DurantOS

App privacy notice

Last updated: 12 November 2026

This notice explains how Durant Lifts Limited handles information in DurantOS, our private operations app and customer portal. Access is for authorised staff and customers. The app is not a public account-registration service.

Who is responsible?

Durant Lifts Limited is responsible for the business records it handles through DurantOS. We are registered in England and Wales, company number 14592152.

Information handled in the app

• Accounts and contacts: work or portal identity, name, email, telephone number, role and account identifiers; customer, supplier and site contact details and addresses.
• Work records: lift and site information, bookings, job assignments, attendance times, engineer notes, maintenance checklists, photographs, drawn signatures, documents and correspondence. An incident record may include reported injury or medical-attention facts where entered for office review. Include only information needed for the work.
• Commercial and staff administration: quotations, contracts, invoices, payment and transaction records, expenses, time records, pay terms and training documents, according to the user's authorised role.
• Technical and support information: app version, platform, account and installation identifiers, sync counts, timestamps, record identifiers and fixed diagnostic event or failure codes. Service infrastructure may also process request information to operate and protect the service.

Access depends on the account's role and assignments. A customer portal account receives its authorised records rather than the internal staff workspace. Saved work may be held locally on the device and synchronised with our cloud services. A pending change or conflict is not the same as a confirmed cloud save.

Why we use it

We use information to authenticate users, arrange and carry out lift services, prepare and review reports, manage customer and supplier relationships, administer staff work and accounts, meet applicable record-keeping obligations and investigate errors. We use contractual arrangements, legal obligations and legitimate business interests as applicable to the particular record and purpose. Sensitive incident information needs appropriate handling; contact us for information about the basis and safeguards applicable to a particular record.

DurantOS does not use an advertising identifier or combine app activity with other companies' app or website activity for targeted advertising. Optional AI features described below are separate from ordinary job recording.

Photographs, voice and optional AI features

The app may ask for camera, photo-library or microphone permission when a related feature is used. These permissions can be controlled in device settings. Choosing a photo or recording audio does not authorise access to all items in your library.

When cloud voice-report assistance is used, relevant job context, spoken audio or transcripts and draft report content may be processed by OpenAI to help prepare a report. Review the resulting text before saving a business record. Offline recordings may remain on the device while awaiting processing; do not delete or reinstall the app to troubleshoot unsynchronised work.

The optional AI profile-portrait feature asks for agreement before sending the selected photograph to OpenAI. The user reviews the generated preview before choosing whether to save it. Small request and consent records may be retained separately from the image. Provider processing and retention follow the applicable service arrangements; this notice does not promise zero provider retention.

Face ID or Touch ID, when enabled for local unlock, is handled by the device's operating system. DurantOS does not receive your biometric template.

Map features use Google Maps to display business site locations. Its SDK processes map requests, device or account identifiers, usage interactions and technical diagnostics for map functionality and service analysis. See Google's privacy information.

Automatic sync support diagnostics

Signed-in engineer installations can send a limited sync-support snapshot so the office can investigate pending changes and conflicts without asking for a manual export. It contains technical metadata, not report text, photographs, signatures, credentials, raw exception text or diagnostic URLs. The server keeps the latest snapshot per owner and installation, with a seven-day expiry. This expiry applies to that support snapshot, not to job records, documents or business audit history.

If you choose to share a manual support bundle, it can also include locally stored MetricKit crash and performance reports and diagnostic logs. Review the file and recipient before sharing. A manual support export is separate from the limited automatic snapshot described above.

Service providers and sharing

Authorised Durant Lifts staff and authorised customer users can access records within their permissions. Microsoft services support staff sign-in, Azure hosting and storage, business email and connected work services. OpenAI processes information for the optional AI features described above. Depending on an authorised business action, information can also be passed to the relevant accounting, payment or communications provider, or to a report recipient chosen by staff.

We may disclose information to professional advisers or public authorities where necessary for legal obligations or legal claims. Providers may process information internationally. Contact us about the providers and transfer safeguards applicable to a particular feature or record. Provider information is available from Microsoft and OpenAI.

Retention, access and deletion

Retention depends on the record's purpose: ongoing service and contract history, staff administration, accounting, safety, legal requirements and disputes may need different periods. Local saved work, synchronised records, audit evidence and backups are separate copies or records. Signing out or removing an app does not delete the company's cloud records.

Contact us to request access, correction, deletion, restriction or transfer of your information, or to object to processing based on legitimate interests. Rights depend on the circumstances and applicable legal conditions. Where consent is relied on, it can be withdrawn without affecting earlier processing. We may need to verify your identity and may need to keep records that remain necessary. You can ask us about the retention period and lawful basis applicable to a specific record.

You can raise a concern with us or contact the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or 0303 123 1113.

Fictional demo mode

The app's labelled demo uses fictional records held in memory. Its simulated actions do not sign in, synchronise records, send messages, access the camera or microphone, call AI services or make payments. Demo changes are discarded on exit or reset. Do not enter real personal or customer information in the demo.

This page

This notice page does not load advertising or analytics scripts or set cookies. Hosting infrastructure processes technical requests to deliver and protect it. Our separate enquiry privacy policy covers website and social-media service enquiries. We may update this app notice as our services change; the date above identifies this version.