Who we are
KerbCam is the controller of the personal data described in this policy. KerbCam provides an iPhone app and website for organising, storing and sharing work photos and videos.
You can contact us at hello@kerbcam.com. This policy applies to the KerbCam app, the service at kerbcam.com and support conversations with us.
Information we handle
- Account and sign-in
- Your email address, a generated account ID, account creation date, subscription status and security records for one-time sign-in links and signed-in devices. Sign-in links work once and expire after 15 minutes. Server-side session and sign-in tokens are stored only as cryptographic hashes.
- Work media
- The photos, videos and thumbnails you create with KerbCam. Video files include any sound recorded with them. Media can show people, homes, gardens, addresses or anything else in the camera frame, so only capture and share content you are allowed to use.
- Capture metadata
- Capture date and time, time zone, file type and size, image dimensions, video duration, file integrity checks and, when you allow it, precise latitude and longitude, location accuracy, location time and optional altitude.
- Job organisation
- Names and approximate boundaries of work sites, before-and-after pairings, job groupings, manual photo categories and display rotation choices. A work-site name can be one you enter or a street address KerbCam derives from its coordinates using Apple's reverse-geocoding service. The resulting site name or address, centre point and radius are retained with your account.
- Billing
- A Stripe customer ID and your subscription state. Card details, billing addresses and payment credentials are entered directly on Stripe's website and are not available to the KerbCam app or KerbCam's servers.
- Support and early access
- If you email us, we receive the information you include, such as your name, email address, trade, message and any attachments. The Start free form opens a pre-filled message in your email app and sends nothing to KerbCam unless you choose to send it.
- Service operations
- Random request identifiers, product interactions needed to perform an action, response status and limited error or invocation details. Our hosting provider also processes standard network information, such as IP address and browser or device request data, to deliver and protect the service.
The website and free before-and-after tool
The marketing website does not use advertising or analytics cookies. Images selected in the free before-and-after tool are processed entirely in your browser and are not uploaded to KerbCam.
How and why we use information
To provide the service
We use account details, media, metadata and job organisation to sign you in, upload and retrieve your library, organise visits by time and place, create comparisons, export media and sync your choices. This processing is necessary to provide the KerbCam service you request.
To operate and secure KerbCam
We use limited request and error information to keep uploads reliable, investigate problems, prevent unauthorised access and protect customer libraries. We do this for our legitimate interests in running a secure, dependable service, balanced against your rights.
For billing and legal obligations
We use account and subscription information to start or manage a subscription, handle payment events, answer billing questions and meet tax, accounting or legal requirements. This is necessary for our contract with you and, where applicable, to comply with law.
We do not sell your personal data, use it for targeted advertising or track you across other companies' apps and websites. We do not make decisions about you using automated profiling.
Camera, location and microphone
iOS asks for camera access so KerbCam can take work photos and videos. The microphone is used only when you record a video with sound.
Location is requested while you use KerbCam. When you capture media, the app attaches a recent precise location only if an accurate fix is available. This lets KerbCam organise visits and named job sites. If you deny location access or a suitable fix is unavailable, the media is stored with its location marked unavailable. KerbCam does not request background location access.
You can change camera, precise location and microphone permissions in iOS Settings. Turning a permission off affects future captures and does not remove metadata already stored. You can delete individual media or delete your account if you want existing cloud data removed.
Retention and deletion
- Work media and its metadata remain in your private library until you delete them or delete your account. Ending a subscription does not delete your library.
- An individual photo or video you delete stays in Recently Deleted for 30 days so you can restore it. It is then permanently removed by a scheduled purge.
- Deleting your account from the app permanently removes its media, thumbnails, job organisation records, sessions and account record without the 30-day recovery period.
- One-time sign-in links expire after 15 minutes. Signed-in sessions expire after 90 days of inactivity and can extend while used. Expired authentication records are cleared by a scheduled task.
- Cloudflare operational logs are kept for short-term operational needs according to the provider and account settings. Cloudflare's current service limits cap that retention at 7 days. Support correspondence is kept only as long as needed to answer the request, resolve related issues and meet legal obligations.
- The app keeps pending uploads and cached copies on your iPhone. Local original retention follows the Storage choice in the app. Account deletion clears KerbCam's local queue and cache on that device.
- Stripe may retain transaction and billing records under its own legal obligations. KerbCam may retain records that law requires even after an account is closed.
Delete your account
In KerbCam, open Library, tapLibrary options, choose Account, then tap Delete Account. Type DELETE to confirm. This cannot be undone.
If you cannot access the app, email hello@kerbcam.com from the address on your account. We will need to verify the request before acting.
How we protect your data
KerbCam uses encrypted HTTPS connections, private cloud storage, account-scoped database access and short-lived one-time links. Session credentials are kept in the iPhone Keychain, and only cryptographic hashes of session and sign-in tokens are stored on the server.
The app confirms that an uploaded original matches its integrity check before removing the staged local upload. No service can guarantee absolute security, so please contact us promptly if you think your account or a sign-in link has been compromised.
Your data protection rights
Depending on the circumstances, UK data protection law may give you the right to ask for access to your personal data, correction, deletion, restriction, an objection to some uses and a portable copy. Where we rely on consent, you may withdraw it without affecting earlier lawful processing. Some rights have legal limits or exceptions.
Email hello@kerbcam.com to make a request. We may ask for information needed to confirm your identity. You can also complain to the Information Commissioner's Office if you remain concerned.
Contact and policy changes
Questions, requests and security concerns can be sent to hello@kerbcam.com.
We may update this policy as KerbCam changes or legal requirements develop. Material changes will be explained in the app or on this page, and the updated date above will change.