creates, and a calendar invitation you choose to send them. The one exception is a valid legal demand, such as a subpoena or court order, that we are required by law to answer. We do not volunteer information to any department or agency.

Apple Health and Health Connect

Centurion Blue can connect to Apple Health on iPhone and Health Connect on Android so that workouts you have already recorded on your phone or watch can be offered for your DPD Wellness gym log. This connection is entirely optional. The app works normally without it, and you can turn it off at any time.

• What we read. Workout records only: the activity type, the start and end time, the duration, the name of the app or device that recorded it, and, on iPhone, whether it was typed into Apple Health by hand. On iOS 27 and later, iPhone also lets you choose whether Centurion Blue may read all of your recorded workouts or only the past 30 days, and future workouts either way. We request read access only. Centurion Blue never writes anything back to Apple Health or Health Connect, and we do not read steps, heart rate, sleep, blood pressure, blood glucose, body measurements, or any other health category.
• You decide what goes on your log. By default, detected workouts wait in the app until you tap to add them. If you switch on automatic adding in Settings, Denver Wellness Portal, workouts are added for you, one a day, and never to a quarter you have marked as sent. Stretch, warm-up and cool-down sessions, and workouts saved as Other, always wait for your tap. We built it this way because that log is a document you sign and submit.
• What stays on your phone. Workouts you have not added, and the list of Health records the app has already offered you, stay on your device. Once a workout is added, by your tap or automatically, the resulting gym entry (date, activity, times, the name of the app that recorded it, and the ID Apple Health or Health Connect gave that workout record) is saved to your private Centurion Blue account the same way a workout you typed in yourself would be, so it survives reinstalling the app or moving to a new phone. The record ID is kept so the app can recognize that workout later, for example so one you delete is not offered to you again on that phone.
• What we never do. We do not sell health data. We do not use it for advertising or marketing. We do not share it with your department, your employer, an insurer, or any third party. We do not use it to make decisions about credit, insurance, employment, or lending. We do not use it for any purpose other than helping you keep your own wellness log.
• Turning it off and deleting it. On iPhone, go to Settings, then Privacy & Security, then Health, then Centurion Blue. On Android, open Health Connect and remove Centurion Blue's access. Revoking access stops all future reads. If you shared only the past 30 days on iOS 27 or later, you can change that at any time in the iPhone Settings app or the Health app. Gym entries you already added stay on your log until you delete them, which you can do from the gym log at any time.

Service providers we rely on

We use these companies to run the Service. Each receives only what it needs to do its part.

• Supabase: account sign-in, the hosted database and file storage.
• Netlify: hosting for the website, the browser app and our server functions.
• Stripe: payment processing for subscriptions and services bought on the website.
• Apple and Google: subscriptions bought in the iPhone or Android app, and delivery of push notifications to your phone.
• RevenueCat: tells us whether an App Store or Google Play subscription is active.
• Resend: sends our account, alert, Marketplace and employer login emails, and delivers the calendar invitations you choose to send.
• FormSubmit: older versions of the iPhone and Android apps also send your registration details (name, phone, emails, department and badge number) to FormSubmit when you register, which forwards them to our support inbox so a person can welcome you. The current website and the next versions of the phone apps do not.
• Anthropic: reads a receipt photo when you use the receipt reader, to pull out the vendor, date and amount, and runs the automated chat assistant. A receipt photo and the questions you type into the chat are sent to Anthropic for that purpose.
• Perplexity: when the chat assistant needs to look up a current published fact, such as an IRS rate or a tax deadline, the question being looked up is sent to Perplexity.
• Google Maps Platform, TomTom, and OpenStreetMap services (Nominatim and the OSRM routing project): address suggestions, finding addresses on the map, and measuring driving distance and drive time. They receive the addresses involved, which can include your home address as the start of a drive, and nothing that identifies you.
• Open Food Facts: the food search in the nutrition log. It receives the words you search for.
• Google Fonts: delivers the fonts the website loads. Cloudflare (cdnjs) and jsDelivr: deliver open-source code files to a phone app until it is updated to a version that carries those files itself. The website and the browser app no longer load code from them. Each receives your IP address and standard browser or device information, and nothing from your account.
• Google Analytics: on the marketing website only, and only after you accept (see Analytics and cookies).

“Use my location” in the DIA log

When you tap Use my location on an action in the DIA Daily Activity Log, your phone's current location is read once and sent to our own server, which asks TomTom for the names of places at that spot and returns the list to you. Nothing else goes with it: not your name, badge number, email, pay, or job details. Your phone never contacts TomTom directly, so TomTom does not receive your IP address. Your location is used for that one lookup only: we do not store it, log it, or keep the list, and it is never read in the background. The place you pick is saved in your own log sheet only.

GPS check in on a scheduled shift

If a scheduler turned on GPS check in for a job, tapping GPS check in or check out reads your location once and saves the time and the location to that shift, where your scheduler can see it. If your phone cannot or may not share a location, you can record the time without one.

Address suggestions

When you start typing an address in the app, the letters you have typed are sent to our own server, which asks Google Maps Platform (or TomTom) for matching addresses and returns the list to you. So the results land near you, a set of coordinates worked out from the home address saved in your settings (or the Denver area on the Denver edition) travels with the request. Your phone's GPS is never used for this, and nothing else goes with it: not your name, badge number, email, pay, hours, or job details. Your phone never contacts Google or TomTom directly, so they do not receive your IP address. Suggestions from Google carry the credit "Google Maps". We do not keep the suggestion list. An address you pick from a Google suggestion is saved in your own records only and is not passed to other officers. An employer address you type in yourself, or that comes from another source, goes into the shared employer list described under Who can see what, along with the employer's name and job type. Your home address is never shared with other officers. Use of Google Maps features is subject to the Google Maps/Google Earth Additional Terms of Service (which include the Google Terms of Service), and to the Google Privacy Policy, which is incorporated into this Privacy Policy by reference.

Analytics & cookies

To understand how the website is used and improve it, we use Google Analytics, and only if you tap “Accept” on our cookie notice. If you decline, no analytics cookies are set. Google Analytics collects usage data such as pages visited and general location. You can change your choice anytime by clearing your browser data for this site, and you can opt out site-wide with Google's opt-out browser add-on. The Centurion Blue app itself does not use analytics cookies.

Employers and clients who use a request or coverage link

A scheduling officer may send a business a link to request off-duty coverage, or a read-only link to see who is covering a job. If you use one of those links you do not need an account.

• What a request collects: your business name, your name and phone number, an email if you give one, the site address and entry notes, an on-site contact, and the details of the job you are asking for.
• Who sees it: the scheduling officer who gave you the link, and Centurion Blue support staff when helping that scheduler. Job details the scheduler turns into shifts are shown to the officers who work them.
• The coverage link is read-only. It shows the schedule for your job, the assigned officers, and their check in and check out times. The scheduler can turn the link off at any time.
• Removal: ask the scheduling officer, or email support@centurionblue.com, and the request details can be removed.

Employer logins. A business can also use a scheduling officer's request link to create an employer login at centurionblue.com/employers. It is optional, and the request link keeps working without one.

• What an employer login stores: your business name, your contact name, phone number and email address, your password (kept only as a one-way hash, never as the password itself), which scheduling officers' links the login is connected to, and the requests you send with their details. Your browser keeps a sign-in token so you stay signed in on that device.
• Who sees it: the scheduling officer whose link you used sees your business name, contact name, phone, email and the requests you send them. Centurion Blue support staff can see it when that is needed for support. The companies listed under Service providers handle it to host the site and send email. Job details the scheduler turns into shifts are shown to the officers who work them.
• Email: we send a confirmation link when the login is created. Emails about a request (approved, declined, needs more information) go only to an address that has been confirmed. We also send a password reset link when you ask for one.
• Deleting it: you can delete the login yourself (see Delete your account). Requests still waiting are withdrawn. Requests you already sent, with the business and contact details in them, stay with the scheduling officer as their record even after the login is deleted, no longer tied to a login.
• Employers are not officers. An employer login is separate from an officer account. It cannot open the Centurion Blue app and gives no access to officer data: no officer's records, pay, roster or schedule. It shows only the requests sent from that login and their status.

If you received a calendar invitation

Someone with a Centurion Blue account can send a calendar invitation to a person they know. If you received one, you do not need an account, and this is what applies to you.

• What we hold about you: your name and email address as the person who invited you typed them, and a record of the invitations sent to you (the event details and when each was sent). These came from that person, not from you. If you answer on the invitation page (Going, Maybe or Can't make it), we also keep that answer and when you gave it.
• How it is used: only to deliver the invitations that person chooses to send you, and to show that person your answer, in their app and as a phone alert if they have alerts on. Your details are not sold and not used for marketing, and being invited does not add you to any mailing list.
• Who sees it: the person who invited you, and Centurion Blue support staff when that is needed for support. The email provider named under Service providers delivers the message. Apple and Google, also named there, deliver the phone alert that tells that person your answer. Other guests are not shown your name or address. A reply, or an accept or decline from your calendar, is addressed to that person's own email address, not to us. An answer you give with the buttons on the invitation page is saved by Centurion Blue and shown only to that person. Anyone who has your invitation link can see or change that answer, so do not forward the email.
• Stopping invitations: every invitation has a Stop invitations link. With it you can stop invitation emails from that person, or all invitation emails sent through Centurion Blue. No account or sign-in is needed. Report this invitation also stops that person's invitations and records the report with us. A stop covers every invitation email from whoever you stopped, so you will not be emailed about a change to, or the cancellation of, an invitation you already have from them. Check with that person directly if you still plan to go. Your choice is saved with your email address so it keeps working, and it is not erased when that person removes you from their contacts or deletes their account. If the link no longer opens the invitation, email support@centurionblue.com from that address.
• Removal, and undoing a stop: to have your name and address removed, or to get invitations again after you stopped them, email support@centurionblue.com from the address the invitation was sent to. You do not need to sign in. A person on our support team does this by hand, so it is not instant. Removing your name and address does not undo a stop: if you asked us to stop invitations, that choice is kept so it keeps working. Removing your name and address also removes your answers.

Your choices & rights

• You can view and edit your records in the app, export your reports as PDF or CSV, and download a copy of your data from Settings (“Download my data”).
• You can delete your account and data in the app, or ask us to do it by email. The steps, and exactly what is removed, are on the Delete your account page.
• You can cancel your subscription at any time (see Refunds and cancellation).

How long we keep your information

• We keep your records for as long as your account exists. If a trial or subscription ends, nothing is deleted; your records stay saved in your account until you delete them or ask us to.
• When you delete your account, your records, your files and your sign-in are removed from the live database as described on the Delete your account page. That page also lists the few things that stay: a scheduler's own roster, team, shift and request records that name you, messages and activity lines on a scheduler's jobs that carry your name, a sign-in that another service shares, a one-way fingerprint of your email address kept so the one free trial cannot be started twice, and what an older phone app version leaves for us to finish.
• If you use calendar invitations: removing a contact erases it from your contact list. The record of invitations you already sent, with each guest's name and email address and any answer they gave, stays in your account until you delete your account, which erases your contacts and that record, or until that guest asks us to remove their details. Deleting your account does not cancel invitations people already have. A stop request from someone you invited, or a report they made about an invitation, is kept after that, so their choice keeps working. A request to stop your invitations only, and any report, is kept with your account's id and a one-way fingerprint of your sign-in email address, not the address itself, so it still applies if you open a new account with the same address.
• Deleted records may remain for a limited time in routine backups kept by our hosting provider before they are overwritten.
• Payment and subscription records are held by Stripe, Apple or Google under their own policies, and we keep the transaction records we need for tax and accounting.
• Emails and texts you sent to support stay in our support inbox unless you ask us to remove them.

State privacy rights

Depending on the state you live in, you may have the right to ask what personal information we hold about you, to get a copy of it, to have it corrected, and to have it deleted. You can do most of this yourself in the app, and you can ask us for any of it by emailing support@centurionblue.com from the email address on your account. Centurion Blue does not sell personal information and does not use your records for advertising. The only third-party analytics is Google Analytics on the marketing website, and only after you accept it. If you have no account and were sent a calendar invitation, see If you received a calendar invitation.

Security

Access requires your email and password, and your data is transmitted over encrypted (HTTPS) connections. You can add two-factor sign-in in Settings, and the phone apps offer App Lock with Face ID, Touch ID, fingerprint or face unlock. No system is perfectly secure, but we take reasonable measures to protect your information. More detail is on the Your data and your department page.

Children

The Service is intended for working adults (law-enforcement professionals) and is not directed to anyone under 18.

Terms of Service

The Service

Centurion Blue is a record-keeping aid to help you track off-duty and secondary-employment income and expenses. It is not tax, legal, accounting, or financial advice. Figures are estimates based on what you enter. Confirm all amounts and deductibility with your own tax professional. We are not affiliated with, authorized, or endorsed by any police department. These terms apply to the iPhone and Android apps, the browser app and this website.

Address suggestions and Google Maps

The address box in the app is powered by the Google Maps Platform. By using it you agree to the Google Maps/Google Earth Additional Terms of Service, which include the Google Terms of Service, and you acknowledge the Google Privacy Policy. Those terms are incorporated into these Terms of Service by reference. Address suggestions are a convenience and may be incomplete or out of date, so check the address before you rely on it.

Accounts

Accounts are for individual officers. You are responsible for the accuracy of what you enter and for keeping your password secure. Provide accurate registration information and keep it current.

Subscription, trial & payment

• Denver edition, Primary plan: the Denver free plan. $0, no card. It includes the Job Exchange, the Marketplace, My Schedule, My Leave Banks, the Wellness Portal, the DIA log, a W-9 on file, and App Lock in the phone app.
• Premium: $59.99 per year or $7.99 per month. On the Denver edition, Premium adds job logging, pay and overtime math from the Denver pay scale, mileage, expenses and receipts, the Tax Center, Year End Tax Reports, dashboards, widgets and alerts to everything in Primary.
• Free trial: one 30-day Premium trial per officer, with no card needed to start it. On the Denver edition the trial starts only when you choose to start it. If it ends and you have not subscribed, your account returns to the free Primary plan and nothing is deleted.
• Nationwide edition (every department other than Denver): Premium only. The 30-day trial starts when you register. If it ends and you have not subscribed, you see the subscribe screen and your records stay saved.
• Renewal: a subscription renews automatically at the end of each year or month until you cancel.
• Founding member rate: officers who subscribe at $59.99 per year keep that rate for as long as the subscription stays active. Prices may change for new subscribers.
• Where you are billed: a subscription bought on our website is billed through Stripe and can be managed or cancelled from Settings (“Manage or cancel your subscription”). A subscription bought in the iPhone or Android app is billed by Apple or Google through the App Store or Google Play, at the price shown there at purchase, and is managed, cancelled and refunded in the store.
• Fitness and Diet Coaching: an optional add-on to Premium, $39.99 per year, bought on the website and billed through Stripe.

Refunds and cancellation

• Cancel anytime. Cancelling stops future renewals. You keep access through the end of the period you already paid for. The one exception is deleting your account: that cancels a subscription bought on the website at once, access ends then, and no refund is issued for the unused time.
• Bought on the website: cancel from Settings (“Manage or cancel your subscription”), or email support@centurionblue.com or text (303) 802-0272. To ask for a refund, email support@centurionblue.com from the email address on your account. A person reviews each request.
• Bought in the iPhone or Android app: cancel in your App Store or Google Play subscriptions. Refunds for those purchases are decided and paid by Apple or Google under their own policies. We are not able to issue them. Deleting your account does not cancel a subscription bought in a store.
• Cancelling or a refund does not delete your records. See Delete your account if you want them removed.

Community rules: Job Exchange and Marketplace

The Job Exchange and the Marketplace are part of the Denver edition and are open to signed-in members.

• We are not a party to what happens there. A job handed off on the Exchange is an arrangement between the officers involved. A Marketplace sale is between the buyer and the seller. Centurion Blue does not employ anyone through the Exchange, does not handle payment for a sale, and does not guarantee any listing, item, job, or person.
• Secondary-employment approval stays with you. Any approval, notice, or limit your department requires for an off-duty or extra duty job is your responsibility under your own department's policy. Taking a job from the Exchange does not change that.
• Post only what is yours to post, describe it honestly, and follow the law, including the laws that apply to the item you are selling.
• Listings and posts may be removed. Marketplace listings are reviewed before they appear, and a Job Exchange post may be held for approval before it goes on the board. We may decline, close, or remove any listing or post, and may limit an account that misuses these features.
• To report a listing, a post, or a message, email support@centurionblue.com or text (303) 802-0272 with the title of the listing or post and what is wrong. A person reads every report.

Acceptable use

Use the Service only for your own lawful record-keeping and, if you are a scheduler, for scheduling the jobs you coordinate. Don’t attempt to break, misuse, or gain unauthorized access to the Service or other users’ data.

Disclaimers & limitation of liability

The Service is provided “as is,” without warranties of any kind. To the fullest extent permitted by law, Centurion Blue is not liable for any indirect or consequential damages, or for any tax outcome, penalty, or decision based on the Service. Our total liability will not exceed the amount you paid us in the prior 12 months.

Changes

We may update these terms or this policy; material changes will be reflected by the “Last updated” date above. Continued use means you accept the current version.

Governing law

These terms are governed by the laws of the State of Colorado, USA.

Contact

Centurion Blue Consulting LLC, support@centurionblue.com · text (303) 802-0272 (text only) · Contact page · centurionblue.com