Privacy Policy

Effective November 5, 2026. Version 2026-11-05. Questions: jonathan.hadad@keyturnapp.com

This policy explains what information Keyturn Technologies, LLC ("Keyturn", "we", "us") collects through its apps, websites and servers, how we use it, and the choices you have. There are three apps:

Keyturn Business, the software a repair shop or dealership runs on its computers (Windows and Mac), phones, iPads and tablets, including its time clock, technician tablets and check-in iPads;
Keyturn, the app for people whose car is serviced at a shop that uses Keyturn, on iPhone, Android and the web;
Keyturn Teams, the app for people who work at those shops: their schedule, requests, hours, team messages and papers.

Keyturn is used by businesses, mostly auto repair shops and car dealerships. Those businesses put information about their own customers into Keyturn. For that customer information, the business decides what is collected and why, and we handle it on the business's behalf. If you are a customer or an employee of a business that uses Keyturn, contact that business about your information.

Keyturn never contacts a business's customers on its own. Any call, text or email you get about your vehicle or service visit comes from the business, using its own phone numbers and email accounts. That includes texts you turn on yourself in the Keyturn app, such as "text me when my car moves": choosing that tells the business you want them, and the business sends each one from its own number when it updates your job. Notifications from the Keyturn app on your phone are the business's too: they come when the business answers your booking, replies to your message or moves your car along, or as a reminder the business turned on and you agreed to, and Keyturn only carries them to your phone. Keyturn itself texts you only when you ask it to: when you sign in to the Keyturn app or Keyturn Teams, open a service page from the app, or delete your account on our website, a one-time sign in code is texted to the number you entered, by us or by Google Firebase for us, and nothing else. In the Keyturn app, Keyturn also sends notifications of its own about features you use there, never about a business's work: a Glovebox copy about to end, a safety recall on one of your cars, the day before a visit you asked for at a shop that is not on Keyturn, and, with Keyturn Plus, your connected car's alerts and the reminders you set. You can turn notifications off in your phone's settings. When a business adds you to its team with your mobile number, the invitation to Keyturn Teams is texted by that business, from its own texting service. We email people who have a Keyturn account only about that account, such as sign in codes, security notices and answers to reports they send us. We email a person who does not yet have an account only once and only because a business asked us to: an invitation to join that business on Keyturn, sent to the address the business's administrator typed.

What we collect

Account information. Your name, email address, optional phone number, account type (owner or employee) and a scrambled hash of your password. We never store your password itself. A Keyturn Teams account can be just a mobile number, proven by a texted code, with no email or password.

Signing in with your face, finger or a passkey. Face ID, Touch ID and a phone's fingerprint sign in are checked by your own device; Keyturn never receives your face or fingerprint. When you turn on Touch ID for Keyturn Business on a Mac, the sign in you already had on that Mac is kept there, sealed by the Mac's own keychain, and Keyturn checks it is still good before it opens. When you create a passkey, your device or your password manager (such as iCloud Keychain or Google Password Manager) keeps its private key, which never leaves it. Keyturn keeps only the public key, the device name you see, and when it was made and last used, so it can check that a sign in came from your passkey.

Business information. For businesses that sign up: the business name and type, contact email, phone, address, number of employees, time zone, website and logo.

Membership information. Which organizations you belong to, your role, and whether an owner approved you.

Customer Data. Information businesses enter about their own customers, such as names, phone numbers, emails, vehicle and repair order details, appointments, service jobs and their notes, call notes, and the texts and emails sent. It also includes photographs and videos of a customer's vehicle taken by the business, the mileage and condition recorded when a vehicle is dropped off, and the record of work a customer was asked to approve: what was asked, when, who said yes or no, how they answered, and, when the customer chooses to sign or the business requires a signature, the signature they draw. This is stored on Keyturn's servers so it is the same on every computer the business uses, with a working copy kept on each of those computers.

The Keyturn app. If you use the Keyturn app as a customer of a business that uses Keyturn:

Your account: the mobile number you sign in with (kept encrypted, and found by a scrambled fingerprint of it), the name you give the app, a name for your phone, when you signed in, and which visits and invoices you opened. If you add an email and a password, we keep the email encrypted, found by a scrambled fingerprint of it, and a scrambled hash of the password; we never store the password itself. We use the email to sign you in on a new phone, to send you the codes that confirm it or reset your password, and to tell you when it changes. Nothing else is emailed to it. We match your number to the number a business typed on your visit so the app can show you that visit. The sign in code is created and texted by Telnyx, our texting provider, or by Google Firebase Authentication, which receive the number you enter for that one purpose.
Your cars: the year, make, model, VIN and plate of each car you add in My cars. A VIN you scan with the camera is read on your phone; the picture is never sent.
Your car's photo: a photo you take for one of your cars is turned upright, made smaller, its details (such as where it was taken) stripped, and kept encrypted until you change it, remove the car or delete your account, and for no more than three years. Choosing a photo a shop took of your car only points to it; it stays the shop's. Until you choose one, the app shows the shop's photo that shows the whole car best. Our own servers work that out by looking at the photos the shop took around the car (never a photo of the VIN) and keeping only a score for each. No photo is sent to any other company for it.
Glovebox: photos you take of a car's insurance card or registration, a cleaned copy of each (cropped, straightened and evened out on our servers, never redrawn), and what Keyturn reads from it and you check: the insurer, the policy number, the start and end dates, the VIN, and a registration's plate and state. Never a name, address or driver's license. They are kept encrypted and used only to show you your copy and to remind you, in the app, before it ends. Keyturn never sells them, never uses them to offer you insurance, and does not give them to any other company. A shop sees a copy only when you share it with them, and only until you stop; for each share we keep which copy, which shop, the exact words you agreed to, when you shared and when you stopped, for five years. A copy is deleted when you replace or remove it, when you delete your account, or a year after it ends.
Texts from each shop: for each business, your answer to each of three kinds of texts (service updates, reminders and offers), the exact words you were shown, and when. See Text messages, below.
Booking a visit: your name, mobile number, email if you type one, the car, what is going on with it, any note, any photos or video you add, and the time you ask for. A booking request goes to the business you chose and becomes part of its records. Photos and a video you add are kept encrypted with that business's key; if you never send the booking they are deleted after a day, otherwise 400 days after you sent them.
Asking a shop that is not on Keyturn: when you book with a shop from Google's listing, we keep the shop's name, phone number, address and Google's id for it, the day and time of day you asked for, the car, what it needs and the message the app wrote for you (those last three encrypted), and whether you said they booked it. The call or text goes from your own phone, and Keyturn never contacts that shop. It is kept so the app can show it and remind you the day before, and deleted a year after the day you asked for, or with your account.
On my way: when your car is ready and you tap On my way, you either pick how long you will be, or tap Use my location: your phone's location is read once and sent once, our servers work out how long the drive is, and the shop is told only the time you should arrive. Your location is not kept.
Shops you save or recommend: the shops you save in the app, until you remove them or delete your account. When you recommend a shop that is not on Keyturn, we keep its name and Google's id for it, so we know which shops people want on Keyturn; we never tell the shop who recommended it.
Keyturn Plus: if you subscribe, Apple or Google takes the payment; we never see your card. RevenueCat, the service that tells us about App Store and Google Play purchases, gets your Keyturn account number from us and, from the app on your phone, the purchase and the basic facts about the phone its software needs (such as the kind of phone, the app version and your country), never your name, phone number or email; it tells us your plan, whether you are in a free trial, and when it renews or ends. We note when we showed you a Plus suggestion and what you chose, so we do not ask too often. Known problems are asked of NHTSA with only the year, make and model. A receipt you scan is read on our servers. It is kept only if you save it to your receipts: then its photo (made smaller) and what it says are kept encrypted until you remove it, and no longer than seven years after the date on the receipt. Your maintenance plan, the warranties you add, and the registration and inspection dates you enter (with your county where the state's inspection depends on it) are kept until you remove them or delete your account. Your mileage log stays until you delete a trip or your account, with what each trip was for encrypted, and is kept even if Plus ends.
A connected car: if you connect a car, you sign in with its maker on Smartcar's page, where Smartcar's own privacy policy applies, and choose what to share. We ask only to read the car's VIN, miles, fuel or battery level and range, tire pressures, oil life, warning lights and diagnostic codes, and an electric car's battery capacity. We never ask for its location and never send it commands. Smartcar gets a code we make for you, not your name, phone number or account. We keep the newest reading of each car; older readings keep only an electric car's battery capacity. We use the readings to show them to you and to send the alerts you get; we never sell them, and a shop sees them only if you send them. Disconnecting the car, Plus ending or deleting your account removes the car at Smartcar the same day. When Plus ends we keep what was read, so it comes back if you connect the car again, and delete it 400 days after the car was disconnected. So that a free trial connects a car only once, we keep a scrambled code of your phone number and of the car's VIN, which cannot be turned back into either, for two years.
Messages to a shop: what you write and the photos you send to a business that has messages turned on. They are that business's records, kept encrypted with its key. Photos are deleted 400 days after they are sent.
Finding a shop: a ZIP code you type or, only when you tap Use my location and allow it, your phone's location rounded to two decimal places (about a kilometer), on your phone and again on our servers. It is used only to find shops near that point and is not kept. When you search for a shop by its name, a street or a city, the words you typed are used the same way and are not kept either. A ZIP code's middle point is kept for 30 days so the next search near it is quicker, with nothing about who asked.
Kept on your phone only: Face ID or fingerprint to open the app, a booking you have not sent yet, where you parked (with its photo and note), and adding a visit to your calendar, which goes through your phone's own calendar; Keyturn never reads your calendar.
Rating the app: when the app asks you to rate it, your phone's app store asks and keeps your answer; Keyturn learns nothing about it.

Keyturn Teams. If you use Keyturn Teams:

Your account: your mobile number (kept encrypted, and found by a scrambled fingerprint of it), when it was proven, a name for your phone, and that you accepted these documents and said you are 18 or older.
Your place at each shop: the person the business already added to its team (your name, position and mobile number, entered by the business) is linked to your account when you answer "Is this you?" or use a code the business gave you. If the business has not added you, your name and the business you asked to join go to that business's managers.
What you do in the app: requests you send (time off, running late, leaving early, trading or giving away a shift), their times and the reason you type, kept encrypted with the business's key; your answers to coworkers' requests; signing your pay period, saying something is wrong with it, and fixes you ask for. These are the business's time records.
What the app shows you comes from the business's records: your schedule, who else is working, your hours and, only if the business turns it on, your estimated pay, worked out from the rates the business entered. It is shown only to you, never sent anywhere, and is not a pay statement. If you work on cars, it also shows your own hours on jobs and the cars assigned to you, from the business's repair orders.
Messages and announcements: what you write to your coworkers and the photos you send, kept encrypted with the business's key. A message between people is read only by the people in that conversation, or, in a group (everyone, a position, or the people working today), by its current members. The business's owner and managers cannot read them, and Keyturn staff cannot open them in their records tool. When you edit or delete a message, every version is kept, encrypted, for as long as the message would have been, so that a transcript is complete. A transcript of one conversation is made only on a legal request: when an administrator of the business asks Keyturn in writing, naming the possible violation of the law and the dates, or when Keyturn receives a legal demand, such as a court order. Keyturn reviews each request and may decline it. If a transcript is released, the people in the conversation are told, unless the legal demand forbids telling them. Announcements from the business's owner or managers show them who has read each one. A notification about a message says who wrote it, never what it says. Once you leave a business, you can no longer open its messages.
Time off and availability: your time-off balances, worked out from your hours on the business's clock and the business's own time-off rules, the time off you ask for and, for sick time, which kind of use it is (your own health, caring for family, or safety), never the illness or what happened. The availability you set, and each change to it.
Papers and licenses: each document you sign in Keyturn Teams, with its exact words or file and their fingerprint, your typed name, when, and the device and IP address you used. The licenses and certifications you or the business add: the kind, the number (encrypted), who issued it, its dates and any photo of the card (encrypted). Keyturn reminds you and your managers before one ends. It never checks a license with whoever issued it. Staff records the business shared with you (such as a warning or a thank-you), and whether you signed that you received them and any reply you added.
Your profile: your phone numbers, address and up to three emergency contacts, which you keep current in the app, kept encrypted with the business's key, with every change kept. The business's administrators and the managers who keep staff records or approve time can see it, and each look is recorded. Your coworkers see your mobile number only if you choose to share it in the app.
Starting at a business: if the business uses Keyturn's new-hire checklist, you see your own steps, such as signing the handbook and accepting your payroll provider's invitation. For Form I-9, Keyturn records only the day your documents were checked in person and who checked them, never a copy of a document or a number from one. Keyturn Teams never asks for your Social Security number, your W-4 or your state's withholding form, or your bank details: your employer's payroll provider collects those.
Checklists, thank-yous, shift questions and training: the tasks you tick on the business's checklists, with any photo a task asks for (a task can be ticked only while you are on the clock, when the business keeps its time clock in Keyturn). Thank-yous from your coworkers, only if the business turns them on: they always name who sent them, and they show on the team's feed only while you say yes, and otherwise only you, the sender and the managers who can take one down see them. Your answers to the business's questions after a shift, if it asks them in the app: every question can be skipped, and the business chooses whether answers carry your name. Your results in the business's own training lessons.
Reminders and your location: Keyturn Teams can remind you when your shift has started, or your break has ended, and you have not clocked in, and when you missed a shift. Only if you say yes in the app after reading what it does, your phone checks its location at those moments, works out on the phone whether it is at the business, and sends us only that yes or no, which we use to word the reminder and delete within 7 days. Your location itself never leaves your phone, nothing is checked at other times, and the business never sees it. You can say no or turn it off at any time; your answer, the date and the text you read are kept as the business's record. Some states ask the business to post a notice or tell applicants; there it stays off until the business says it has done so.
Keyturn Teams uses your camera or photos only when you add a photo yourself, such as to a message, a license or a checklist task. It never reads your contacts.

Payments. When a business records or takes a payment in Keyturn, we keep the amount, any tip, how it was paid, a reference the business types (such as a check number or the last four digits of a card), who took it and when. When a business takes a card or bank payment through its own QuickBooks Payments account, the card number or bank details are typed into fields that send them straight to Intuit, the company behind QuickBooks. They never reach our servers and we never store them. We keep only what Intuit sends back: its reference for the charge or the saved card, the card brand, the last four digits, the expiration date, the name on the card, and, for a card kept on file, when and how the customer agreed to that.

Accounts a business connects. When a business connects QuickBooks, we keep the connection's access keys, encrypted with that business's key, and exchange its customers, items, invoices and payments with its QuickBooks company. When a business connects Google Voice, each of its computers signs in to Google itself, and that sign in stays on that computer; we never copy it to our servers or to the business's other computers. When a person connects an email account, its access keys stay on the computer that connected it.

Time clock. If a business uses Keyturn's time clock: each worker's name, employee number, punches (clock in, clock out and breaks, to the second), corrections and who made them, the PIN as a one way hash, the notices they signed and, for a worker under 18, their date of birth. These are the business's records. A time clock iPad, and a check-in iPad, reports where the iPad itself is, so it can lock if it is taken from the shop; Keyturn never tracks where a person is. If the business turns on face clock-in, see Face clock-in below.

A business's team records. A business can also keep its people's records in Keyturn: time-off rules, balances and requests, availability, the documents it asks its people to sign, licenses and certifications, staff records such as warnings and thank-yous, new-hire checklists, shift checklists, training lessons and results, and, for technicians, comebacks and tool and uniform allowances or charges. These are the business's records. What a worker sees and adds in Keyturn Teams is described above.

Car sales. If a dealership uses Keyturn's sales side: the deal, the buyer and any co-buyer, trade-ins, signed deal documents and, only if the dealership turns credit applications on, the applicant's credit application, including their Social Security number, date of birth, driver's license, addresses and employment. A credit application is kept encrypted with the dealership's key and deleted after the number of days the dealership sets. These are the dealership's records.

Records of what happens. Sign ins, failed sign ins, the IP address used, the device name you choose, and actions like approving members or changing roles. We keep these to protect accounts and to show owners what happened in their organization.

Agreements. Which version of these documents you accepted, a fingerprint of the exact wording, when you accepted, whether you confirmed you are 18 or older, the IP address and the app and device details used.

App and device information. The app version, a random ID for your install, your computer's name and operating system, and whether updates were installed. We use it to deliver updates and fix problems.

Notifications on your phone. When you allow notifications in Keyturn Business, Keyturn Teams or the Keyturn app, we keep your phone's notification token, which app and kind of phone it is, the sign in it belongs to, and the switches you set for each kind. A notification's title and text go from our servers to Expo, which passes them to Apple's or Google's notification service to reach your phone. We keep a record of each notification for seven days and drop its words once Expo has taken it. Notifications to a business's people, in Keyturn Business and Keyturn Teams, never carry an amount of money or a phone number. A Keyturn app notification that your car is ready, or about its inspection, can show a photo the business already shared with you: the notification carries a private link to that one photo, made for your phone, which works for 12 hours and only while you are signed in, and your phone fetches the photo from our servers. When you sign out, that phone stops getting them; when you delete your account, its tokens are deleted.

Feedback. Bug reports and requests you send, including a screenshot of the app if you choose to attach one.

Business contacts. When a Keyturn representative visits or calls a repair business, Keyturn keeps the business's name, address and phone number and the name, role, phone number and email of the people there who talk with us, with notes of the conversation and any appointment, to follow up and offer Keyturn. We do not sell it. A business or person can ask us to stop contacting them, or to delete their details, by emailing us; we keep only a do-not-contact record so we honor the request. If a business does not become a customer and we have had no contact for two years, its contact details are deleted.

Records a business brings in. When a business brings its records into Keyturn from another system, a spreadsheet or QuickBooks, we keep them as Customer Data like anything else the business enters. The files uploaded to bring them in are kept encrypted and deleted 30 days after the import finishes. A customer's earlier choice about texts or emails in another system is kept only as information, never as agreement to get texts or emails through Keyturn.

Files sent to Keyturn. When someone sends files to our team at keyturnapp.com/upload, we keep the files, encrypted, with the name they give, the email and note if they add them, and which of our team they chose, for 30 days so we can help them, then delete them (files never finished sending go after a day). We keep a scrambled code of the internet address they send from, only to limit how many files can be sent in an hour. Only Keyturn's team opens the files.

Buying a Keyturn plan. We sell Keyturn's plans ourselves, and Stripe, Inc. processes the payments. When a business buys a plan, the buyer types the card or bank details on Stripe's own payment page, so they go straight to Stripe and never to us. Stripe receives the buyer's name, email and billing address, the payment details, the plan and the amounts, and the internet address and browser of the device used. We receive from Stripe the business's name, email, country, billing address, the plan bought, the amounts, and limited payment details such as the card brand, the last four digits and the expiration date, so we can turn the plan on, show the business its bills, answer a disputed charge and keep our accounts. We never collect or store full payment card numbers, card security codes or bank account numbers.

Signing an order. When a business signs its order for a plan, we keep the signed documents, a fingerprint of their exact wording, the name, title and typed signature of the person who signed, the boxes they ticked and when, the code check of their email, and the IP address and browser used, as proof of the agreement.

How we use it

to run the Service: sign you in, keep you in the right organization, sync data and send the messages you ask it to send;
to keep it secure: detect and stop fraud, abuse and unauthorized access;
to support you, fix bugs and deliver updates;
to improve Keyturn;
to send account holders service emails, such as verification codes, security alerts, notices about these documents and answers to reports they send us (never marketing, and never to a business's customers);
to email one invitation to a person a business's administrator adds to their team, at the address the administrator typed, and nothing else to that person unless they create an account;
to text a one-time sign in code to a business's customer when they ask for it in the Keyturn app, and for nothing else;
to follow the law, protect our rights, and enforce our agreements, including keeping records that show who agreed to which version of these documents.

We do not sell personal information, and we do not share it for targeted advertising. We do not use Customer Data for our own marketing.

Service providers who help us run Keyturn. Today they are: Hetzner, which hosts our servers and their backups; Resend, which sends account emails; Telnyx and Google Firebase, which text a sign in code to a person who asks for one; Amazon Web Services, which stores and matches face identifiers for businesses that use face clock-in; Expo, which delivers updates to our mobile apps (seeing the device and app version that ask for one) and carries notifications to Apple and Google; Apple and Google, whose notification services deliver them to your phone; Backblaze, which stores encrypted copies of our backups; RevenueCat, which tells us about Keyturn Plus purchases made through Apple and Google; Smartcar, which reads a car its driver chose to connect, as described above; and Google Maps Platform, described next. They may only use the information to provide their service to us. We will update this list before we add a provider that receives personal information.
Google Maps Platform. The Keyturn app's shop map is a Google map on Android, and on iPhone when the app carries Google's map (otherwise it is Apple's own map). The map itself comes straight from Google, or Apple, to your phone, which, like any map, tells them the area shown and your phone's internet address. To find shops, our servers send Google only the ZIP code or the words you typed in the search, and the rounded point, never who you are. When you tap On my way and Use my location, our servers send Google's Routes service only that point and the shop's, to work out the drive. A shop that is not on Keyturn is shown from Google's own listing, and its phone number is asked for only when you tap it. When anyone types a street address in Keyturn (a business's own, or a customer's address typed by the business), our servers send Google Places only the words typed so far and a random session number, never a name, phone number or which business, to suggest the full address. We send a business's own address to Google once to place it on the map. Google's Privacy Policy, https://policies.google.com/privacy, is part of this policy by reference and governs what Google does with what it receives, and using the map also binds you to Google's terms for it (Google Maps/Google Earth Additional Terms of Service, https://maps.google.com/help/terms_maps/).
Stripe, Inc., which processes the card and bank payments for Keyturn's plans. It receives what Buying a Keyturn plan, above, describes, and uses it to process the payment, work out any sales tax, prevent fraud and meet its own legal duties, under its privacy policy, https://stripe.com/privacy.
A business's own accounts. When a business connects its own Twilio or Telnyx account, Google Voice number, email account, QuickBooks company, QuickBooks Payments account, Slack or Microsoft Teams channel, webhook address or calendar app, what it sends goes through that account under the business's own agreement with that company (such as Twilio, Telnyx, Google, Microsoft, Intuit, Slack or the service behind the webhook), not ours. The business chooses which moments are sent, such as a car checked in, an estimate answered or an invoice paid. A message to a Slack or Teams channel says what happened in the words of the business's own notice in Keyturn, which can name the customer, with the repair order, the vehicle and the customer's first name. A webhook, which goes to the business's own automation, also carries the customer's full name and phone number and, where the moment has one, the amount or the part. The business's calendar feed lists its booked appointments with the vehicle, the customer's first name and what the visit is for, to anyone the business gives its private link. Nothing about the hours or schedules of the business's people goes to any of them.
Parts suppliers. When a business connects a parts catalog such as PartsTech, the vehicle and the parts it looks up are sent to that service to find prices and availability.
Public lookups. To decode a vehicle, Keyturn sends its VIN, and nothing about the person, to the US government's vehicle database (NHTSA). To find recalls and owners' reports about a car, it sends NHTSA only the car's year, make and model. When Google's map service is not available, Keyturn places a business on the map and finds the ZIP code of a rounded point through the US Census Bureau's public geocoding services, sending only the business's address, a ZIP code or that point. To show the weather, the desk app sends the business's town to Open-Meteo. The pages customers open load fonts from Google Fonts, code from jsDelivr and, on pages that read text from a photo, language files from projectnaptha.com, which, like any website, see the visitor's IP address.
The organization you belong to. Owners and admins can see members' names, emails, roles and the activity records for their organization.
The shops you use the Keyturn app with. A booking request, a message, an answer to an estimate and your text choices go to the business you sent them to, and to no other.
Your coworkers and managers in Keyturn Teams. Your coworkers at a shop see your name, position and shifts, your mobile number only if you choose to share it, and a thank-you to you on the team's feed only if you say yes. A coworker you ask to trade sees the request, and the people in a conversation see the messages in it. Your managers see your requests and their reasons, your balances, papers and licenses, and who has read their announcements. They do not see your messages.
Keyturn staff, only as described in What Keyturn staff can see, below.
Legal reasons. When we believe in good faith that the law, a court order or a valid legal process requires it, or to protect the rights, safety or property of anyone.
Business transfers. If Keyturn is merged, sold or reorganized, information may move to the new owner, and this policy will keep applying to it.

Face clock-in

A business that uses Keyturn's time clock can let its workers clock in by looking at the clock instead of typing a PIN, and sign in to its technician tablets the same way (face sign-in). It is off unless the business turns it on, and an administrator of the business must first sign the business's face clock-in policy. It is not offered where local law forbids it.

Your choice. Before anyone's face is set up, they read what is collected, why and for how long, and sign their consent on the clock or tablet. Anyone can say no, or take their consent back at any time at the clock or tablet or by asking a manager. Their PIN always works, and nothing else about their job changes.
What is kept. A face identifier: a mathematical description of the face, made from pictures, stored and matched for the business by Amazon Rekognition, a service of Amazon Web Services. The record of each check: the time, the result and its score. The pictures the clock or tablet takes are checked and thrown away, with one exception: until the clock's check that a real person is in front of it is independently certified, the picture from a look that clocks someone in or out is kept beside that punch, encrypted with the business's key, so the business's managers can see who it was. It is deleted with the person's face data, or sooner when its date passes.
The signed records. The person's answer (agreed, said no or took it back), the exact words they were shown, their drawn signature, their name, the time and the clock or tablet it was given on. The same for the administrator who adopted the policy. These records are kept as proof of consent after the face data itself is deleted.
What it is used for. Only to recognize a person at their business's time clocks and technician tablets and to check that a real person is in front of it. Face data is never sold, leased or traded, never used to train anything, never used for anything else, and never shared except as the law requires.
When it is deleted. A person's face data is deleted when they take back their consent or an administrator deletes it, when they stop working at the business, 30 days after the business turns face clock-in off, after the months without use the business chose, and in every case no later than 3 years after they last used it. Each deletion leaves a receipt that holds no face data.
Each business's policy is public. Anyone can read what it says.

What Keyturn staff can see

A small number of Keyturn staff, each of whom has signed a confidentiality agreement, can look into Keyturn's records through a protected tool that asks for a second sign in code. Every look is written to a log that cannot be changed.

Without asking the business, staff can see Keyturn's own records about it: the business's profile, plan and settings, its team members and their roles, sign ins and devices, its activity logs, and the agreements it and its people signed with Keyturn, including face clock-in policies, consents and deletion receipts. Face identifiers and face pictures are never among them.
The business's own records (customers and vehicles, repair orders and estimates, invoices and payments, texts, inspections and photos, signed documents, time clock records, car deals, credit applications and inventory) open to staff only after an administrator of the business approves a request. The request says what Keyturn wants to see and why, and the approval lasts a set time, from one hour to seven days. The administrator can say no or end it early, and every record Keyturn opens under it is shown to the business.
Never shown, whatever is approved: passwords, PINs, sign in tokens, the keys a business's connected accounts use, encryption keys, face identifiers and face pictures, and in Keyturn Teams the messages between people, workers' profiles and emergency contacts, new-hire checklists and coworkers' thank-yous. Social Security, driver's license and account numbers show only their last four digits.
A transcript of team messages is made only as Keyturn Teams describes above: Keyturn's founder reviews the request, and only the one conversation and the dates asked for are read. Every request, decision and transcript is logged and kept.
Outside that tool. The people who run Keyturn's servers can technically reach the database to keep the Service running, take and restore backups, fix faults and investigate a security incident. They do not read a business's records that way except as that work needs or the law requires.

Printed records

Information leaves that tool only on paper, printed straight to a physical printer. A business's own records print only while its approval lasts. Each copy gets its own number and is logged with who printed it, when, what it holds and why, and the copy is tracked until it has been shredded in front of a witness. There are two exceptions. Keyturn's own face clock-in records: a policy signature or a person's consent may also be saved as a numbered file, logged in the same way. And a transcript of team messages made on a legal request, which is saved as a numbered file whose fingerprint is checked against Keyturn's record of it.

Text messages

This applies when a business that uses Keyturn texts you, such as the auto repair shop servicing your vehicle.

What is collected. Your mobile number; that you agreed to texts, when, and how (when you tick the optional Text messages box on the repair authorization, in which case your answer is stored with what you signed; when the business's staff record that you agreed at the counter; or when you turn texts on yourself in the Keyturn app, where each business asks separately about service updates, reminders and offers, and each answer is kept with the exact words you saw); the texts sent to you; and any HELP or STOP reply.
How it is used. Only to send you the texts about your visit that you agreed to, to answer HELP and honor STOP, and to keep a record of your consent and of any opt out.
Who receives it. The business that texts you, and the texting provider that business uses to deliver its messages, such as Twilio. Nobody else.
Not for marketing. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile numbers and texting consent are never shared with third parties or affiliates for their marketing or promotional purposes.
Your choices. Reply STOP to any text to opt out, or HELP for help. The full text message terms are at https://keyturnapp.com/terms.html#sms

How we protect it

Connections to our servers are encrypted.
Sensitive business fields, like phone numbers, addresses and invite codes, the connections a business makes to QuickBooks and Google Voice, and signed face clock-in records and the pictures kept beside punches, are encrypted with a separate key for each organization.
Card numbers and bank details go straight to the payment processor and never reach our servers.
Quick updates to the app are signed, and an installed copy refuses one whose signature does not check out.
Passwords and staff PINs are stored only as one way hashes.
Each organization's data is walled off from every other organization's at the database level.
Sessions expire, and repeated failed sign ins are slowed down and locked.
Backups are encrypted.

No system is perfectly secure, and we cannot promise that information will never be accessed without permission. If a breach affects your information, we will notify the affected businesses and people as the law requires.

Deleting your account

You can delete your account at any time, in the app: in the Keyturn app and Keyturn Teams under More, Delete my account; in Keyturn Business under Settings, My account, Delete my account. A Keyturn or Keyturn Teams account can also be deleted on our website at https://keyturnapp.com/delete, where you prove your number with a texted code. It cannot be undone. Before you delete, you can download a copy of your data: Download my data is the first step of Delete my account, on the website too, and is also on its own beside Delete my account in each app. The file holds what your account holds. For the Keyturn app: your cars and what you logged for them, your mileage log, your connected cars and their readings, your Keyturn Plus subscription records, what Glovebox read from your copies and who you shared them with, your text choices at each shop, your visits and their work, your invoices, your bookings and the visits you asked for at shops not on Keyturn, your saved receipts, maintenance plan, warranties and registration dates, and your messages with their photos. For Keyturn Teams: your shops, shifts, requests, time off, hours, your team messages and the announcements to you, your profile, your new-hire checklist, your licenses, your checklist ticks, lessons and thank-yous, and the papers you signed with their words. For Keyturn Business: your account, the businesses you belong to and your role at each, where you signed in, the documents you accepted, what you did in each business, and your hours if you are on a time clock. It leaves out other people's information and a business's own notes about you, which are the business's records.

The Keyturn app. Your sign in ends on every phone, and the name you gave the app, your email and password, the cars you added with their photos and what you logged for them, your Glovebox copies, the shops you saved, the visits you asked for at shops not on Keyturn, your saved receipts, maintenance plan, warranties and registration dates, your mileage log, your connected cars and their readings (each is removed at Smartcar), your Keyturn Plus records, the links to visits you opened and your phones' notification tokens are deleted. A Keyturn Plus subscription bought through Apple or Google keeps renewing until you cancel it there, because only they can cancel it. The scrambled codes that let a free trial connect a car only once are kept two years. Every shop you shared a Glovebox copy with stops seeing it; the record of the share is kept for five years, as Glovebox says. We keep a note that the account existed and when it was deleted, with your number encrypted; signing in again later starts a new, empty account. The shops keep their own records: your visits, estimates, invoices, signatures, booking requests and messages, and the answers you gave each business about texts, so a STOP you sent is still honored. Those are the business's records. To have them removed, ask the business, which can delete them in Keyturn.
Keyturn Teams. Your sign in ends on every phone, and your phone number, the name on your account, your notification tokens and your passkeys are deleted, and your account is let go from each shop's record of you. If you also sign in to Keyturn Business with an email, that account stays; only your phone number and your Teams sign in go. Your shop keeps your time records: your hours, schedule, requests, time off and the papers you signed. Employers must keep time and pay records, so Keyturn keeps them for the business for seven years after the last pay period they fall in. The messages you sent stay in their conversations for the rest of their two years, and your profile, licenses and other team records are kept as How long we keep it says. We also keep the record that you accepted our documents.
Keyturn Business. You confirm with your password and by typing DELETE. Your sign in ends on every computer and phone, and your email, password, PIN, phone number, date of birth, passkeys and notification tokens are deleted, and you leave the team of every business you belonged to. The businesses keep their records of your work: your name stays on the repair orders, notes and activity you were part of, and your hours, schedule and the papers you signed are kept for seven years after the last pay period they fall in, as employers must. We also keep the record that you accepted our documents. If you own a business that is still open, close it first in Settings, Data (export its records before you do), or email support@keyturnapp.com to hand it to another administrator; its data is then handled as How long we keep it says. If you work for Keyturn, your sign in ends and your staff records are kept as your staff agreement says. You can also email support@keyturnapp.com from your account's email address and we will delete it for you.

How long we keep it

We keep account and business information while the account or organization is active. After an organization or account is closed, or after a verified deletion request, we generally delete or de-identify its data within 90 days, except for records we need to keep for security, legal or accounting reasons, which we keep only as long as needed. Encrypted backups roll off within 30 days after that. Time clock records are the exception: they are kept for the business as the Keyturn Time Clock Terms say, for seven years after the last pay period they fall in, because employers must be able to show them. Face data is deleted on the schedule in Face clock-in, above. When a plan's first payment is refunded, the business's administrators can download its records for 90 days; after that its data is handled like a closed organization's. Files uploaded to bring records in are deleted 30 days after the import. Photos sent in messages from the Keyturn app, and photos and video added to a booking, are deleted 400 days after they are sent, and notification records after seven days. A car's photo you took is kept no more than three years, and a Glovebox copy until a year after it ends; the record of a Glovebox share is kept five years. Your location in the Keyturn app is not kept. A connected car's readings are deleted 400 days after the car is disconnected, and the codes that let a free trial connect a car only once after two years. A saved receipt is deleted seven years after the date on it, and a visit you asked for at a shop not on Keyturn a year after the day you asked for. In Keyturn Teams: messages and announcements are deleted two years after they were sent, unless the conversation is under a transcript request that is waiting or approved. Transcript requests and transcripts are kept seven years. Changes to your availability are kept two years. Photos on checklist tasks are deleted 400 days after they are taken, and checklist ticks and thank-yous after two years. A photo of a license card is deleted 400 days after the license ends, after it is taken off, or after you leave, whichever comes first. A profile, with its address, phone numbers and emergency contacts, is deleted a year after the person leaves the business. Time-off balances are kept with the time records. Signed documents, license records, new-hire steps and training results are kept seven years after the person leaves. What a business sent to its Slack, Teams or webhook is deleted from our servers 30 days after it was queued, and files sent to our team at keyturnapp.com/upload 30 days after they arrived. Signed orders and our billing records are kept as long as tax and contract law require.

Your choices

You can view and update your profile in the app.
You can download a copy of your account's data, and delete a Keyturn or Keyturn Teams account, yourself, as Deleting your account says.
You can ask for a copy of your personal information, a correction, or deletion by emailing jonathan.hadad@keyturnapp.com. We may need to confirm your identity first.
In the Keyturn app you choose which texts and notifications each shop may send you, and whether the app may use your location; the map works with a ZIP code instead.
If you belong to an organization, some requests go through the business that owns it, because it controls its own data.
Depending on where you live, you may have more rights under state privacy laws. We will honor them as the law requires and will not treat you differently for using them.

State privacy laws, as of October 15, 2026. Virginia's Consumer Data Protection Act applies to a business that, in a calendar year, controls or processes the personal data of at least 100,000 Virginia consumers, or of at least 25,000 while earning more than half its revenue from selling personal data (Va. Code 59.1-576), and it does not count information about people acting at work. Keyturn is far below both and does not sell personal data, so the Act does not apply to Keyturn today; if it comes to apply, we will follow it. Georgia, where Keyturn is based, has no general consumer privacy law today. Both states' data breach laws (Va. Code 18.2-186.6 and O.C.G.A. 10-1-912) apply, and we follow them. Whatever law applies, every choice in this section is yours to use.

Children

Keyturn Business and Keyturn Teams accounts are for adults: you must be 18 or older to create one. The Keyturn app is for people 16 or older, and someone under 18 uses it with a parent's or guardian's permission. A business may record a worker under 18 on its time clock (their name, punches and date of birth, which the business needs for the rules that protect young workers); those are the business's records. Keyturn is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe we have, email us and we will delete it.

Where information is stored

Keyturn's servers are located in Finland, in the European Union. Some of our service providers process information in the United States, including Amazon Web Services, which keeps face identifiers there, and Expo, Apple and Google, which carry notifications. Each computer a business signs in on keeps a working copy of that business's records so Keyturn opens quickly and works offline. The business controls those computers and is responsible for protecting them, not us.

Changes

We may update this policy. When a change matters, Keyturn will ask you to review the new version.

Contact

Keyturn Technologies, LLC

jonathan.hadad@keyturnapp.com