Privacy Policy
Last updated: June 2026
HelloKey ("we", "us") lets property hosts hand over keys to their guests through local partner shops. This policy explains what personal data we collect, why, and your rights over it. It covers our website and our iOS and Android apps.
Who we collect data about
- Hosts — people who register keys and pay for the service.
- Partner staff — people who work at a partner shop and use the partner app.
- Guests — people who collect keys. Guests do not need an account; they only open a code link.
What we collect
- Account details: name, email address, and phone number, used to create and secure your account.
- Key and handover data: the keys you register, the shop they are stored at, the access codes you create, and the record of drop-offs and collections.
- Payment data: handled by Stripe. We do not store your full card or bank details; Stripe processes payments and (for partner shops) payouts on our behalf.
- Approximate location: only when you search a postcode to find nearby shops. We do not track your device location in the background.
We do not use third-party advertising or analytics trackers, and we do not sell your data.
Why we use it
- To provide the key handover service and show key status.
- To take payment from hosts and pay commission to partner shops.
- To secure accounts and prevent misuse.
- To provide customer support.
Who we share it with
We share data only with the providers that run the service:
- Supabase — secure database and account authentication.
- Stripe — payments and partner payouts.
- Map and address providers — to turn a postcode into a location and display shop locations.
A guest opening a code link sees the host's name and the shop details, but never the property address.
How long we keep it
We keep your data for as long as your account is active. When you delete your account, we remove your account and its associated keys, codes, and handover history. Some records may be retained where the law requires (for example, payment records for tax purposes).
Deleting your account
You can delete your account at any time from within the app: open the Account screen (host app) or the menu (partner app) and choose Delete account. This permanently removes your account and data as described above and cannot be undone.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.
Contact
Questions about this policy or your data? Email us at contact@hellokey.co.uk.