Doorward privacy policy

Version 1.0, 13 September 2026. Doorward is made by Patient Thread Ltd (company number 17167409, England and Wales), which is the data controller. Patient Thread Ltd is a subsidiary of Lawrence Medical Ltd and is covered by Lawrence Medical Ltd's registration with the Information Commissioner's Office.

1. The short version

Doorward keeps your premises records on your own device. There is no account to create and we hold no copy of your procedures, your building facts or your people list. The only data that leaves your device is what you choose to send: a licence code check, an optional readiness status to the organisation that issued your code, and a pack you choose to share.

2. What stays on your device

Everything you enter in the app (premises details, responsible person, capacity assessment, building facts, procedures, people, briefing dates, practice and review logs, SIA notification information) is stored in a file inside the app's own storage on your iPhone or iPad. It is included in your device backups if you have them switched on. You can export it as a backup file and restore it. Deleting the app deletes the file.

3. What the app sends, and when

• Licence code check. When you enter a code from your organisation or our website, the app sends the code and a random device identifier (generated once on your device, not linked to you) to our server so the code can be validated and limited to a small number of devices. We keep the code, the device identifier and the time of redemption.
• Readiness status (optional, off by default). If an organisation provided your code and you switch on "Share readiness status", the app sends that organisation, through our server, the premises name and postcode, its tier, and the score of each readiness step. It never sends the contents of any procedure or record. Switch it off at any time in More.
• App Store purchases. Handled by Apple under Apple's privacy terms. We receive no payment details.
• Website purchases. Handled by Stripe under Stripe's privacy terms. We keep the email address on the Stripe receipt, the code we issued and its expiry, so we can help you if you lose the code.
• Packs you share. When you share or print a pack, it goes wherever you send it. We never see it.

4. What we do not do

No analytics, no advertising, no tracking, no sale of data, no profiling. The app has no third-party SDKs other than Apple's purchase framework and the open-source libraries that draw the PDF.

5. Legal basis and retention

Licence and purchase records are processed to perform our contract with you and kept for the life of the licence plus six years for accounting. Readiness status records are processed on the basis of your choice to share them with your organisation and are deleted when the organisation's contract ends or on request. Device identifiers are random and cannot identify you.

6. Your rights

You can ask us what we hold about a code or a purchase, ask us to correct or delete it, and complain to the Information Commissioner's Office (ico.org.uk). Email chris@patientthread.com.

7. Where data is held

Our server functions and storage run on Netlify and Stripe infrastructure, which may involve processing outside the UK under standard contractual safeguards. Nothing about your procedures is ever stored there.

8. Changes

We will post any change here with a new version number and date.

Doorward is an independent product and is not endorsed by the Home Office, the Security Industry Authority or any government body.