← Back to PAT Test App

PAT Test App Privacy Policy

Effective: 30 September 2026

PAT Test App is provided by MHK Building Solutions Ltd. This policy explains what information the app uses, where it is stored, the services involved, and how you can request deletion.

Privacy contact: mhkbuildingsolutions@gmail.com

Information used by the app

Cloud storage and authentication

PAT Test App uses Google Firebase Authentication and Cloud Firestore. Your account email is processed for authentication. The app also synchronises PAT record data and non-media company/settings data to your account in Cloud Firestore so that signed-in data can be recovered and synchronised between devices.

In the current app build, appliance photos, company logo, engineer signature and the optional app PIN are excluded from the Firestore cloud mirror and remain local to the browser/app storage on that device unless you separately export or share them yourself.

QR labels

When the app displays or creates a PAT label QR code, it requests a QR image from QRServer / goQR.me at api.qrserver.com. The request contains the label payload needed to create the QR image: asset ID, appliance description, result, tested date and retest date. Do not put information in those fields that you do not want sent to that QR generation service.

Camera and photos

The QR scanner can ask for camera permission so you can scan a PAT QR code. Where supported, QR decoding is performed on the device by the browser's BarcodeDetector feature. You can also choose a photo for scanning or attach appliance evidence photos. PAT Test App does not intentionally upload appliance evidence photos through its Firestore cloud-sync feature.

Subscriptions and purchase verification

PAT Test App uses Google Play Billing for subscriptions. Payment-card details are entered into and processed by Google Play and are not provided to MHK Building Solutions Ltd. To decide whether your PAT workspace should be unlocked, the app and its secure backend process subscription information supplied by Google Play, including the subscription product, subscription state, expiry information and a purchase token or derived token identifier used for verification and fraud prevention.

Support requests and technical details

If you use the in-app Help & Support form, PAT Test App can prepare technical details to help diagnose the problem. These can include app/device status, your signed-in account email and Firebase user ID, subscription entitlement state, cloud-sync status and recent technical error messages. The support tool is designed not to include PAT job, client or appliance contents, photos, logos, signatures, PINs, passwords or Google Play purchase tokens. Technical details are included only if you leave the clearly labelled option selected, and your email app opens the prepared message so you can review it before sending it to support.

Local storage and backups

The app uses browser/app local storage to keep PAT data, local media/settings and internal backup information on the device. You can also export a backup file. Exported backup files are under your control and are not automatically deleted when you delete your online account.

Why the information is used

The information is used to provide account access, save and synchronise PAT testing records, create reports and labels, verify subscription access, restore signed-in data, prevent misuse of purchase entitlements, and provide support when you choose to contact us.

Security

Network connections to Firebase and the QR image service use HTTPS. Access to Firestore user data is restricted by authenticated user ID in the app's Firestore security rules. No claim is made that the service provides end-to-end encryption.

Retention and deletion

Cloud account data is kept while your PAT Test App account is active unless you delete it or request deletion. The app provides an in-app account deletion control under Settings. You can also request deletion using the public Account Deletion page. Account deletion is intended to remove the Firebase Authentication account and the PAT Test App cloud records associated with that account.

Local-only data on a device may remain outside the cloud account if, for example, you made exported backup files. The in-app deletion flow clears the app's known local storage on the device where deletion is performed. Files you exported or copied elsewhere must be deleted by you from those locations.

Third-party services

Advertising and analytics

The current reviewed web build does not include an advertising SDK or a dedicated analytics SDK. If this changes, this policy and the Google Play Data safety information should be reviewed before release.

Contact

For privacy questions, support or account-deletion requests, email mhkbuildingsolutions@gmail.com.