Privacy - Master-keying Survey Companion

Master-keying Survey Companion is published by Outsourced Key Advice Limited, trading as OK Advice.

The app allows users to record site survey information about doors, keys, areas, lock/keying details, and which keys operate which doors. This information is entered by the user and stored locally on the user’s Android device.

The app may use the speech recognition service available on the user’s Android device to convert spoken door and keying information into text. OK Advice does not receive, record, store, or retain audio from speech input. Spoken input is processed by the user’s device or device speech-recognition service, and the resulting text is used by the app to populate survey records.

The app stores survey data locally on the user’s Android device. The app does not upload survey data to an OK Advice server unless the user chooses the optional OK File Transfer service described below.

Users may choose to export survey information and share it using another app, such as their email app, or download/export it in a format intended for import into compatible master-keying software. That export and sharing is initiated by the user.

Optional encrypted file transfer

When a user chooses OK File Transfer, the app encrypts the export on the user’s device before uploading it. The transfer service temporarily stores the encrypted file together with limited operational metadata needed to authorize, deliver, protect, and delete the transfer. OK Advice does not receive the decryption code and cannot read the file contents or encrypted filename.

The recipient downloads the encrypted file and decrypts it on their device using the decryption code supplied by the sender. Transfers are currently limited to 20 GB.

The service records technical information such as pseudonymous application, installation, and entitlement references; transfer and download-session identifiers; encrypted byte counts; chunk and integrity information; transfer status; expiry, cancellation, download, and deletion timestamps; and security and diagnostic events. Server request logs may record the request method and path, response status, and processing duration. IP addresses are processed for rate limiting and abuse prevention. Decryption codes, plaintext filenames, file contents, and authorization credentials are not recorded in service logs.

Incomplete uploads expire after 12 hours. Completed transfers normally expire after 24 hours and cannot be retained for more than 72 hours. Encrypted files are also scheduled for deletion after confirmed successful download or sender cancellation. Cleanup normally occurs within the following five-minute cleanup cycle; failed deletions are retried. Stopping a download without completing it does not delete the server copy, which remains available until completion, cancellation, or expiry.

Limited operational and security records may remain after the encrypted file has been deleted. Transfer-service logs are retained for up to 30 days, while licence-authorization audit logs are retained for approximately 12 weeks.

The app uses Google Play Billing to manage subscription access to the app’s features. Payment information is handled by Google Play and is not collected by OK Advice.

The app does not use ads, analytics, location, camera, contacts, health data, or push notifications.

Android backup may back up local app data to the user’s own Google account if Android backup is enabled on their device. OK Advice does not operate or access that backup.

For privacy enquiries, contact info@ok-advice.com.