Privacy Policy
Effective date: June 28, 2026
This Privacy Policy explains what data the Keystone iPhone app ("Keystone", "we", "us") collects, why, how it is stored and shared, and the choices you have. Keystone is a tool for construction professionals to scan jobsites and review as-built conditions against a design.
1. Data we collect
Keystone collects the following categories of data, solely to provide the app's core functionality. Each category is described in the App Store "App Privacy" label as collected for App Functionality, linked to your identity, and not used to track you across apps or websites.
| Category | What it includes | Why we collect it |
|---|---|---|
| Account & authentication data | Your email address and the authentication identifiers issued when you sign in. Sign-in is handled by our managed identity provider (Amazon Cognito); Keystone does not store your password. | To create your account, sign you in, and associate your scans with your organization. |
| Camera & photos | Photos you capture during a scan, taken with the device camera. | To document jobsite conditions as part of a scan. |
| LiDAR scan data & spatial / pose information | 3D room models, meshes, and point clouds captured with the device's LiDAR sensor, plus the spatial position and orientation (pose) of the camera and captured photos within the scan's own coordinate frame. | To build the aligned as-built capture you review against the design. |
No GPS or precise location
Keystone does not collect device GPS or precise geographic location. When we say a photo is "location-tagged," we mean it is tagged with its position within the scan's own coordinate frame (its pose relative to the room being scanned) — not a latitude/longitude or any geographic location. Accordingly, Keystone's App Store privacy label does not declare a "Location" data type.
2. How your data is stored
Scan artifacts and account records are stored on cloud infrastructure operated by Amazon Web Services (AWS) — object storage (Amazon S3) for scan files and a managed database (Amazon DynamoDB) for records — encrypted in transit and at rest. Your data is associated with your organization and is not accessible to other organizations.
3. How your data is shared (sub-processors)
We do not sell your data and do not share it for advertising. We use the following cloud sub-processor to operate the service:
- Amazon Web Services (AWS) — cloud hosting, scan/object storage, and managed user authentication (Amazon Cognito).
We may disclose data if required by law or to protect the rights, safety, and property of our users or the public. If we add another sub-processor that handles your data, we will update this policy.
4. Data retention
We retain account data for as long as your account is active, and scan data for as long as it is needed to provide the service to your organization or as required by your organization's agreement with us. When data is no longer needed, or upon a valid deletion request, it is deleted from active systems within a commercially reasonable period and from backups in the normal backup-rotation cycle.
5. Accessing or deleting your data
You can request access to, correction of, or deletion of your personal data by emailing privacy@executecx.com. We will respond within a reasonable timeframe. Because scans are associated with your organization, some requests may be coordinated with your organization's administrator.
6. Children's privacy
Keystone is a professional tool intended for use by adults in a work context. It is not directed to children, and we do not knowingly collect personal data from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us data, contact privacy@executecx.com and we will delete it.
7. Changes to this policy
If we make material changes to this policy, we will update the effective date at the top of
this page and, where appropriate, notify users in the app or by email. Continued use of the
app after an update constitutes acceptance of the revised policy. This page's URL
(https://KnoxAndIan.com/privacy) is stable, so links to it remain valid as the
content is revised.
8. Contact us
Questions about this policy or your data? Email privacy@executecx.com.