GasMate Pro ("we", "our", "us") operates the GasMate Pro mobile app and the website at gasmatepro.co.uk. This policy explains how we collect, use, and protect your information when you use our app or website.
1. Who this app is for
GasMate Pro is a professional reference tool for Gas Safe registered engineers. It is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with data, please contact us and we will delete it.
2. Data we collect
Account data (app)
- Email address (required for registration)
- Password (stored in hashed form; we never see your plain password)
- First name, last name (optional)
- Gas Safe registration number (optional)
- Phone number (optional, if you provide it)
Usage and session data
- Login times, session tokens, and device information (e.g. for keeping you signed in and securing your account)
- Which boiler models you look up or download (to improve the service and, if you are a subscriber, to provide your download history)
Service checklists (app)
If you use the in-app service checklist feature, you may optionally enter customer name and address. This data is stored on our servers when synced. You can use generic identifiers (e.g. "Customer A") instead; we do not require customer details for the app to work.
Photos and OCR
When you scan a boiler data badge, the app may send the image (or extracted text) to our servers to identify the boiler model (e.g. via AI-assisted extraction). These images are processed to return boiler information and are not used for other purposes. We do not use them for marketing or profiling.
Website
If you join the waitlist or contact us via the website, we collect the email address (and any other details) you provide so we can respond and send updates about GasMate Pro.
3. How we use your data
- To create and manage your account and subscription
- To provide the app's features (boiler lookup, manuals, checklists, tools)
- To process badge images and return boiler identification results
- To send service-related messages (e.g. password reset, important product updates)
- To improve the app and our services (e.g. fixing bugs, understanding usage)
- To comply with legal obligations and enforce our terms
4. Legal basis (UK / EU)
We process your data on the basis of: (a) contract (to provide the app and services you signed up for), (b) consent where we ask for it (e.g. marketing), and (c) legitimate interests (security, improving the service, analytics in line with this policy). Where we rely on legitimate interests, we do so in a way that respects your rights.
5. Third parties and sharing
We use trusted service providers who process data on our behalf (e.g. hosting, databases, email, and AI for badge recognition). These providers are required to protect your data and use it only as we instruct. We do not sell your personal data. We may disclose data if required by law or to protect our rights, users, or safety.
Our backend and database are hosted in the UK/EEA (e.g. Supabase). Any AI processing (e.g. for badge text extraction) may involve subprocessors in jurisdictions that are subject to appropriate safeguards (e.g. adequacy or standard contractual clauses).
6. Retention
We keep your account and related data for as long as your account is active. You can ask us to delete your account and associated data at any time (see "Your rights" below). We may retain some data where required by law (e.g. for tax or legal claims) for a limited period after account deletion.
7. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and secure access to our systems. No method of transmission or storage is 100% secure; we work to reduce risk and will notify you of significant breaches where we are required to do so.
8. Your rights
Under UK and EU data protection law you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restriction — ask us to restrict how we process your data in certain cases
- Portability — receive your data in a structured, machine-readable format where applicable
- Object — object to processing based on legitimate interests or for direct marketing
To exercise these rights, contact us at support@gasmatepro.co.uk. To request deletion of your account and associated data, you can use our dedicated page: Request account deletion. You also have the right to complain to a supervisory authority (e.g. the ICO in the UK).
9. Changes to this policy
We may update this privacy policy from time to time. We will post the updated version on this page and, for significant changes, we will notify you via the app or email where appropriate. The "Last updated" date at the top reflects the latest revision.
10. Contact
For privacy-related questions or requests, contact us at support@gasmatepro.co.uk.