Privacy policy

Beckon Access app

This section applies to the "Beckon Access" app for iPhone, iPad and Android smartphones (the "app"). With the app you open doors and use other actions that an operator - for example your gym - has granted you, and you receive messages from that operator. The management portal, which operators use to run their sites, is covered by separate privacy information that operators receive when the contract is concluded.

Who is responsible

Your operator creates your account, decides which doors you may use and when, and manages your data in the management portal. Your operator is the controller under the GDPR for this data, including the access records of its site. Beckon processes it on the operator's behalf as a processor (Art. 28 GDPR).

Beckon GmbH, named above, is responsible for the technical operation of the app: registering your smartphone, delivering notifications, and security and troubleshooting on our servers.

What data the app processes, and why

When you use the app, we process the following data:

• Activation: the activation code your operator sent you by email or text message. It links your smartphone to your account. If you switch smartphones, you confirm the switch with a code we send you by text message or email.
• Registration of your smartphone: platform (iOS or Android), device model, app version and an access token issued by our server, plus the IP address when the registration is created and the time the app last connected to our server. Purpose: linking your smartphone to your account and operating the app.
• Permission status: whether you have allowed notifications, location and Bluetooth, and whether Bluetooth is switched on. Purpose: so that your operator and our support can see why a door does not open.
• Access events: each time you open a door through our server, the time, the door or action, the result (carried out or refused, with the reason) and your smartphone's IP address, and - where collected - the calculated distance to the door, the permitted radius and whether the app detected the door via Bluetooth. Purpose: access control for your operator and finding out why an access was refused.
• Location: only for doors where your operator has switched on a location check. When you open such a door, the app sends your current position (latitude and longitude with accuracy) to our server, which calculates the distance to the door from it. We do not store the coordinates, only the distance in metres. Purpose: confirming that you are at the door.
• Push token: an address for notifications that your smartphone receives from its manufacturer's notification service - only if you allow notifications. Purpose: delivering your operator's messages to you.
• Messages: your operator's messages to you and the time you confirmed them.
• "Info" area: here the app shows pages from our server with information from your operator, such as your balance and how long your access is valid. You can take or choose a profile photo there, which is stored with your account, and send requests to your operator.
• Server logs: our servers log events for troubleshooting and abuse prevention. Every log line contains the IP address of the request.

The app contains no analytics, advertising or crash-reporting services and no tracking. It does not read your phone number, email address, contacts or device identifiers such as the IMEI or advertising ID.

Legal bases

Where we act on your operator's behalf, the legal basis follows from your relationship with the operator, usually the contract you have concluded with it (Art. 6(1)(b) GDPR).

Processing for operating the app is based on Art. 6(1)(b) GDPR where it is necessary for using the app, and otherwise on our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR), for example for server logs and the permission status.

The app only accesses location, Bluetooth, notifications, camera and photos after you have allowed it in your smartphone's dialog.

Permissions - and what does not work without them

You can withdraw any permission at any time in your smartphone's settings. The app asks for location and notifications only when it needs them, and explains why first.

• Bluetooth: while the app is open, it looks specifically for Beckon doors near you and, if you want, opens them directly without going through the internet. Other Bluetooth devices around you are neither stored nor transmitted; on Android, the Bluetooth scan is expressly not used to determine your location. Our server only receives whether the door was detected via Bluetooth. Without Bluetooth, the app cannot detect doors in range and cannot open them directly via Bluetooth.
• Location ("While using the app"): the app determines your location only in the foreground - while your door list is open and when you open a door - never in the background. It is sent to our server only when you open a door with a location check. Without location access, such doors cannot be opened through the internet; doors without a location check are not affected.
• Notifications: these tell you straight away about new messages from your operator. Without notifications, you see them only when you open the app. If you withdraw the permission, the app removes the push token from our server the next time you open it.
• Camera and photos: only when you take or choose a profile photo in the "Info" area. Without this permission you cannot add a profile photo.
• Siri (iPhone): only if you want to open a door by voice command.

Data stored on your smartphone

The app keeps the access token of your registration protected in the Keychain (iPhone, iPad) or encrypted with a key from the Android Keystore. It also stores your first and last name as your operator entered them, the region, the doors you may use, and a few settings, such as whether a hint has already been shown. It does not store location data. On Android, this data is excluded from device backups.

Recipients and processors

• Your operator sees in the management portal your access events (with result, distance and Bluetooth detection), which smartphone is linked to your account, the permission status and when the app last connected.
• Hosting: our servers are operated at SkyLime GmbH, Eichstädter Weg 10, 13509 Berlin, Germany. Depending on where your operator keeps its account, your data is held in our EU region or in our US region.
• Notifications: these are delivered via the Apple Push Notification service (iPhone, iPad) or via Google Firebase Cloud Messaging (Android). What is transmitted is the push token and the content of the notification, i.e. "New message" and the subject of your operator's message. On Android smartphones, Firebase creates its own installation identifier for this.
• Text messages: we send activation codes, confirmation codes when you switch smartphones and - if your operator chooses so - messages by text message via websms or Twilio. What is transmitted is your phone number and the text of the message.
• Email: we send activation emails and confirmation codes via our email delivery service.

Retention

We keep the data of your registration, your access events and your messages for as long as your operator keeps your account. We delete server logs after 30 days. We do not store location coordinates.

Your rights regarding the app

The rights listed below under "Your rights" also apply to the app. For data your operator is responsible for, it is best to contact your operator directly. If you write to us at mail@beckonaccess.com, we forward your request to them.