Privacy policy

Who we are

Tickzu is a phone app for gas and heating engineers in the UK. It is provided by AllCampus UK Limited, company number 11659728, registered address Unit 7 Landmere Lane, Edwalton, Nottingham, England, NG12 4DG (“we”, “us”). Our registration number with the Information Commissioner’s Office: [ICO registration number].

For anything about your data, email hello@tickzu.co.uk. This policy covers the app, the server it uses for accounts and sync, and this website. Our terms of use explain the rules for using the app.

Your data and your customers’ data

Your account data (your email address and the details below that our server keeps) is ours to look after. We are the controller for it.

Your customers’ data (names, addresses, phone numbers, appliances, jobs, quotes, invoices, service records and photos you enter) is yours. You decide what to keep and why, so you are the controller. If you use sync, we store an encrypted copy for you as your processor, only to sync it between your phones. It is encrypted on your phone with a key we never receive, so we cannot read it.

As the controller for your customers’ data, you are responsible for:

• having a lawful reason to keep it (for most engineers, doing the work the customer asked for, or a legitimate interest such as reminding them about their annual service);
• telling your customers how you use their details, for example in your own privacy notice;
• keeping it accurate and only as long as you need it, and answering your customers’ requests to see, correct or delete it;
• keeping your phone, backups and passwords safe, and only messaging customers who expect to hear from you.

If one of your customers asks us about their data, we will pass the request to you, because we cannot read your records.

On your phone

• Customers, properties, appliances, jobs, quotes, invoices, expenses, service records (including signatures), photos, your logo and business details are stored on your phone.
• On a new install the app switches on encryption before it saves anything, with a key kept in your phone’s secure storage (iOS Keychain or Android Keystore), if your phone allows it. “Encrypt data on this device” in Security & backup shows whether it is on; please check it.
• App lock (Face ID, fingerprint or your phone’s passcode) is optional.
• A backup is one file locked with a password you choose and saved where you decide. We never receive it, and nobody can open it without that password.
• Reminder notifications are scheduled on your phone. They show counts and your own qualification names, never customer details.
• The date you first opened the app is kept in your phone’s secure storage to time the Pro trial. On iPhone it stays even if you delete and reinstall the app.

Your account

You do not need an account to use the app. An account keeps your plan if you change phone, and you need one to sync between phones or connect FreeAgent. You sign in with your email address and a 6-digit code we email to you. There is no password.

When you ask for a code, our server and our email provider handle your email address and details of the request, even if you never finish signing in.

What our server keeps

Only if you make an account. The server runs on Cloudflare; its database and file storage are in Cloudflare’s EU jurisdiction.

Our server’s log records the type of each request, its result and its size. It does not record your email address, your codes or your records.

Sync between phones

• Sync is optional and off until you set it up.
• Records and photos are encrypted on your phone before they are uploaded (end-to-end encryption). The key is protected by your sync password or your recovery code, which never leave your phone.
• The server can see technical details it needs to sync, such as how many records there are, their type and when they changed, but not what they say.
• If you lose your sync password, your recovery code and your phones, we cannot recover your records.

Your plan and trial

The 14-day Pro trial starts when you first open the app, with no account and no card. If you make an account, your phone tells our server when it was first opened, and the server keeps the earlier of that date and your account’s start date. To make sure the trial is given once per email address, the trial record above is kept for 3 years from when your trial started, even if you delete your account.

Emails we send

• Codes to sign in and to confirm deleting your account, when you ask for them.
• Two emails about your Pro trial: one shortly before it ends and one shortly after. Each has a link to stop them. Sign-in codes still arrive when you ask for one.
• No marketing emails. We would ask for your agreement first.
• Invoices, quotes, reminders, service records and messages to your customers are sent by you, from your own Mail, Messages or WhatsApp. We never send anything to your customers.
• “Send feedback” in the app opens a draft email in your own mail app with the app version and your phone’s system and version. Nothing is sent until you send it.

Payments

Pro will be sold as a subscription through the App Store or Google Play. Apple or Google take the payment and handle refunds and cancellations under their own terms and privacy policies. We never receive your card or bank details. Before Pro goes on sale, this policy will list exactly which subscription details Apple and Google send us. Nothing can be bought in the app yet.

When you contact us

Emails to hello@tickzu.co.uk reach our mailbox at Proton Mail. We use what you send (your name, email address, message and any screenshots) to answer you and to fix problems. Please do not send customer records, passwords, your sync password or recovery code.

FreeAgent and your calendar

• FreeAgent (optional; for now it connects to FreeAgent’s test system, the sandbox): when you send contacts or invoices, they go from your phone straight to FreeAgent, not through our server. Our server keeps only the connection, encrypted, until you disconnect or delete your account. FreeAgent’s own privacy policy covers what you send there.
• Phone calendar (optional): visits are added to the Apple or Google calendar you choose. “Type and postcode” puts the visit type, postcode, status and appliances in each event; “Name and address” adds the customer’s name and full address. Events are kept by the calendar account you choose (for example Apple, Google, or a calendar only on your phone) and are not encrypted by us. Anyone you share that calendar with can see them.

This website

• The site is hosted on Cloudflare, which processes request details, including your internet (IP) address, to deliver and protect it.
• It loads fonts from Google Fonts, so your browser connects to Google to download them. The logo font is served by us.
• No adverts, no tracking and no analytics. The free tools run in your browser and send nothing.
• The contact form is not open yet. When it opens, it will use Resend to deliver your message to us and Cloudflare Turnstile to check for abuse.
• The roadmap vote is not open yet. When it opens, we keep the feature you chose and a one-way code made from your internet address and a secret value, so each connection votes once. We never store the address itself. Cloudflare Turnstile checks for abuse. Only totals are shown.

Why we use data (legal bases)

Where we rely on legitimate interests, you can object (see your rights). We do not make decisions about you by automated means.

How long we keep data

• Sign-in and deletion codes: stop working after 10 minutes. The coded copy is removed when the code is used or replaced, or when it is next checked, so an unused code can stay stored, unusable, until then.
• Sessions: stop working 30 days after you last used the app. Removed when you sign out, delete your account, or when an expired session is next used.
• Abuse counters: those older than an hour are removed whenever a new code is requested.
• Account, encrypted records, photos, data key and FreeAgent connection: until you delete your account (the FreeAgent connection also until you disconnect).
• Trial record, trial emails sent and requests to stop them: 3 years from when your trial started, also after you delete your account, as a coded form of your email address only.
• Emails you send us: as long as we need them to help you, and up to 2 years after the conversation ends.
• Recovery copies: our database provider keeps short-term recovery copies for up to 30 days. Deleted data stays in them until they expire. If we ever restore from one, we delete again anything you had asked us to delete.
• Pro given free: until we remove it, also after you delete your account. Ask us and we will remove it.
• Data on your phone: until you delete it, reset the app or remove the app.

Who we work with

We do not use Stripe or any other payment provider in the app today.

Data outside the UK

Stored server data is kept in Cloudflare’s EU jurisdiction. The UK recognises the EU as giving adequate protection. Cloudflare and Resend are US companies, and some personal data, such as your email address, may be handled outside the UK. Where that happens we rely on:

• Cloudflare: [Cloudflare transfer safeguard].
• Resend: [Resend transfer safeguard].

When this website loads fonts from Google Fonts, your browser connects to Google, which may be outside the UK. Email us for a copy of the relevant safeguards.

What we never do

• Sell your data or your customers’ data, or share it for advertising. We use the providers listed under who we work with to run the service, and optional connections send data only where you choose.
• Show adverts, or use tracking, analytics or outside crash-reporting tools.
• Read your synced records: they are encrypted before they leave your phone.

Security

Records are encrypted on your phone (AES-256-GCM, with keys from passwords made using scrypt). Connections use HTTPS. Codes and session tokens are stored only in coded (hashed) form, sign-in requests are limited, and each account’s data is kept separate. No system is perfectly secure. If you find a problem, email hello@tickzu.co.uk.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct it if it is wrong;
• delete it (you can also delete your account in the app);
• limit how we use it, or object to how we use it where we rely on legitimate interests;
• give it to you in a format you can move to another service (portability).

Email hello@tickzu.co.uk. You do not need an account. If you have one, write from the address you sign in with; otherwise tell us what your request is about, and we may ask for details to confirm it is you. It is free, and we reply within one month. Because synced records are encrypted on your phone, you can see and export them in the app at any time; we cannot.

Complaints

You can complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at any time. We would like the chance to help first, but you do not have to contact us first: ico.org.uk/make-a-complaint.

Children

Tickzu is for adults and businesses: engineers aged 18 or over. It is not meant for children, and we do not knowingly hold children’s data as account holders.

Changes to this policy

We will update this policy when the app or the law changes, and change the “Last updated” date at the top. If a change matters to how your data is used, we will tell you in the app before it applies.