KeySigned privacy policy

What the app does

KeySigned creates a local condition record for a vehicle. Depending on the iPhone, that record can include photographs, camera poses, LiDAR mesh and depth information, damage markers, close-up photographs, vehicle and handover details, signatures, timestamps, device capability information and integrity checksums. If the operator enters a business name, phone number or email in App settings, those are kept on the iPhone and printed on each new record so the customer can see who made it.

Where records are stored

Records are stored in the app's private container on the iPhone. We do not operate a cloud service, remote backup, analytics service or advertising service for records. The app does not automatically upload a scan.

An operator can deliberately export an evidence pack through the iOS share sheet. Once a recipient or another app receives an export, its handling is controlled by that recipient or service.

Camera, LiDAR and motion data

Camera access is required to photograph and scan the vehicle and to record damage close-ups. On supported iPhones, ARKit may also provide LiDAR mesh, depth, device motion and camera-pose information. This material is used to build the local record and is not sent to us.

Location

Location access is optional and used only while the app is open. When a handover's vehicle details open with no address filled in, or when the operator taps Use current location, the app asks for location; the first time, iOS asks whether to allow it. If location is allowed, the app requests one device location and asks Apple's network-based Core Location geocoding service for a suggested address. The operator confirms or changes the suggested text. From this lookup, the handover record keeps only the address text, not the latitude and longitude. We do not receive the location.

Apple processes information used by its Location Services under Apple's own privacy terms. The operator can deny location access and type the collection location manually.

Photo Library

The app never asks for access to the Photo Library. When the operator chooses to attach an existing damage photograph, the iOS photo picker shows only the photograph they pick to KeySigned, and that image is copied into the local handover record. It is kept exactly as it is, which can include the date, time and place the camera stored in it, and those details go with any export of the record.

Other apps

This version of KeySigned does not exchange data with any other app, including TradeBooked, which we also operate. Apart from the address lookup described above, data leaves KeySigned only when the operator shares a copy. If a later version can receive jobs from another app, this policy will say so before that version is released.

Retention and deletion

Local records remain on the iPhone until the operator deletes them or removes the app. Finalisation prevents editing through the app and creates tamper-evident hashes; it is not encryption and does not prevent the operator from deleting the complete record. Exported copies must be deleted separately wherever they were shared.

Tracking and automated decisions

The app contains no advertising identifiers, cross-app tracking or behavioural analytics. It does not automatically decide whether damage occurred. Damage and return-condition decisions remain with the operator.

Security

The app uses Apple's data-protected app container, SHA-256 checksums and a device-held P-256 signing key to provide tamper evidence. No system can guarantee absolute security. Operators should protect the iPhone with a passcode and export important records before deleting the app or replacing the device.

Your customers' data

A record made in KeySigned holds details of the business's customer, such as their name, signature, vehicle registration and photographs of the car. The business making the record controls that data and is responsible for it, including telling its customers how it is used. We do not receive it through the app: records stay on the business's iPhone unless the business exports and shares them. If you are a customer with a question about a record, ask the business that made it.

Subscriptions

If you subscribe to KeySigned, usually as the business that uses the app, you buy the subscription from Apple through the App Store. Apple takes the payment and handles billing, refunds and cancellations under its own terms and privacy policy. We never receive your name, Apple Account, email address or payment details, and the app itself sends us nothing.

Apple sends us a notice when a subscription or free trial starts, renews, fails to renew, changes plan, has auto-renew turned off or back on, is refunded or ends. Each notice gives the plan, its status, dates and price, and reference numbers Apple uses to link the notices together. We use the notices to count trials and subscribers, see renewals, cancellations and failed payments, and know our income. We keep the plan, its status, dates, price and whether it will renew, until 60 days after the subscription ends. We do not keep Apple's transaction number: we replace it with a coded reference made with a secret key, and use that only to match later notices about the same subscription. A short summary of most notices goes to our own internal dashboard, without the transaction number; a failed payment's summary carries a short form of the coded reference, so the payment that fixes it can close it. The dashboard deletes each summary 30 days after it last changes; a failed payment is kept until Apple recovers it or stops retrying, then for 30 days. Our lawful basis is legitimate interests: running our business and knowing how it is doing. We do not use the notices to contact you or market to you, and they hold no contact details. Because we hold no name or email for subscribers, we may not be able to tell which subscription is yours when you ask about it. Cloudflare receives the notices and stores what we keep, and the dashboard is hosted by Supabase; both act for us.

This website

The KeySigned website is hosted on Cloudflare. Our pages set no cookies, contain no analytics code and load nothing from other sites. The page that checks a record runs in your browser, and nothing you check is uploaded.

To deliver the site and protect it from attack, Cloudflare processes technical details of each visit, such as your IP address, the page requested and the time, under its own privacy policy. Cloudflare may set a strictly necessary security cookie if it has to check that a visit is not automated. We do not keep a server log of our own. Cloudflare also gives us totals of visits to the site, which we use only to see whether the site is being used; they do not identify you, and Cloudflare keeps them for a limited period. Our lawful basis for both is legitimate interests: keeping the site secure and working, and knowing whether it is used.

When you email us

If you email [email protected], for example with a question or for support, we keep your business name, your contact details (your name, email address, and anything else you include, such as a phone number or town) and the conversation. We use it to reply to you and to keep a record of what we agreed. If you ask us to tell you when KeySigned is on the App Store, we keep your email address and what you wrote so we can send you that one email, and we use it for nothing else. Our lawful basis is legitimate interests: answering business enquiries and running our business. We keep it for 2 years after our last contact with you, unless you ask us to delete it sooner. We don't sell it or use it for advertising. Our email is received through Cloudflare and stored by Zoho, which act for us.

Business contacts

We may contact businesses whose details they publish, for example on trade directories or their own websites. When we do, we say who we are, where we found the details and how to opt out. We keep the business name, the contact's name and role, their business email and phone number, where we found them, and notes of what was said in any email or call, in our own records, held in Zoho. Our lawful basis is legitimate interests: telling businesses about a product relevant to their work. We keep these on the same terms as emails above. If you ask us not to contact you again, we stop, and keep only enough to make sure we don't.

Outside the UK

Cloudflare, Zoho and Supabase may process data outside the UK, including in the United States. Where they do, their terms protect it with safeguards recognised under UK law, such as UK adequacy regulations or the UK International Data Transfer Addendum. Apple's processing, for the address lookup, for TestFlight and for App Store purchases, is covered by Apple's own privacy policy.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, and object to us using it. If you object to marketing, we stop. Email [email protected] and we will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Contact

For privacy requests or questions, contact us at [email protected], or write to SDAN LTD, 128 City Road, London EC1V 2NX.