ASSAYA

EVERY SEAL, ATTESTED — PRIVACY POLICY

Last updated: 5 July 2026

Assaya is a passive fire protection record-keeping platform operated by Rockfirepro Ltd (United Kingdom), available at app.assaya.co.uk and through the Assaya mobile app. This policy explains what information the platform holds and how it is used.

What we collect and why

Account details — your name, work email address and an encrypted password, used solely to sign you in and show who recorded or amended work.
Work records — fire-stopping seal records, floor-plan drawings, site photographs, product and location details entered by your company's team. This is your company's compliance data; it exists to build your golden-thread evidence trail.
Activity information — which user created or amended a record and when, kept as an audit trail required for compliance-grade evidence.

What we do NOT do

No advertising, no trackers, no analytics cookies.
We never sell or share your data with third parties for marketing.
Location data is not collected. Photographs are taken deliberately by the user; the app stores only what you choose to attach to a record.
The mobile app requests camera access only when you take a photo or scan a QR label, and Face ID / Touch ID (where enabled) is processed entirely on your device — biometric data never leaves your phone.

Where your data lives

Data is stored on servers in the United Kingdom (London), protected by encryption in transit (HTTPS), with nightly backups held securely off-site. Records you capture offline are stored on your device until they synchronise to your company's account.

Who can see what

Access is controlled by your company's administrator. Operatives see only the jobs they are assigned to; clients invited to observe a job see a read-only register for that job only. Each customer's data lives in its own isolated instance on the Assaya platform — it is never pooled with, visible to, or shared between other customers.

Independence — no conflict of interest

Assaya is owned and operated by Rockfirepro Ltd, which also runs a passive fire protection contracting business. To be unambiguous: Rockfirepro's contracting business does not oversee, monitor, audit, or have any access to your work, jobs, clients, or records. Your data is locked within your own isolated instance on the Assaya server. Rockfirepro's only relationship to your data is as the operator of the Assaya software — bound by this policy — and never as a competitor, overseer, or party to your work. Assaya support staff access an instance's data solely when you ask for support, and only for that purpose. Rockfirepro owns Assaya; that is the whole of the relationship.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data. Company administrators can export their company's full data at any time from the admin console. To exercise any right, contact us at the address below.

Retention

Work records are retained for as long as your company maintains an active account, reflecting the long-life nature of building-safety evidence. You can export your complete data set at any time from your admin console (System → Download full backup) — your records are always yours to take.

If a subscription ends, your data remains available to export for twelve months after the membership end date. After that period it is permanently deleted and cannot be recovered. Re-subscribing before the end of that window keeps everything intact. Account details are also deleted on request, except where audit records must be preserved by law.

Contact

Assaya (Rockfirepro Ltd) — hello@assaya-app.co.uk

If you are unhappy with how we handle your data you may complain to the Information Commissioner's Office (ico.org.uk).