Privacy Policy

Terms and Conditions · Request account deletion

This privacy policy applies to the BuzzKey app for mobile devices, together with the BuzzKey buzzer phone number service and any related services operated by ANSU Technologies Inc. (collectively, the "Application"). ANSU Technologies Inc. is hereby referred to as the "Service Provider".

BuzzKey connects your building's intercom to your phone. When a visitor calls your BuzzKey number from the intercom, the phones in your household ring; you can talk to the visitor and open the door from the Application.

The short version

The Service Provider collects what it needs to run your buzzer: your account details, your household and building details, the people and access codes you set up, door activity, and the technical details that let calls reach your phone.
Calls are not recorded. Call audio passes through the Service Provider's telephony provider in real time and is not stored.
The Service Provider does not sell your personal information, show ads, or track you across other apps or websites.
The temporary operational record used to connect each live call is deleted from the active database about one hour after the call ends. Separate door history, technical logs, backups and provider records have the retention periods described below.
You can delete your account from inside the Application at any time.

Information Collection and Use

Information you provide

Account details: your name, email address, phone number, country and password. Passwords are stored only as a one-way hash, never in readable form.
Household and building details: your building name and address (including province or state and postal code, which are used to assign you a local phone number), your unit, the phone number your building's intercom calls from (if you provide it), your door-release key, your household's members and their roles, and the invitations you send (the invitee's email address or phone number).
People and access you set up: guests (the name, phone number and notes you enter), access codes, access schedules and auto-unlock timers.
Messages: anything you send when you contact support.

Information created when you use the Application

Calls. When a visitor calls your BuzzKey number, the Service Provider's telephony provider connects the intercom to the phone that answers. The audio travels in real time and is not recorded or stored. To run the call, a temporary operational record is kept: the calling number, the times, which of your household's devices were rung, which one answered, and how the call ended. This operational record and its device call-leg records are deleted from the active database about one hour after the call ends. This does not delete separate door activity history, technical logs, notification-processing records or existing database backups. Telnyx also processes its own call-detail and communications usage records; those are subject to its privacy policy and legal obligations. The retention table below distinguishes these records.
Door activity history. A history of door events is kept, such as a visitor let in, a call declined or missed, a door opened with an access code, or a door opened by an auto-unlock timer. Each entry includes the time, the household member who acted (if any), and a visitor label. Every member of your household can see the household's history.
Access codes entered at the intercom. When a visitor enters an access code on the intercom keypad during a call, the code entered, the time and the result are processed to open the door, to limit repeated attempts and prevent code guessing, and to notify your household.
Device and technical information: an identifier for each installation of the Application, your device platform and app version; push notification tokens issued by Google (Firebase Cloud Messaging) and Apple (push and VoIP push); calling credentials issued to each of your devices; when each device last connected; your device's Internet Protocol (IP) address; and logs the Service Provider's servers produce while running the Application, which can include the phone numbers and identifiers involved in a call.
Crash reports. If the Application crashes or hits an error, it sends a report to Sentry: your device model, operating system and app version, the error, and the app steps that led to it. Each report also carries a random identifier for this installation of the Application and an app-specific device identifier, which show how many devices an error affects. When Sentry receives a report, it records your approximate location (city, region and country) derived from your IP address; the IP address itself is not stored. Phone numbers, email addresses and sign-in tokens are removed before a report is sent. You can turn crash reports off at any time in Settings.
Subscription information. The Service Provider receives your plan, subscription status, renewal and expiry dates, and transaction identifiers from Apple or Google through its subscription provider, RevenueCat. The Service Provider never receives your card or bank details.

Information that stays on your device

Profile photo: stored only on your device. It is not uploaded, and other people do not see it.
App PIN: stored in your device's secure storage.
Face ID, Touch ID or fingerprint: handled entirely by your phone's operating system. The Service Provider never receives biometric data; it only learns whether the check succeeded.
App settings and your signed-in session: stored on your device.
The in-app demo: uses simulated calls and doors. It does not connect to an intercom, and no account or phone number is created for it.

Device permissions

The Application uses these permissions and settings. You can change them at any time in your phone's settings, but the Application may then be unable to ring your phone or connect calls.

Permission	Why it is used
Microphone	To let you talk to the visitor during a call you answer. It is not used outside calls.
Notifications, full-screen and lock-screen call alerts	To ring your phone and show the incoming call.
Battery settings (Android)	The Application does not ask for a battery exemption. It can open your phone's battery settings so you can let it ring reliably while it is closed; whether to change the setting is up to you.
Camera and photos	Only if you choose to take or pick a profile photo. The photo stays on your device.

Sharing an invite or access code by text opens your phone's own messaging app with the message prepared; you send it yourself, and no messaging permission is requested. The Application does not request your location or your contacts.

Information about other people

When you add a guest, invite someone, or create an access code, you provide information about another person. Please only do so if you have their permission or another lawful reason to share it. Visitors who call your buzzer reach the Application through the intercom; their phone number and voice are processed only to deliver the call to you, as described above.

How the information is used

The Service Provider uses this information to:

run the Application: route intercom calls, ring your devices, open your door when you choose to, assign a local phone number, and run timers, schedules and access codes
manage your account and household, including invitations and member roles
send service messages, such as call alerts, password resets, invitations and important changes to the Application
process subscriptions and apply the limits of your plan
keep the Application secure: prevent fraud, abuse and code guessing, and investigate problems
fix problems and improve the Application, using server logs and crash reports
meet legal obligations and enforce the Terms and Conditions

No Advertising or Tracking

The Application does not use cookies, advertising identifiers, tracking pixels or third-party analytics, does not show ads, and does not track you across other companies' apps or websites. The Service Provider does not send marketing emails; the emails you receive are service messages such as password resets and invitations.

Your Rights

Depending on where you live, you may have the right to access the personal information held about you and receive a copy, correct inaccurate information (you can edit most of it in the Application), delete your information, object to or restrict certain processing, withdraw consent you have given, and data portability. To exercise these rights, contact the Service Provider at info@buzzkey.co. The Service Provider may need to verify your identity first, will respond within the time the law allows (usually 30 days), and will not treat you differently for exercising your privacy rights.

Canada

Personal information is handled in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law.

Questions or concerns about how personal information is handled can be sent to the Service Provider's privacy officer, Sami Sekucoglu, Director, at info@buzzkey.co.

You may also complain to the Office of the Privacy Commissioner of Canada.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to correct it, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell personal information or share it for cross-context behavioural advertising, and does not use sensitive personal information to infer characteristics about you. To exercise your CCPA/CPRA rights, contact the Service Provider at info@buzzkey.co.

Third Party Access

The Service Provider does not sell personal information. It uses the providers below to deliver the Application and shares the information needed for their respective functions. Where a provider processes information on the Service Provider's behalf, the applicable service and data-processing agreements govern that processing. Some providers also process certain information for their own purposes: for example, Telnyx processes communications usage data, and Apple and Google process store purchases and payment records, under their own privacy policies and legal obligations.

Provider	What they do
Telnyx	Telephony: your BuzzKey phone number, call routing and call audio, and call alerts to the calling software
Google (Firebase Cloud Messaging)	Delivering notifications and call alerts to Android devices, and some service notifications to iPhones
Apple (Apple Push Notification service)	Delivering notifications and call alerts to iPhones
Apple App Store and Google Play	Processing subscription purchases
RevenueCat	Managing subscriptions purchased through Apple or Google
Resend	Sending emails such as password resets and invitations
Railway	Hosting the Service Provider's servers and database in the United States (Virginia)
GitHub (GitHub Actions)	Running database backup and restore checks and storing encrypted database backups for 30 days
Sentry	Receiving and storing crash and error reports in the United States
Expo	Delivering app updates to the Application

Information is also shared within your household: members of your household can see its building details, members, guests, access codes, schedules and door activity history.

Please note that these third-party services have their own privacy policies about handling data:

The Service Provider may also disclose information:

as required by law, such as to comply with a subpoena or similar legal process;
when it believes in good faith that disclosure is necessary to protect its rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
if the Service Provider is merged, acquired or sold, as part of that transaction, in which case the information stays subject to this policy or one that is at least as protective;
with your consent, or at your direction.

International Data Transfers

The Service Provider is based in Ontario, Canada. Its servers and database are in the United States (Virginia), and its service providers process information in the United States and other countries. If you live in Canada, your personal information is therefore transferred to, stored in and processed outside your province and country. While it is there, it may be accessible to courts, law enforcement and national security authorities under the laws of that country. The Service Provider protects these transfers with contractual and other safeguards.

Deleting Your Account and Opt-Out Rights

You can delete your BuzzKey account at any time in the Application (Settings → Security & Privacy → Delete account), or request deletion without reinstalling the Application by emailing support@buzzkey.co from the email address on your account. The Service Provider may need to verify your identity before acting on an email request. When you delete your account:

your account, household memberships, device records and account-linked calling credentials are deleted or revoked;
if you are the only admin of a household, that household is also deleted, its BuzzKey phone number is released, and its calling credentials are revoked;
if the household continues for other members, its building details, guests, access codes, schedules and door activity history remain until separately deleted or the household is deleted. Your direct account link is removed from its activity entries, but existing visitor labels and other shared details may remain.

Account deletion does not immediately erase existing backups, technical logs or notification-processing records. These expire on the schedules below. Providers may retain their own records where required or permitted by their applicable policies and legal obligations.

Deleting your account does not cancel a subscription bought through Apple or Google. Cancel it in your App Store or Google Play settings.

You can turn crash reports off at any time in Settings. You can stop further collection of information from your device by uninstalling the Application; uninstalling does not delete information already sent to the Service Provider, so delete your account first if you want it removed.

Data Retention Policy

The Service Provider keeps personal information only as long as needed for the purposes described in this policy:

Information	How long it is kept
Temporary operational call records and device call-leg records	Deleted from the active database about 1 hour after the call ends; separate history, logs, provider records and backups are covered below
Door activity history	Until your household is deleted, or until you delete it
Your account details and household memberships	Until you delete your account
Household and building details, guests, access codes and schedules	Until the relevant record or household is deleted. Deleting an individual account does not delete a household that continues for other members. If you are its only admin, the household is deleted with your account.
Device tokens and calling credentials	Until you sign out on that device, the device is removed, or you delete your account
Crash reports	Up to 90 days
Telephony and subscription webhook-processing records in the Service Provider's database	30 days, then removed by the hourly cleanup
Server logs	Up to 30 days
Encrypted database backups stored through GitHub Actions	30 days per backup. Records removed from the active database may remain in an existing backup until that backup expires.
Account-linked subscription details and billing-history records in the Service Provider's database	Deleted with your account. Apple, Google and other providers may retain their own payment or transaction records under their policies and legal obligations.
Providers' own records, including Telnyx call-detail records and store transaction records	According to each provider's applicable privacy policy, retention rules and legal obligations; these are not subject to the operational call record's one-hour cleanup

Children

You must be at least 13 years old to create a BuzzKey account. If you have not reached the age of majority where you live, a parent or legal guardian must review and accept the Terms and Conditions on your behalf and approve your use of the Application.

The Application is not directed to children under 13, and the Service Provider does not knowingly permit them to create accounts. Parental or guardian consent must be obtained where applicable law requires it. If the Service Provider learns that an account belongs to a child under 13, or that required parental consent is missing, it will take steps to stop unauthorized collection and delete information as required by law. A parent or guardian can contact info@buzzkey.co about a child's information.

Security

The Service Provider protects personal information with safeguards suited to its sensitivity, including encryption in transit (HTTPS/TLS), hashed passwords, short-lived sign-in tokens that are revoked when you sign out, limits on repeated attempts, encrypted backups, removal of personal details from crash reports, and restricted access to production systems. No system is perfectly secure, and it is your responsibility to keep your device and your access to the Application secure.

Data Breach Notification

If a data breach occurs that affects your personal data and creates a risk of serious harm, the Service Provider will notify you and the relevant authorities in accordance with applicable legal requirements, including information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. It will notify you of material changes in the Application or by email, and by posting the updated Privacy Policy with a new effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at info@buzzkey.co.

This privacy policy is effective as of 2026-10-25.

Your Consent

Where processing is based on consent, such as device permissions, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases, such as providing the service you signed up for, is carried out as described above.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about these practices, please contact the Service Provider:

ANSU Technologies Inc.
611 - 25 Lascelles Blvd, Toronto, Ontario M4V 2C1, Canada
Privacy and general enquiries: info@buzzkey.co
Support and account-deletion requests: support@buzzkey.co