Last updated: November 18th 2025

Certy (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how it is protected, and the rights you have under UK GDPR and other applicable laws.

Certy is designed to help electricians complete certification and compliance paperwork faster and more accurately. We keep your data secure, never sell your information, and only collect what is necessary to operate the service.

If you have any questions, contact: privacy@certyapp.com

1. Information We Collect

We collect the minimum information required to run Certy and improve its functionality.

1.1 Personal Information

• Name

• Email address

• Company name (if provided)

• Phone number (optional)

• Account login details
  
  
  

1.2 App Usage & Activity

• Data you enter or dictate into the app (e.g., EICR details, observations, measurements)

• Photos you upload (e.g., distribution boards)

• Certificate data generated through the app

• Interaction logs and feature usage
  
  
  

1.3 Device Information

• Device type, operating system, and version

• App version

• Crash logs and performance data

• Approximate location (only when required for certificates or compliance fields; never precise GPS tracking)
  
  
  

1.4 Voice Input

If you use our dictation features:

• Your audio is processed for transcription

• We do not store raw audio files unless explicitly stated or for debugging (and only with explicit consent)
  
  
  

2. How We Use Your Information

We use your information to:

• Generate certificates (EICR, EIC, Minor Works, etc.)

• Autofill fields, run compliance checks, and power AI-assisted suggestions

• Provide customer support and troubleshoot issues

• Improve app accuracy, performance, and user experience

• Secure your account and prevent misuse

• Comply with legal obligations (e.g., regulatory record keeping)

We do not sell your data. Ever.

We may use aggregated and anonymised data for internal analytics — never identifiable to you.

3. Legal Basis for Processing (UK GDPR)

We process your data under:

• Contract – to provide the Certy service you request

• Legitimate Interest – to improve safety, performance, and reliability

• Consent – for optional features like voice dictation or notifications

• Legal Obligation – where regulations require retention of certification data
  
  
  

4. How We Store and Protect Your Data

Your data is stored securely using:

• Encrypted transmission (HTTPS/TLS)

• Encrypted storage

• Access controls and authentication

• Regular security reviews and monitoring

Data is stored in UK or EU data centres and never transferred outside these regions without appropriate safeguards.

5. Sharing Your Information

We only share your data with:

• Service providers (e.g., cloud hosting, analytics, authentication) who are bound by strict confidentiality and data-protection agreements

• Your clients, but only when you choose to send or export a certificate

• Regulatory bodies, if legally required
  
  We do not share your information with advertisers or third-party marketing companies.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the data we hold about you

• Correct inaccurate information

• Delete your data (“right to be forgotten”)

• Request a copy of your data

• Restrict or object to certain processing

• Withdraw consent at any time (where applicable)
  
  

  To exercise these rights, email privacy@certyapp.com.

7. Data Retention

We retain data only for as long as necessary:

• Account data: retained while your account is active

• Certificate data: retained so you can access historical work, unless you request deletion

• Audit logs & diagnostic data: retained for security and troubleshooting for a limited time

You may request deletion of all personal and certificate data at any time.

8. Children’s Privacy

Certy is intended for professional users aged 18 and over.
We do not knowingly collect data from children.

9. Third-Party Services

Certy may use trusted third-party services for:

• Cloud hosting

• Voice-to-text transcription

• Analytics

• Crash reporting
  
  All providers comply with GDPR and are prohibited from using your data for their own purposes.

10. Cookies & Tracking

Certy does not use advertising cookies.
We may use anonymous analytics to understand app performance and improve reliability.

11. Changes to This Policy

We may update this Privacy Policy from time to time.
If the changes are significant, we will notify you in the app or via email.

The latest version is always available at: certyapp.com/privacy

12. Contact Us

For privacy or data protection queries, contact:
Certy Data Protection Officer
Email: privacy@certyapp.com