Keystone Keystone App

Keystone Privacy Policy

Last updated: September 11, 2026

This Privacy Policy explains how VinTEK Solutions ("we," "us," or "our") collects, uses, and protects information when you use the Keystone mobile application ("Keystone" or the "App").

Keystone is a business management tool for field service professionals. It is designed to store and manage data about you (the service business owner or operator) and the clients you serve. As a user, you are responsible for ensuring your collection and use of client information complies with your local laws and any agreements you have with your clients.

1. Information We Collect

Your Account Information

When you sign in to Keystone, we collect:

Business Data You Enter

Keystone stores the operational data you create:

Client Information You Store

You control what client information you enter into Keystone. We process and store this information on your behalf as a data processor. You remain the data controller for your clients' information under GDPR and similar regulations. It is your responsibility to:

Sensitive Information for Certain Business Types

Depending on the type of business you operate, Keystone may let you record more sensitive categories of information about your clients, their dependents, or their property:

These fields are entirely optional and exist to support the specific business types that need them. See Section 6 for additional detail on information about children specifically.

Biometric Authentication (App Unlock)

If you enable biometric unlock (Face ID, Touch ID, or fingerprint), Keystone uses your device's built-in operating system authentication (Apple's LocalAuthentication framework or Android's BiometricPrompt) to confirm it's you before unlocking the app. Your fingerprint or face data is captured, processed, and stored entirely by your device's operating system — Keystone and VinTEK Solutions never receive, see, or store your raw biometric data. We only receive a simple success/fail result from the OS.

Location Data

Keystone may request access to your device location for:

You can deny location access; mileage and route features will simply be disabled. Location history is stored in your Supabase database for reporting and is deleted when you delete the associated mileage log or job.

Camera & Photos

Keystone can access your camera or photo library to attach photos to jobs (e.g. before/after shots, receipts, equipment damage). Photos are uploaded to Supabase Storage and are accessible only to your account.

Microphone

Keystone does not access your microphone.

Contacts

Keystone does not access your device contacts automatically. If you manually enter client contact information, that data is stored in your business database.

Usage & Analytics Data

We use Firebase Analytics to collect anonymous, aggregated usage data (app opens, feature usage, general device/app info such as app version and OS version) to understand how Keystone is used and improve it. Keystone does not currently include a dedicated crash-reporting service. This data cannot be used to identify you or your clients personally.

Push Notifications

If you enable notifications, we use Firebase Cloud Messaging to deliver them (e.g. new invoice payment, new client message). This requires registering a device token with our servers, tied to your account; it is used only to deliver notifications to your device and is removed if you disable notifications or sign out.

Payment Information

Subscriptions are processed by Google Play Billing and Apple App Store In-App Purchase. Invoice payments you collect from your clients are processed by Stripe or Square, whichever payment processor you choose to connect. We do not collect, store, or have access to credit card numbers or payment account details — all payment data is handled by Stripe, Square, and the respective app stores. We do store identifiers these processors return to us (such as a payment or charge ID) so we can match a payment to the correct invoice.

2. How We Use Your Information

We use the information to:

3. Third-Party Services

Keystone integrates with the following third-party services, each with its own privacy policy:

4. Data Storage & Security

Your Keystone data is stored on Supabase (AWS) servers in the United States using encrypted connections (TLS/SSL). We use:

Keystone also caches some data locally using SQLDelight for offline access. Local data is protected by your device's OS-level encryption on supported devices.

While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure.

5. Data Retention & Deletion

Your data is retained as long as your account is active. You can delete your data at any time:

Upon account deletion, all your business data is permanently removed from our cloud services within 30 days. Invoice records may be retained longer if required by tax law or for Stripe compliance.

Your clients' right to deletion: If one of your clients asks to be removed from your records under GDPR, CCPA, or similar law, you can delete their record directly in the app. We do not provide a mechanism for end clients to contact us directly — they must go through you.

6. Children's Privacy

Keystone is a business tool intended for adult service professionals. It is not directed to children, no child registers an account or interacts with Keystone directly, and we do not knowingly collect personal information directly from children under 13.

Keystone does, however, let daycare and similar businesses record information about the children of their own clients — for example a child's name, date of birth, allergies, medical conditions, medications, physician contact info, and authorized-pickup list — so the business can provide daily care, medication, and incident-report features. This information is entered and controlled entirely by the business operator (the Keystone account holder), who is responsible for obtaining any parental/guardian consent required by law before entering a child's information, and for complying with any applicable regulations (such as COPPA, if applicable to their business) governing information about children in their care. We act only as a data processor for this information on the business's behalf, the same as any other client data — see "Client Information You Store" above.

7. Your Rights

Depending on your location, you may have the right to:

To exercise any of these rights, contact us at vintek615@gmail.com. We will respond within 30 days.

8. What We Don't Do

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be announced in the app. Continued use of Keystone after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your Keystone data, contact us at:

VinTEK Solutions
Email: vintek615@gmail.com
Website: vinteksolutions.com

Looking for privacy policies for our other apps? EverList · SongBook · Berea · All policies