CA Secure privacy policy

Effective 9 October 2026 · Questions: info@contactlessaccess.com

Giving any information is completely voluntary: you can use CA Secure without any personal information whatsoever. Doors, elevators and transit need none; only optional secure doors and optional app logs use any, and only if you choose them.

CA Secure makes doors, elevators and mass transit accessible. It lets anyone, including people who have difficulty reaching, pressing or seeing buttons, open doors, call elevators and use transit fitted with Contactless Access devices from their phone: by tapping large buttons, by voice, or automatically when they arrive.

In short: using CA Secure for accessible doors, elevators and transit, we collect no information about you. Information is only collected if you use one of two optional features: Access Control (secure doors you've been given access to) or Logging (app logs to help us fix problems). No ads, no tracking, and we never sell information.

Accessible doors, elevators and transit

Everything the app needs for this stays on your phone. It asks your permission for:

Bluetooth (required): to find and operate nearby Contactless Access devices.
Location while using the app (required): to know which building or station you're at and show its doors and elevators. On older Android phones it's also needed to scan for nearby devices. Your location never leaves your phone.
Location all the time (optional): arrival reminders and opening your doors when you arrive.
Notifications (optional): arrival reminders and route progress.
Microphone (optional): Accessible Voice Controls ("open front door"). Speech is handled by your phone's own speech recognition (Google or Apple); we don't receive recordings.

Your doors, routes and settings are saved in the app, with no account or sign-in. To show the right buildings, the app downloads building and device information from casecure.app; it sends no personal information to do so. Like any website, our web host keeps standard short-term server records (such as the connecting IP address) for security.

Access Control Optional

Some buildings use secure doors that only approved people may open. Only if a building's administrator gives you access to one (by email link or QR code) does CA Secure collect anything. It may also ask your permission for:

Camera: only if you tap Scan QR to add a secure door. Pictures are not kept or sent.
Fingerprint / Face ID: some secure doors ask you to confirm it's you. Your phone checks this; we never see your fingerprint or face.

What it collects:

A random device ID, created by the app (not your phone's serial number or advertising ID), so we can recognise the phone that holds the access.
Your phone number, when you tap REQUEST on a secure door: to check it's on that door's list and to text you a one-time code. Stored encrypted.
Secure door activity: which secure door, when, the result (opened, refused, …), Bluetooth signal strength and whether a fingerprint or Face ID check was used. The app sends this when it checks in, so the administrator has a security record and can spot misuse.
Your name, email address and phone number, from the administrator, to email you the access link and check your number when you ask for the code.

Who can see it

The administrator of the secure door you were given access to; our service providers, only to run the service (our web host, and our email provider to deliver access emails); and authorities, only if the law requires it.

How long we keep it

Access records and secure door activity are kept while the access exists and afterwards as the door's security record. Unanswered access requests are deleted after 30 days (7 days for numbers that aren't on the list).

Security

Everything is sent over encrypted connections (HTTPS). Door PINs and phone numbers are stored encrypted, access codes are digitally signed so they can't be altered, and access can be withdrawn at any time.

Logging Optional

You choose during setup, and can change it any time in CA Secure's Settings. When logging is on, the app sends technical logs (for example which devices were seen, buttons pressed and app errors, with your phone model) so we can fix problems and improve accessibility. Logs contain no location coordinates and are kept only as long as needed. When logging is off, nothing is sent. Until you get a door or send a log, CA Secure's logs are anonymous: they carry a random ID made by the app, not anything that identifies you or your phone.

Your choices

Turn off Logging in CA Secure's Settings.
Turn off location, Bluetooth, microphone or camera access in your phone's settings (some features then stop working).
Uninstalling CA Secure removes everything stored on your phone.
To see, correct or delete Access Control information we hold about you, email info@contactlessaccess.com. Some records may need to be kept for the building's security.

Delete your data

To have the information CA Secure (by Contactless Access) holds about you deleted:

Email info@contactlessaccess.com with the subject "CA Secure data deletion".
Include the phone number you used with CA Secure (and the email address your access link was sent to, if you had one), so we can find your records.
We confirm by email and delete it within 30 days.

What is deleted: your phone number, your access requests, the app's device ID record, your name and email address, and app logs from your phone.

What may be kept: the record of secure door activity (which door, when, the result) for up to one year, if the building needs it for its security records. It's no longer linked to your phone number, name or email. Everything stored on your phone is removed when you uninstall CA Secure.

Children

Access Control is not meant for children under 13, and we don't knowingly collect their information.

Changes

If this policy changes, the new version will be posted here with a new date.