This document is a launch-readiness draft and is not legal advice. Gate Keypers Inc. will have it reviewed by qualified counsel.
Scope
GateKeypers is a product of Gate Keypers Inc., an Ontario corporation. We build a door for secure units in long-term care and memory care, and an admin portal where a care home reads what its own doors reported.
This policy covers two things: the public pages of this website, and that admin portal. It does not cover a care home's own records or the written agreement we sign with a care home, which governs the information we hold on its behalf.
The public pages collect nothing, apart from /tap
Apart from the /tap page described below, there is no form, no sign-up and no account on the public pages, and we keep no record of your visit beyond the server logs described below. The Monday email, and the page each edition has here, are described below too. We use no third-party advertising or analytics service, we set no cookies here, and we do not sell or share information with anyone for advertising. The record the /tap page keeps is described below.
Two small things are kept in your own browser and are never sent to us: whether you chose the light or the dark theme, and whether you dismissed the cookie notice. Clearing your browsing data removes both.
The /tap page
/tap is the page our NFC cards open. Each time it is opened we record a view: the time, which part was opened (such as the page itself, the video or the booking link), whether it came from a personal card and whose card that is, and a coarse browser family such as “iOS Safari”. A view stores no network address, and the page sets no cookie. Opened without a personal card, a view says only that someone looked.
Personal card links
Some cards carry a link of their own. For each one we hold the name it greets and, where we have them, that person's email and organization, with a short note of our own. The link greets the person by name, and every time it is opened the view is recorded against that card, so our team can follow up with them. If you were given one and would rather we did not, tell us and we will switch the card off. Its link then shows the page without your name, and a view from it is no longer tied to you.
The two request buttons
Follow along and Request investor access each leave a request with us. It holds your email and, where we have it, your name (on a personal card, whichever of the two we already hold for it), the one line you wrote about yourself if you wrote one, the consent wording shown beside the button, and when you pressed it. We use it to reply to you and, for Follow along, to send you the Monday email.
Every Monday email has a link to stop them, and you can ask any of us at any time to take you off it or to switch your card off. A request you left, and the views already recorded, stay in our database for now: the portal cannot yet remove them. Once you have asked, we do not use them to contact you.
The video
The video on /tap is served from this site, like the rest of the page. Nothing downloads until you tap play, no other service is involved, and playing it sets no cookie. Tapping play is recorded as one of the views described above.
The booking link
See it in person opens Vino's booking page on Calendly in a new tab. We record that the link was followed; anything you enter there goes to Calendly under its own privacy policy.
Where it is held
Views and requests are held in the same database as the admin portal, on Amazon Web Services in its us-east-2 (Ohio) region, and our team reads them in the portal.
The Monday email
The Monday email goes out from vino@gatekeypers.ca through Google Workspace, to the people on our list. Each of them is in blind copy, so nobody sees anyone else's address. The list is kept in that account.
Each edition also has a page on this site at a private link. Everyone who gets that edition gets the same link, and opening it records nothing about you beyond the server logs described below.
Episode pages show a video poster served from this site. The video itself loads from YouTube only when you press play, and from that moment YouTube's own privacy terms apply.
Every email has an unsubscribe link, which opens an email to vino@gatekeypers.ca, with that address written out in case the link does not open. We take you off the list as soon as we can, and within 10 business days at the latest.
Getting in touch
The about page lists the three founders and links to their LinkedIn profiles. Apart from the two request buttons on /tap, there is nothing to submit on this site. If you write to one of us, that message and our reply sit in the mailbox or the LinkedIn account you sent it to, and we keep them for as long as the conversation is useful.
Server logs
The site is hosted on Amazon Web Services, which records an ordinary web server log line for each request: the network address it came from, the page asked for, the time, and the browser user agent. We use those logs to keep the site up and to look into abuse, and we do not use them to build a profile of anyone.
What the admin portal holds
The portal shows a care home what its own doors reported: which reader, when, what the outcome was, and a reference to the person involved. Where the door supplies a name, the record keeps it, along with a salted reference to the same person that cannot be turned back into a name without a salt that never leaves the database. A key issued for reading the record receives either names or only those references, fixed when the key is created and never changed afterwards.
Those records belong to the care home that runs the doors. We hold them on its behalf, under our agreement with it, and we act on its instruction. Portal accounts themselves are named staff accounts with a role, created by us at a customer's request.
Security
The database is private, inside AWS, with no public network path to it. The portal and the /tap page reach it through one authenticated function, sign-in is handled by Amazon Cognito, and each read through an issued key is written to an audit log with the filters it asked for. No system is perfectly secure, so please do not send us sensitive information we did not ask for.
How long we keep things
Door records are kept for as long as the care home that owns them needs them, and are deleted when it tells us to. Correspondence is kept while the conversation it belongs to is useful. The views and requests left on /tap have no fixed retention period yet; when we set one, this page will say what it is. Server logs are kept for the retention period configured on the hosting service and then age out on their own.
Service providers
Amazon Web Services hosts the pages, the database and the sign-in service, and processes information on our behalf under its own terms. Apart from the services named in this section, we do not send information to any other processor from this website. The addresses left through Follow along are used to send the Monday email, which goes out through Google Workspace (Gmail) and is handled there under Google's own terms. Calendly, described under /tap, is a separate service you reach only by following the booking link, and it handles what it receives under its own policy. YouTube (Google) serves the Monday Drop episode videos, but only after you press play, and handles what it then receives under Google's own terms.
Your choices
You can ask what we hold about you, ask us to correct it, or ask us to delete it, and we will answer. What the /tap page can remove today is set out above. If the information you are asking about sits in a care home's door records, ask that home first: it decides, and we act on its instruction.
Changes
We update this page when what the site does changes. The date at the top of the page is when this wording last changed.
Contact
Questions about this policy go to the founders listed on the about page, and each of us answers. A dedicated privacy address will replace that here once there is one.