Privacy Policy

Last updated: July 2026

SmartphoneKey (the "app") is operated by SmartPhoneKey.

What the App Does

Through natural conversation in ChatGPT or Claude, the app lets authorized users view the locks they can access, view a lock's details, open a lock, grant or revoke another person's access to a lock, and manage a lock's residents (view, add, remove). You can only act on locks you own or have been granted access to.

What We Access

To perform these actions on your behalf via the SmartPhoneKey API, the app processes:

• Lock information — lock names/IDs, online status, and key/resident counts
• Resident and user data — names and email addresses used to add residents or to look up or provision the accounts you grant access to
• Your account identity — used to verify you are authorized to act on a given lock

We access only the locks and data you are authorized to manage via your authenticated account.

Data Storage & Retention

The app does not store your data itself. Requests are proxied in real time to the SmartPhoneKey API and retain no copy. Actions you take (adding a resident, granting access, or provisioning a user by email) create or modify records within your SmartPhoneKey account, which are governed by SmartPhoneKey's own data practices and retained there until you change or remove them. No credentials or tokens are persisted by the app beyond your session.

Authentication

Authentication is handled via Auth0. Your credentials are processed directly by Auth0 and are never seen or stored by the app. OAuth tokens are used only for the duration of your session.

Third-Party Services (Recipients)

• Auth0 — user authentication
• SmartPhoneKey API — lock, access, resident, and account data
• Cloudflare Workers — hosting

Data Shared with AI Providers

When used through ChatGPT or Claude, the lock and account information needed for your request (e.g., lock names, resident names and emails) is sent to the AI provider to generate responses. Please refer to OpenAI's Privacy Policy or Anthropic's Privacy Policy for how they handle data.

Your Controls

You can add or remove residents, grant or revoke access, and manage users through the app or your SmartPhoneKey account. To revoke the app's access entirely, disconnect it in your ChatGPT or Claude settings.

Contact

For privacy inquiries, contact: nikita@smartphonekey.com