Privacy Policy

Effective date: July 9, 2026

OnPar Fire & EMS ("OnPar," "we," "us") is operated by Whyte Line Holdings LLC, a Texas limited liability company. OnPar is an operations platform for fire departments and EMS agencies. This policy explains what we collect, why, and your choices.

The short version

We collect what your department enters to run its operations — inventory, checks, schedules, controlled-substance custody records — plus your name, work email, and role.
We never sell data. We never use it for advertising. Your department owns its data.
Face ID/biometrics never leave your device. Camera images used for scanning are processed and discarded — we store the scan result, not the photo, unless your department explicitly attaches a photo.

What we collect

Website forms: if you request a demo or download a resource on our marketing site, we collect the name, department, and contact details you submit (processed by Netlify, our hosting provider) and use them only to respond to you. No mailing list without your say-so; unsubscribe by replying to any email.

Account data: name, email address, phone number (optional), department, role.

Operational data your department enters: inventory items and counts, expiration dates and lot numbers, apparatus checklists, controlled-substance custody records (counts, signatures, seal numbers), schedules and shift assignments, maintenance records, messages/alerts sent through the platform.

Device data: push notification token, device model, app version — used to deliver notifications and fix bugs.

Usage data: log records of sign-ins and actions taken in the app (which also serve your department's audit requirements).

What we do not collect: patient care records, social security numbers, payment card numbers (payments are processed by Stripe; we never see card data), biometric data (Face ID runs entirely on your device via Apple's APIs), or precise location tracking.

How we use it

To provide the service to your department; to secure accounts and maintain audit trails; to send notifications your department configures (shift reminders, alerts, briefings); to provide support; and to improve the product using de-identified, aggregated statistics. That's the list.

Who can see your data

Your department, per the roles your administrators configure — this is the point of the product.
Our service providers (subprocessors) that host and operate the platform: Supabase (database/auth), Netlify (hosting), Apple (push delivery), Stripe (billing), [Twilio (SMS, if enabled)]. Each is bound to use data only to provide their service to us.
Legal requirements: we disclose data if required by law, subpoena, or court order, and will notify your department unless legally prohibited. Note that data held by a governmental department may be subject to public-records laws that apply to the department itself.
No one else. No sale, no ad networks, no data brokers.

Retention

Your data is retained while your department's account is active. After termination, departments have a 90-day export window. Controlled-substance custody records are retained and deleted only on the department's signed instruction, reflecting their regulatory character. You may ask your department administrator to deactivate your individual account at any time; audit records of actions you took remain part of your department's records.

Security

Encryption in transit and at rest, row-level tenant isolation, role-based access, daily backups with point-in-time recovery, and append-only controlled-substance records. No system is perfectly secure; we will notify affected departments without undue delay after confirming any breach.

Your choices

Notifications: control push notifications in iOS Settings or in-app preferences.
Access/correction: your department administrator can correct roster data; contact us for anything else.
Deletion: individual accounts can be deactivated by your administrator; department data deletion follows the retention terms above.

Children

OnPar is a workplace tool for emergency-services personnel and is not directed to children under 16.

Changes

We'll post changes here and update the effective date; material changes will be announced in-app to department administrators.

Contact

Whyte Line Holdings LLC dba OnPar Fire & EMS

[MAILING ADDRESS]

privacy@onpar