Privacy Policy
What Keechain collects, why, who sees it, and how to delete it.
Keechain is run by Hyperlink Labs, LLC (“we”). It lets car owners and fleets (“hosts”) share their cars with drivers: a phone becomes the car’s key, trips and charging are logged, and costs such as charging and tolls are billed to whoever was driving. This policy covers the Keechain website, the web dashboard and the Keechain apps.
What we collect
Your account
- Name, email address and phone number. A host usually enters these when inviting a driver.
- Your password, which our authentication provider stores only as a secure hash.
- For hosts: the fleet’s name, team members and billing details.
Data from the car
When a host connects their cars through Tesla’s official Fleet API, we receive data from those cars: location, trips and routes, speed, battery and charging, lock and door state, odometer and alerts. While you hold a key to a car, this data is linked to you as its driver. A host can turn on working-hours privacy, in which case the car’s location and routes are not recorded outside your working hours. The driver app has a Your privacy screen that shows exactly what is recorded and when.
Your phone
- Bluetooth. The app talks to the car over Bluetooth so your phone can lock, unlock, open and start it. The key’s private part is created on and stays in your phone’s secure storage.
- Location. The app uses your phone’s location, including in the background, only to tell when you are at the car you have been assigned. That check happens on your phone. Your phone’s location is not sent to us; we receive only whether you are near the car.
- Camera and photos. Used when you scan the QR code that sets up your key, take condition photos of the car, or scan a payment card. Condition photos are uploaded and shared with your host.
- Notifications. If you allow them, we store a push token to send you key and car alerts.
Payments
Cards are collected and stored by Stripe. We keep only the card brand and last four digits, plus records of what was charged: charging sessions, tolls, fees and deposits.
The assistant
Messages you send the assistant, and documents a host uploads such as toll notices, are processed to answer and act on them, including by the AI model providers that power the assistant.
Diagnostics
The apps send crash reports, performance data and a record of how screens are used so we can fix problems. Personal fields such as names, email addresses and card details are redacted from these before they leave your phone.
Usage
On our website, the web dashboard and the apps we record which pages and screens are opened, what is clicked or tapped, and how far a page is scrolled, so we can see which features are used and improve them. When you are signed in this is linked to your account. We do not record your screen, and what you type into forms is not captured.
How we use it
- To run the service: issue and end keys, operate the car when you ask, log trips and charging, and bill charges to the right person.
- To keep cars and people safe: alerts, geofences and security events.
- To support you, and to keep Keechain secure and working.
We do not sell personal data, show advertising, or track you across other companies’ apps and websites.
Text messages (SMS)
If you tick the text message box when you book a car, or a host adds their own mobile number in the dashboard, Keechain (operated by Hyperlink Labs, LLC) sends you texts about your bookings: confirmations, pickup and return reminders, extension and payment notices, and notices when a car is locked or unlocked for non-payment. We do not send marketing texts.
To send them we store your mobile number, the fact and time you agreed, the wording you agreed to, and a record of each text we sent and whether it was delivered. Texts are delivered through our messaging provider, Twilio. Message frequency varies. Msg & data rates may apply. Reply STOP to any text to stop them, or HELP for help. Agreeing to texts is never a condition of booking.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile numbers and text message consent are not shared with any third party or affiliate for their marketing.
Who can see it
- Your host. If you drive for a host, they see the car data from while you hold a key (subject to working-hours privacy), your trips, condition photos, and what you have been charged.
- Service providers who process data for us under contract: hosting, database, push notifications and usage analytics (SitePong), payments (Stripe), text messages (Twilio), vehicle access (Tesla, through its Fleet API), and AI model providers for the assistant.
- Authorities, when the law requires it.
How long we keep it
We keep your data while your account is open. Trip, charging and billing records belong to the fleet that owns the car, and the fleet keeps them for its accounts and tax records.
Deleting your account
In the app, open Account and tap Delete account. Your sign-in, profile, notifications and phone key are deleted straight away, any key you hold ends, and the card on file for you is removed. Records a fleet keeps about its own cars stay with that fleet, no longer linked to your login.
If you are the last person who can run a fleet, the fleet closes with your account: its billing stops and every driver’s key ends at once, and the fleet and all its data are deleted 7 days later.
You can also email support@keechain.com to ask for a copy of your data, a correction, or deletion.
Children
Keechain is for licensed drivers and car owners. It is not meant for anyone under 18, and we do not knowingly collect children’s data.
Changes and contact
If we change this policy we will update the date at the top, and tell you in the app for significant changes. Questions: support@keechain.com.