Privacy

For Safety Group Inc. operates 4SI Presence. Contact contact@by4si.com about your data.

Early access and website integrations

If you request early access, we store your name, work email, company and website so we can review and respond to the request. This is not a purchase. You can request removal at contact@by4si.com. Registration codes expire after ten minutes and are not a replacement for an existing passkey. Connected websites receive an application-specific identifier and the name or email claims you approve. They do not receive your Key patterns or organization memberships. Each website operates its own account and access policy.

Your account

We use your name, email address, passkey public credentials, device public keys, organization memberships and Key assignments to provide your account and control access. Presence does not receive your Face ID, Touch ID or device passcode.

Email confirmation and changes

We store whether your contact address is confirmed. A requested address change records the old and new address, expiry, attempt count and confirmation status. Codes expire after ten minutes and cannot restore account access. Resend processes transactional delivery, including the recipient address and message. Changing your address notifies the previous address and ends other signed-in sessions.

Account recovery

Recovery requires a previously saved random recovery code and a code sent to your confirmed email, followed by a 24-hour safety period. We store hashes of recovery codes, verification attempts, request origin, expiry, status and a browser binding. Recovery requests expire after seven days. Expired request records older than 30 days are removed when a new recovery is started; account deletion also removes them. Recovery notifications use our transactional email provider. Completing recovery replaces prior sign-in credentials and device access, deactivates Keys and preserves your account identity and company memberships.

Camera and photos

The camera runs only when you open the scanner. A short selection of images is sent over HTTPS to our recognition service. Images are processed in memory and are not saved to our application database. Scan results, a fingerprint of the image and derived geometry are associated with your account. Keep unrelated people or documents outside the camera view.

New Key registration

When you add a printed Key, Presence stores its normalized point positions and approximate component sizes for later recognition. It does not store the camera photos. Your scan must show a consistent pattern before you can name and save it. This records an optical layout, not measured depth or proof of physical originality.

Activity and service providers

Account changes and approvals are recorded so you can review access. Vercel hosts the service and Neon stores application records. Infrastructure providers process connection and operational data such as IP addresses, request timing and errors. We do not include images or authentication secrets in application logs. There are no advertising SDKs or cross-app tracking.

Returning to the 4SI website

When you arrive from the 4SI website, this browser tab can retain the public page you came from for up to 24 hours, so Back to 4SI returns you to the right place. The record contains a validated public URL, a random navigation identifier, a timestamp and navigation state. Authentication tokens and unrelated URL parameters are excluded. It stays in this tab’s session storage and is not used for advertising or account identification. Closing the tab or clearing its site data removes it.

Local scan checks

Presence keeps up to 100 scan timing and outcome records on this device. These contain no images, Key IDs, account details or persistent device identifiers. Optional physical checks record the phone model and expected-result category you select. You can clear or export these records in Help → Scan checks. They are not sent to our server automatically.

Deletion and control

Choose Account → Delete account in the iPhone app, or Account → Security & privacy → Delete account on the web to erase your live account, credentials, devices, scan records and personal activity and revoke access. Transfer ownership of an organization with other members before deleting. Retired physical pattern identifiers and reference layouts may remain without an account link, so that a retired Key cannot be reassigned. Provider backup and security-log retention is separate from the live application database; contact us for the applicable retention information. You may also request access, correction or deletion by contacting us.

Printed Keys

A printed pattern is identifiable and reproducible. It is not a biometric identifier or proof that an object is original. Account access uses either a passkey or an explicitly enabled device signing a specific login after a scan. A browser device signature is not fresh biometric verification. We retain the login request binding to invalidate computer access when its source Key or device is revoked.

Updated November 2026. See the 4SI Privacy Policy for further rights and contact details.