Privacy Policy
Effective date: 13 November 2026
What changed on 13 November: the free-trial and sign-in records we keep for 2 years, and what deleting a KLO account does to other KLO apps' subscriptions.
Who we are: KLO Technical Services Limited, trading as KLO Development Services (company number 16105032), 23 Brook Road, Bomere Heath, Shrewsbury, Shropshire, SY4 3PU. Contact: klo@klodevelopmentservices.co.uk.
KLO Technical Services Limited is registered with the Information Commissioner's Office, reference ZC299134.
This policy explains how the KLO Development Manager app ("the App") handles information. In short: what you put into the App stays on your devices and in your own iCloud account, and what you put into the web page stays in your browser. We cannot see it (the few look-ups that go through our servers, sections 5A and 5B, are passed on and not kept), and we do not track you. To sell and check subscriptions we hold your email address and whether you are subscribed.
1. Your data stays with you
Everything you enter or attach (sites, projects, appraisals, tenders, valuations, landowner and agent contact details, notes, photographs and documents) is stored on your device. If you are signed in to iCloud, it is also kept in the App's private database in your own iCloud account, so that it syncs between your iPhone, iPad and Mac. Apple stores it under your iCloud agreement with Apple. We have no access to it.
Some of what you record may be personal data about other people, such as a landowner's name and phone number. For that information you decide what is recorded and why, so you are responsible for it under data protection law. We do not receive it.
The web page (apps.klodevelopmentservices.co.uk/development-manager) keeps what you enter in your browser's own storage on your device. It is not sent to us. If you turn on Settings › iCloud on the web page, it reads and saves your App data in your own iCloud account through Apple's CloudKit JS, signed in with your Apple ID; we do not receive it.
2. Sharing a project
If you choose to share a project with someone, it is shared through Apple's iCloud sharing with the people you invite. They can see the project and anything you have put in it, and if you give them edit access they can change it. You can stop sharing at any time. The App shows the name iCloud gives each person, so that changes can be credited to whoever made them.
3. Information the App looks up for you
Some features look up public information. The App only does this when you use one of these features, and it sends only what that service needs to answer:
Planning constraints: the App sends a site's location to the Planning Data platform run by the Ministry of Housing, Communities and Local Government (planning.data.gov.uk). No account is needed.
Bus stops: when you turn on the bus-stop layer, the App asks the Department for Transport's NaPTAN service (naptan.api.dft.gov.uk) for the stops in that local area, by the area's code. No account is needed and nothing about you is sent. The bus-stop layer is in the Mac, iPhone and iPad apps only; the web page does not show bus stops.
Sold prices and the house price index: the App sends a postcode or area to HM Land Registry (landregistry.data.gov.uk). No account is needed.
Floor areas: the App sends an address or postcode to the Energy Performance of Buildings data service (get-energy-performance-data.communities.gov.uk), using an access token that you get from that service and enter in Settings.
Company ownership: the App sends a company name or number to Companies House, using an API key that you get from Companies House and enter in Settings. What comes back is information Companies House already publishes, such as the names, month and year of birth, nationality and country of residence of people with significant control.
Searchland: if you have a Searchland account, the App sends a location or search to Searchland using your own Searchland API key. Your use of Searchland is between you and Searchland.
Maps and addresses: maps, and turning a location into an address, are provided by Apple.
Google Maps, what3words and council planning websites: these open only when you tap the button for them. They open in your web browser or in that company's app, and that company's own privacy policy then applies.
When the App connects to any of these services, your device's internet address is seen by that service, as it is with any website. Each provider handles that under its own terms. In the App, your API keys and tokens are kept in your device's keychain. On the web page they are kept in your browser. Each is sent only to the service it belongs to, except that on the web an EPC or Searchland key goes through KLO's relay (section 5B), which passes it on and does not keep it.
4. Your location
If you allow it, the App uses your location while you are using it, to centre the map on where you are and to record a site's location while you are standing on it. A site's location leaves your device only when you use a look-up that needs it (section 3: planning constraints and Searchland; EPC look-ups send the postcode, not the map position), when you use Site Sourcing on the web page (section 5A: the map area you look at), or when you open the site in Google Maps or what3words. The App does not track your location in the background. Bus stops are looked up by the area's code, not your position.
5. Subscriptions
App Store. A subscription bought in the App is sold and managed by Apple. Apple tells the App whether it is active; we do not receive your payment details. Manage or cancel it in your Apple account settings.
Your KLO account. To sign in on the web page, or to use a web subscription in the App, you use a KLO account: your email address, a sign-in token, and your subscription state (active, until when, bought on the web or through Apple). It is kept on our account server, run on Cloudflare (Cloudflare D1, Western Europe). Sign-in codes are emailed to you through Microsoft 365, from signin@klodevelopmentservices.co.uk. We use this only to sign you in and decide whether editing is open. Lawful basis: contract. You can delete the account in the App or on the web page (Settings › KLO account › Delete KLO account), or by emailing us.
Free-trial record: when you start a free trial we keep your email address and the date for 2 years, even if you delete your KLO account, so the same trial is not taken twice. Our lawful basis is legitimate interests (preventing misuse of the free trial).
Sign-in record: we keep a log of sign-ins to your KLO account (date, time, app and device type) for 2 years, to keep accounts secure. Our lawful basis is legitimate interests (security). To stop misuse we count requests from each internet address; the address is kept for up to 2 days for that and then deleted.
One KLO account covers every KLO app. Deleting it ends every KLO web subscription on that account, in all KLO apps, straight away, and paid time left is not refunded. To keep another app, cancel only the subscription you no longer want, in Manage subscription.
Paying on the web. Web payments are taken by Stripe. Your email address, card details and billing address go to Stripe; we receive your Stripe customer reference and subscription dates. Stripe's privacy policy: https://stripe.com/privacy.
5A. Site Sourcing (optional add-on)
Site Sourcing is an optional add-on that shows registered title outlines on the map and can look up the company that owns a title. Site Sourcing is on the web page. When you use it, the web page sends our Site Sourcing server (run on Cloudflare, as a Cloudflare Worker) the map squares you are looking at and your KLO account sign-in token, so it can check you have the add-on. When you look up the owner of a title, only a four-digit group number worked out from the title number is sent, never the title number itself. We remember a 'yes' for 2 minutes and a 'no' for 30 seconds. To stop misuse we count requests from each internet address for one minute; the address is not stored. It does not keep the map squares you look at. Company owners come from HM Land Registry's public datasets of UK and overseas companies that own land; they never name private individuals. Lawful basis: contract.
5B. Maps and other services the App and web page contact
Maps in the App are Apple Maps. Maps on the web page are OpenStreetMap: your browser loads map tiles from tile.openstreetmap.org, which sees the area you view and your IP address (https://wiki.osmfoundation.org/wiki/Privacy_Policy).
The web page loads code libraries from Cloudflare's cdnjs and, if you turn on iCloud, from Apple's CloudKit (cdn.apple-cloudkit.com).
Look-ups you ask for go straight from your device to the public service: planning.data.gov.uk (constraints), HM Land Registry (sold prices), Companies House (with your own free key) and the EPC register. On the web, EPC and Searchland look-ups go through KLO's relay (a Cloudflare Worker we run), because those services refuse requests straight from a browser. It passes the request on, with any API key you entered, and keeps nothing: no log of what you looked up and no copy of your key. The relay also receives your KLO account sign-in token, to check you have a live subscription; it keeps a 'yes' for 10 minutes and nothing else.
Site Sourcing's place search on the web sends what you type (a postcode or place name) to postcodes.io, a free service run by Ideal Postcodes (https://postcodes.io/about). In the App the search uses Apple Maps.
5C. Data you hold about other people
Your projects may contain names and details of landowners, agents and others. You hold that information on your own devices and iCloud; we never receive it, so we are not your processor and there is no data processing agreement to sign. You are responsible for it under data protection law.
5D. International transfers
Some of the services named in this policy are run by companies based in the United States or have staff and servers outside the UK: Apple (iCloud and the App Store), Microsoft (the emails that carry sign-in codes), Cloudflare (our account server, the Site Sourcing server and the relay) and Stripe (web payments). Where your personal data goes outside the UK, it is protected by UK adequacy regulations (including the UK-US Data Bridge for companies certified to it) or by the International Data Transfer Addendum to the EU Standard Contractual Clauses in that provider's terms. Our account server's data is held in Western Europe. You can ask us for details of these safeguards at the contact address below.
6. Problem reports
If you choose "Report a problem", the App opens an email to us in your own mail app. The email contains the App version, your device model, operating system, language and time zone, how many records of each kind you have, the sync status and recent error messages. If the App has crashed or stopped responding, it also contains Apple's crash and hang reports for the App (MetricKit), which describe where in the App's code the problem happened. It does not contain your projects, names or figures. You can read it before sending, and nothing is sent unless you send it. We use it only to answer you and fix the problem, and we keep the email for as long as it takes to deal with it.
7. What we do not do
We do not collect analytics, track you, or show advertising.
We do not sell your information. We share it only with the service providers named in this policy, to run the App, the web page and your subscription.
We do not receive your projects, sites, appraisals or other records; our servers hold only your KLO account (section 5) and check your Site Sourcing add-on (section 5A).
8. Deleting your data
You can delete any record in the App. Deleting it on one device deletes it from your iCloud copy and from your other devices. To remove everything, delete the App from your devices and delete its data from iCloud. On iPhone or iPad, go to Settings › [your name] › iCloud › Manage Account Storage. On a Mac, go to System Settings › [your name] › iCloud › Manage.
We keep your KLO account while you have one and delete it when you ask or delete it in the App. Stripe and our own billing records are kept for six years after the last payment, as HMRC requires.
9. Your rights
Under UK data protection law you have rights over personal data that we hold about you. The personal data we hold about you is your KLO account (section 5), if you have one, and any email you send us. To exercise your rights, contact klo@klodevelopmentservices.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
Information that comes from the public Companies House register can only be corrected by Companies House.
10. Third-party data and licences
Planning data, Land Registry data and energy performance data: contains public sector information licensed under the Open Government Licence v3.0. © Crown copyright and database rights.
Company information comes from Companies House and is subject to its terms of use.
Bus-stop data: NaPTAN, from the Department for Transport, © Crown copyright, under the Open Government Licence v3.0.
Site Sourcing title outlines: HM Land Registry INSPIRE Index Polygons. This information is subject to Crown copyright and database rights 2026 and is reproduced with the permission of HM Land Registry. The polygons (including the associated geometry, namely x, y co-ordinates) are subject to Crown copyright and database rights 2026 Ordnance Survey 100026316.
Company owners (Site Sourcing): contains HM Land Registry data © Crown copyright and database right 2026, from the UK companies and overseas companies datasets.
11. Children
The App is a business tool for property development professionals. It is not intended for children.
12. Changes to this policy
If we change this policy, we will update the effective date above. If a change affects what the App or the web page does with your information, we will email everyone who has a KLO account before it takes effect, and say so on the App's page at klodevelopmentservices.co.uk/development-manager (and, once the apps are on the App Store, in the release notes for that version).
13. Contact
KLO Technical Services Limited t/a KLO Development Services
23 Brook Road, Bomere Heath, Shrewsbury, Shropshire, SY4 3PU