Privacy

What we store

• Your account — username and a hashed password. We do not collect an email address.
• Your profile — the facts you enter so you don't retype them: name, rank, pay grade, unit, plus any reusable values you create yourself (duty phone, MOS, address, and similar).
• Your documents — the answers you saved on a form, so you can reopen and edit them.
• Your units — which units you joined and whether you lead them, plus forms a leader assigned to you and their status.

What we never store

• Social Security numbers and DoD ID / EDIPI numbers. Keys containing ssn, dod_id or edipi are rejected from saved profile values. When a form has such a box, you type the number at the moment you generate the PDF; it is used for that one render and then discarded. It is never pre-filled, never saved, and never carried to the next form.
• Filled PDFs. Your finished document is generated in memory and streamed to you. It is not written to storage on our side.
• Payment information. The app does not take payments.
• Location, contacts, photos, or device identifiers.

Who can see your information

• You. Your profile and documents are tied to your account and every request for them is checked against it.
• Your unit leaders — only what you send them. When a leader assigns you a form, they see whether you have opened and submitted it. They see the document you submitted, and only after you submit it. They never see your profile. Leaders of other units never see any of it.
• Other members of your unit see the unit's name, its leaders, and how many people are in it — not each other's names or ranks.
• We do not sell your information, and we do not share it with advertisers or data brokers.

Your controls

• Download everything we hold about you as a JSON file, any time, from your profile.
• Delete a document from your documents list.
• Delete your account from your profile. This is a real deletion: your profile, documents, saved versions and unit memberships are removed. Forms you already submitted to a leader stay with that unit's record of the tasking, without your profile attached.
• Remove a saved link between a form's field and one of your profile values, from your profile page.

Where it lives and how it's protected

• Hosted on Amazon Web Services in the United States (us-east-1).
• Traffic is HTTPS only. The database is encrypted at rest, sits on a private network with no route to the internet, and requires an encrypted connection.
• Uploaded blank form templates are stored encrypted and privately.
• Passwords are stored as salted hashes, never in readable form.
• Sessions expire after 8 hours of inactivity.

Artificial intelligence

When a staff member sets up a new blank form, an image of that blank page is sent to Anthropic's Claude API to propose where fields belong. Only the blank template is involved — your filled-in answers are never sent to any AI service.

Children

Charlie Mike is intended for service members and is not directed at children under 13.

Changes and contact

If this policy changes in a way that affects what we collect, we'll update the date above. Questions or a request about your data: charliemikeapp@gmail.com.