Privacy Policy

Last updated: 2026-04-29.

1. What we collect

KeyPhone is a Bluetooth Low Energy (BLE) companion app for compatible vehicle keyfob hardware. We collect the minimum data required to operate the service:

  • A randomly generated device identifier (UUID) stored on your device, used to authenticate command requests with our backend.
  • Trip access codes you enter into the app (these tie your session to a specific vehicle and time window).
  • Standard server logs (IP address, request timestamps) for security and abuse prevention. Logs are rotated within 30 days.

2. What we do NOT collect

  • We do not collect contact lists, photos, microphone or camera data.
  • We do not collect your precise GPS location. The app may request nearby device permission on Android — this is required by the operating system to discover the BLE keyfob and is never used to track you.
  • We do not sell or share data with advertising networks.

3. Bluetooth permissions

To communicate with the keyfob, the app requires Bluetooth scan / connect / advertise permissions. These are used solely to send lock / unlock / engine commands to the paired device and never for proximity tracking, beacon scanning, or any third-party purpose.

4. Data retention

Trip command history is retained for up to 90 days for service quality and dispute resolution, then permanently deleted. The device UUID is removed on app uninstall.

5. Sharing

Data is shared only with the rental / fleet / service operator that issued your trip access code, and only to the extent necessary to fulfill the trip (e.g., timestamp of unlock/lock events). No data is shared with advertisers.

6. Your rights

You can request a copy or deletion of all data tied to your device UUID by emailing privacy@keyphone.io. Requests are processed within 30 days.

7. Contact

Operator: MDBD. Contact: privacy@keyphone.io.

← Back