MCPTT.comMission Critical Push-to-Talk Service

Privacy policy

Last changed 10/19/26.

MCPTT is a push-to-talk radio service for public safety agencies, run by the Coosada 911 Communications District ("the District", "we"). This policy covers the MCPTT apps for Android and iOS, the MCPTT radios, and the MCPTT servers they connect to.

Who is responsible

Your agency (the police department, fire department, 911 district or other public body that gave you your account) decides why and how your information is used. It is the controller of that information. The District runs the service for the agency and processes the information on its behalf. Questions about how your agency uses the information go to your agency first; you can also write to us at admin@coosada911al.gov.

You can only use MCPTT with an account your agency created. MCPTT is not offered to the general public.

What we collect

  • Account details: your username, display name, badge or unit number, the agency and talkgroups you belong to, your role, and a hash of your password or PIN (never the password or PIN itself).
  • Contact details: an email address or phone number only when you give one, for example on the account deletion form.
  • Voice: every transmission you make on a talkgroup is recorded, with who spoke, on which device, in which talkgroup, when, and which radios received it. Where the agency turns it on, transmissions are transcribed to text.
  • Messages: text messages, voice messages, and the photos and files you attach to them, with who sent them, to whom, and when.
  • Location: the position of your device, including while the app is closed or not in use when you allow it, sent periodically, when you talk, during an emergency, and when a dispatcher or admin asks for it. Your agency decides when location is collected.
  • Device identifiers: the device's IMEI or phone ID, model, operating system and app version, the key the device signs in with, and the mobile network it uses. On iPhone, the push token Apple gives the app, so the server can wake the app when someone talks; it is kept only while the app is connected to a talkgroup and is never written to logs.
  • Battery and signal: battery level and charging state, radio signal strength, network type and serving cell, and data used, to keep radios working and to map coverage.
  • Diagnostics: app logs and events from your device, sent when the app reports a problem or when your agency asks for them. They describe what the app did; they never contain audio, passwords, PINs or keys.
  • On your phone: the transmissions your phone played or sent are kept on the phone, encrypted, for the number of days your agency sets (at most 30), so you can play them again. They are erased when you sign out.
  • Sign-in and audit records: when you sign in, from which address, and every privileged action, such as playing a recording or viewing a location.

Why we use it

  • To carry voice and messages between radios and dispatch, and to keep the recordings that public safety rules require.
  • To show your location to the dispatchers and supervisors your agency allows, so help can be sent to you.
  • To sign you in, keep your account secure, and stop misuse.
  • To find and fix faults in devices, the app and radio coverage.
  • To keep an audit trail of who looked at or changed what.

We do not sell your information. We do not use it for advertising. We do not track you across other apps or websites, and the apps contain no advertising or third-party analytics.

Who sees it

  • Your agency's dispatchers, supervisors and administrators, within the permissions your agency gives them.
  • Other agencies only when your agency shares a talkgroup with them, and only for that talkgroup.
  • EchoMaps (maps.echo911.com), which serves the map in the app: it receives your device's internet address and the area of the map you are looking at, not your account or your reported position.
  • Apple, which delivers the wake-up pushes to iPhones. A push carries only identifiers, except an emergency push, which carries the callsign, unit number and, when known, the person's name so it can show on the lock screen. No push carries a location, a message or audio.
  • The District's operations staff, only to run and support the service; their access is recorded.
  • Others only when the law requires it, for example a court order or a public records request handled by your agency.

How long we keep it

  • Recordings, transcripts, messages and their attachments, transmission records and locations: for the period your agency sets, and never less than five years, because they are public safety records. Records under a legal hold are kept until the hold is released.
  • Device diagnostics, battery and signal reports and data usage: 90 days.
  • Audit records: at least three years.
  • Account details: until the account is deleted.
  • Account deletion requests: three years after they are decided, without the contact details you gave.

Deleting your account

You can ask for your account to be deleted:

  • in the app, under Settings, Delete account; or
  • on the web at cp.mcptt.com/account/delete, signing in on the form with your username or phone ID and your PIN or password so we know the request is yours.

You get a reference number. Your agency's administrator reviews the request, because your account belongs to the agency, and decides within 30 days. A request made in the app, or on the web after signing in, can be refused only when the law requires the account to be kept, for example under a legal hold, and the status page then gives the reason. If no decision is made within 30 days, the District deletes the account.

A web request made without signing in is reviewed by the administrator, who first checks that you hold the account. If it is not decided within 30 days it is closed as not verified and the account is kept; you can then ask again from the app, on the web after signing in, or through your agency.

You can check the status at cp.mcptt.com/account/delete/status with the reference.

When the request is approved, your account, its sign-in details and the phones registered to it are removed, and your username, badge and name are erased from our records. Recordings, transcripts, messages, locations and audit records already made are public safety records: they are kept for their retention period, but they then refer to an anonymous id instead of your name. Your agency's unit or callsign name is the agency's and stays.

Security

Connections are encrypted. The app and the web pages use TLS 1.3; some older radio models fetch software updates over TLS 1.2. Devices sign in with a key held in the device. Recordings and other sensitive records are stored on servers in the United States that the District or the agency controls, and every access to them is recorded.

Children

MCPTT is for agency staff. It is not meant for children and we do not knowingly collect information about children through it.

Changes

We will post changes here with a new date. If a change affects how your information is used, your agency will be told first.

Contact

Coosada 911 Communications District
admin@coosada911al.gov