KeyFoby Logo
🔒

Privacy Policy

Your privacy matters to us

Last Updated: December 5, 2025
⚠️

Legal Notice

This Privacy Policy should be reviewed by a qualified legal professional before publication. It is provided as a template and may need to be customized based on your specific business practices and jurisdiction requirements.

📋1. Introduction

Welcome to KeyFoby. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App") and related services.

KeyFoby is a professional mobile business management application designed specifically for locksmith businesses. The App helps you track sales, expenses, inventory, and business analytics.

By using our App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our services.

📊2. Information We Collect

2.1 Personal Information

When you create an account, we collect the following personal information:

  • Email Address: Required for account creation and authentication
  • Phone Number: Required during sign-up (10-digit Canadian/US format)
  • Full Name: Collected from your Google account if you sign in with Google OAuth (optional)
  • User ID: Unique identifier automatically generated for data isolation and security
  • Account Creation Date: Automatically recorded timestamp
  • Last Sign-In Date: Automatically recorded for security purposes

2.2 Business Data

To provide our business management services, we collect and store:

💰Transaction Data

  • Sales and expense records
  • Transaction dates and times
  • Customer names
  • Vehicle information (make, model, year)
  • Service types and descriptions
  • Sale and expense amounts
  • Payment methods
  • Transaction notes
  • Automatic profit calculations

📦Inventory Data

  • Product SKU and names
  • Product descriptions
  • Categories
  • Quantity and stock levels
  • Cost per unit
  • Reorder points
  • Vendor information
  • Storage locations
  • Product notes

🏢Business Profile Information

  • Business name
  • Business email and phone
  • Business address
  • Service areas (cities)
  • Default city
  • Business license number
  • Website URL
  • Service categories

2.3 Automatically Collected Information

When you use our App, we automatically collect:

  • Device information (device type, operating system version)
  • Session data (authentication tokens)
  • Usage data (app features used, interaction patterns)
  • IP address (through our backend provider)

🎯3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision

To provide and maintain the App's core business management functionality

🔐

Authentication

To verify your identity and secure your account access

🛡️

Security

To ensure data security, isolation, and prevent unauthorized access

📈

Analytics

To generate business charts, statistics, and insights for your business

💬

Communication

To respond to support requests and send important service updates

🔧

Improvements

To analyze usage patterns and enhance App features

📦

Inventory Management

To track stock levels, costs, and vendor information

💼

Transaction Management

To record sales, expenses, and calculate business profits

🔐4. Data Storage and Security

4.1 Where We Store Your Data

  • All data is stored in Supabase's secure PostgreSQL database
  • Data is encrypted in transit using HTTPS/TLS encryption
  • Data is encrypted at rest by our infrastructure provider
  • Data centers comply with industry-standard security certifications
  • Data may be stored in multiple regions for redundancy and reliability

4.2 Security Measures

🔒

Row Level Security

Only you can access your data - isolated by User ID

🔑

Secure Authentication

Tokens are securely stored on your device

🛡️

Password Protection

Passwords are hashed and never stored in plain text

🌐

HTTPS Encryption

All API communications use secure HTTPS

🔐

OAuth Security

Google passwords are never stored

📱

Device Security

Authentication credentials secured on device

4.3 Data Retention

  • User data is retained for as long as your account remains active
  • You can request account deletion at any time through the App settings
  • Upon deletion, all associated data will be permanently removed
  • Some data may be retained in backups for up to 30 days before permanent deletion

🔗5. Third-Party Services

We use the following trusted third-party services to provide our App:

🗄️

Supabase (Backend-as-a-Service)

🔐

Google OAuth (Authentication)

  • Purpose: User authentication via Google account
  • Data Shared: Email address and name (only if you choose Google sign-in)
  • Privacy: Subject to Google's Privacy Policy
  • Note: Your Google password is never stored in our system
📅

Google Calendar API (Planned Feature)

  • Purpose: Booking system and calendar synchronization (future feature)
  • Data Shared: Calendar events and availability information
  • Privacy: Subject to Google's Privacy Policy
  • Coming Soon

Our Data Sharing Commitment

  • We DO NOT sell your data to third parties
  • We DO NOT share your data with advertisers
  • Data is only shared with service providers as necessary to operate the App
  • Your data is isolated using Row Level Security - only you can access it

⚖️6. Your Privacy Rights

You have the following rights regarding your personal data:

👁️

Right to Access

Request access to your personal data and receive a copy of the information we hold

✏️

Right to Correction

Request correction of any inaccurate or incomplete personal data

🗑️

Right to Deletion

Request deletion of your account and all associated personal data

📤

Right to Portability

Request a copy of your data in a portable format (CSV/JSON)

🚫

Right to Object

Object to the processing of your personal data under certain circumstances

Right to Withdraw Consent

Withdraw your consent for data processing at any time

📨How to Exercise Your Rights

1.Email us: Contact keyfoby@gmail.com with your request

2.In-App Request: Use the settings screen in the KeyFoby App

3.Response Time: All requests will be processed within 30 days

👶7. Children's Privacy

Age Restriction: The KeyFoby App is NOT intended for children under the age of 13.

  • We do NOT knowingly collect personal information from children under 13
  • The App is designed for professional business use by adults
  • If you believe a child has provided information to us, please contact us immediately at keyfoby@gmail.com
  • We will promptly delete any information we discover belongs to a child under 13

🌍8. International Data Transfers

Your information may be transferred to and stored in data centers outside your country of residence:

  • Data may be stored in data centers operated by Supabase in various regions
  • Data transfers comply with applicable data protection laws (GDPR, CCPA, etc.)
  • Our service providers implement appropriate safeguards to protect your data
  • By using the App, you consent to the transfer of your information to these facilities

🍪9. Cookies and Tracking

Good News for Your Privacy:

  • The App does NOT use cookies (it's a mobile app, not a website)
  • We do NOT track you across other apps or websites
  • No advertising or marketing tracking is implemented
  • Analytics are limited to app usage patterns for service improvement only

🔄10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

How We Handle Updates:

  • 1.We will notify you of any material changes through the App or via email
  • 2.The "Last Updated" date at the top of this policy will reflect the revision date
  • 3.Your continued use of the App after changes constitutes acceptance of the updated policy
  • 4.We encourage you to review this policy periodically for any updates

📞11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

📍

Address

40 Courtland Ave
Hamilton, ON L9B 1X6
Canada
🌐

Website

www.keyfoby.com

⏱️Response Time:We typically respond to privacy inquiries within 1-2 business days

📝Important Legal Notice

Governing Law: This Privacy Policy is governed by the laws of Ontario, Canada, without regard to conflict of law principles.

Compliance: This policy is designed to comply with:

  • General Data Protection Regulation (GDPR) for EU users
  • California Consumer Privacy Act (CCPA) for California users
  • Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users

Disclaimer: This Privacy Policy is provided as a comprehensive template. We strongly recommend consulting with a qualified legal professional to ensure it meets all applicable legal requirements for your jurisdiction.