Privacy Policy for Keyway

Information We Collect

Personal Information You Provide to Us

When you register for and use the App, we collect the following personal information:

• Account Information: Email address, username, and password
• Organization Information: Organization name, contact name, and organization code
• Profile Information: User ID and associated organization data

Information Collected Automatically

When you use the App, we automatically collect:

• Device Information: Device type, operating system version, and unique device identifiers
• Usage Information: App features accessed, interactions with the App, and timestamps
• Location Information: GPS coordinates when you use the "Add Location" feature to tag items

Information You Create in the App

When you use Keyway's features, we collect:

• Item Data: Names, descriptions, types, addresses, GPS coordinates, and associated tags
• Group Data: Group names, addresses, contact persons, phone numbers, and email addresses
• Tag Information: NFC tag IDs and QR code associations
• Scan History: Items viewed and timestamps of views

How We Use Your Information

We use the information we collect to:

• Provide and Maintain the App: Create and manage your account, store your data, and enable app functionality
• Authenticate Users: Verify your identity using JWT-based authentication
• Enable Core Features:
  • Track physical assets using QR codes and NFC tags
  • Organize items by groups and locations
  • Search and filter your items
  • Provide GPS location services
  • Enable deep linking and Universal Links
• Improve the App: Analyze usage patterns to enhance features and user experience
• Communication: Send important updates about the App, your account, or changes to our policies

Data Storage and Security

Data Storage

Your data is stored on secure servers located at api.keywayapp.com. We use:

• Encryption: All data transmitted between the App and our servers uses HTTPS/TLS encryption
• JWT Authentication: Secure token-based authentication with automatic token refresh
• Access Controls: Role-based access to ensure users can only access their organization's data

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.

How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Within Your Organization: Users within the same organization can view shared items and groups
• Legal Requirements: If required by law, court order, or governmental request
• Service Providers: With trusted third-party service providers who assist in operating the App (e.g., hosting services), bound by confidentiality agreements

Your Data Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information through the App's settings
• Deletion: Request deletion of your account and all associated data
• Export: Request an export of your data in a portable format
• Opt-Out: Disable location services at any time through your device settings

To exercise these rights, contact us at the information provided below.

Location Data

The App collects location data when you:

• Use the "Add Location" button when creating items
• Manually enter GPS coordinates

You can control location permissions through your device settings. Location data is used only to:

• Automatically populate GPS coordinates for items
• Enable Apple Maps integration for item locations
• Store location information with your items

Location data is not collected in the background or used for tracking purposes.

Camera and NFC Access

The App requests:

• Camera Access: To scan QR codes for item identification
• NFC Access: To read NFC tags associated with items

These permissions are only used when you actively scan tags and are not accessed at any other time.

Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting the new Privacy Policy in the App
• Sending you an email notification (if applicable)

You are advised to review this Privacy Policy periodically for any changes.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the App, you consent to such transfers.

Third-Party Services

The App uses the following third-party services:

• Apple Maps: For displaying item locations (subject to Apple's Privacy Policy)
• Apple Universal Links: For deep linking functionality

We do not use third-party analytics, advertising, or tracking services.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Website: https://keywayapp.com

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell personal information)
• Right to access your personal information
• Right to equal service and price

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Legal Basis for Processing: We process your data based on:

• Consent: When you create an account and use the App
• Contract: To provide the services you requested
• Legitimate Interests: To improve and secure the App

Consent

By using the App, you consent to our Privacy Policy and agree to its terms.