Privacy Policy

Effective August 3, 2026 · Applies to the Extinguisher Log app for iPhone and iPad

1. Information we collect

None. We do not collect, receive, transmit, store, process, sell or share any personal information or usage data.

This is a structural property of the app rather than a policy promise. Extinguisher Log is built with no networking layer: it makes no HTTP requests, opens no sockets, embeds no remote analytics or attribution libraries, and includes no third-party dependencies. There is no server operated by us for the app to talk to.

Extinguisher Log has no account system. You are never asked to register, provide an email address, or sign in.

2. What Extinguisher Log stores on your device

The app writes the following to your device's local storage, where it remains under your control:

• Asset records — locations, extinguisher types, capacities, manufacturers, model and serial numbers, manufacture and installation dates, tag or barcode values, and site, floor and zone groupings you create.
• Inspection records — checklist results, the inspector name you enter, the date you state the check was performed, and a system-generated entry timestamp.
• Defect records — defect types, descriptions, status, and resolution notes and dates.
• Service events — annual maintenance, six-year internal examinations, hydrostatic tests and recharges, including performing company, technician name, certificate number and agent weight where you enter them.
• Photographs you take or select, stored as image files in the app's own container.
• Local settings — inspector name, reminder time, paper size, and the date of your last backup export.
• Location coordinates, only if you enable that option — see section 3.

The inspector name and any technician or company names you type are personal information about identifiable people. They are stored only on your device. Because we never receive them, you are the controller of that information, and you are responsible for handling it appropriately under whatever rules apply to you — including telling the people concerned that you are recording their name against inspection records.

3. Device permissions

Camera

Requested when you first scan a tag or take a photo. Used entirely on-device to read barcodes and QR codes and to capture defect and asset photographs. Camera frames are processed locally by Apple's system frameworks and are never transmitted. If you decline this permission, everything in Extinguisher Log continues to work except scanning and in-app photo capture.

Photo library

Requested only if you choose to attach an existing image instead of taking a new one. Extinguisher Log receives only the specific images you select.

Location

Optional and off by default. If you switch it on, the coordinates where an inspection was submitted are saved alongside that inspection record on your device, so a record can show where the check happened. This data is never transmitted. It appears in an exported backup file, and you can turn the option off at any time in Settings.

Notifications

Used only for local reminders about upcoming monthly inspections and service due dates. Reminders are scheduled on your device by iOS from your own data. No push server is involved and no notification content ever leaves the device. If you decline notification permission, Extinguisher Log falls back to showing due and overdue counts inside the app.

4. When data leaves your device

Only when you explicitly make it happen, and only to a destination you pick:

• Exporting a PDF report. The file is generated locally and handed to the iOS share sheet. You decide whether it goes to Mail, Messages, AirDrop, Files, or another app. Once you send a report to someone, its handling is governed by whatever service you chose, not by this policy.
• Exporting a backup. Produces a single package containing your records and photos, which you save wherever you choose — including iCloud Drive, which is governed by Apple's terms.

We are not a party to any of these transfers and receive nothing from them.

5. Purchases

The one-time unlock is sold through Apple's in-app purchase system. Payment is handled entirely by Apple; we never see your payment details, billing address, or Apple Account identity. The app asks StoreKit whether a valid purchase exists and records only a local yes/no flag on your device. Apple's handling of transaction data is covered by the Apple Privacy Policy.

Aggregate sales and download statistics are made available to us by Apple through App Store Connect. These are anonymised summaries produced by Apple and cannot be tied by us to any individual.

6. Backups

Extinguisher Log's data is included in your device's normal iCloud or Finder backup. We do not exclude it, because a lost phone with no backup means lost inspection records. That backup is stored and encrypted by Apple under Apple's terms; we have no access to it.

Backup packages that you export yourself are ordinary files. They contain your full inspection history and photographs in unencrypted form, so store and transfer them with the same care you would apply to the records themselves.

7. Retention and deletion

We retain nothing, because we receive nothing. Your data persists on your device for as long as you keep the app installed.

Deleting the app removes its stored data from that device, including photographs. This cannot be undone, and exported backup files you saved elsewhere are unaffected — export a backup first if you want to keep your history.

Note that inspection records cannot be deleted individually from inside the app, and assets are retired rather than erased. That is an intentional integrity property of an audit log, not a data retention practice on our part: the data never leaves your device, and you can remove all of it at any time by deleting the app.

8. Children

Extinguisher Log is a workplace tool intended for adults and is not directed at children. We do not knowingly collect information from anyone, including children under 13.

9. Your rights

Privacy laws including the GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data held about you by a company. We hold none, so there is nothing for us to disclose, correct or erase, and we have no data to sell or share — we have never sold or shared personal information and do not do so.

In practical terms you exercise these rights directly: your records are in your hands. You can view and edit them in the app, take them with you using the backup export, and destroy them by deleting the app.

10. Changes to this policy

If this policy changes, the revised version will be posted here with a new effective date, and any change material enough to affect you will be noted in the app's release notes. Should a future version of Extinguisher Log ever introduce a feature that transmits data — which is not planned — it would be opt-in, described here before release, and clearly presented in the app.

11. Contact

Questions about this policy or about how Extinguisher Log handles data:

[email protected]

This document describes how the Extinguisher Log app handles information. It is not legal advice about your own obligations. If you record other people's names in inspection logs as part of a business, check what your local data protection rules require of you.