Privacy policy
Last updated 16 October 2026
Who we are
ComdKit is made by KodeKin Ltd, a company registered in England and Wales (company number 17521806), registered office 66 Paul Street, London EC2A 4NA. KodeKin Ltd is the data controller for the personal data described here, and is registered with the Information Commissioner's Office (ICO) under registration number ZC276350.
For anything about your data, email support@comdkit.com or write to us at the address above. ComdKit is not made by, or on behalf of, the Ministry of Defence or the British Army.
Who ComdKit is for
ComdKit is for adults aged 18 and over. When you ask for access or sign in, you confirm you're 18 or over. If we learn that an account belongs to someone under 18, we'll close it and delete its data. If you think a child is using ComdKit, email support@comdkit.com.
What stays on your phone
These are stored only on your device, in the app's own storage, and never sent to us:
- Orders, slate cards, notes and anything you dictate.
- Your first name, rank and age on the ME card, and your blood group and allergies unless you choose to share them with your team.
- Photos you take or attach, unless you send one to a team or a friend.
- Your voice, except voice messages you choose to send to your team. Read-outs of team alerts are spoken by your phone itself.
- Your GPS position, tracks, targets, drawings and saved routes, unless you share your position with a team or send it in a chat.
- Downloaded maps and documents (including anything downloaded from Battle Box).
- Map and AI keys you enter in Settings, and the private half of your phone's encryption keys.
The app keeps these in your phone's app storage (local storage, IndexedDB and an offline cache). If you uninstall the app, or clear the website's data in your browser, they're removed. On Android, ComdKit is excluded from Google's automatic app backup. On iPhone, an iCloud or computer backup of the whole phone can include ComdKit's storage; that backup is held by Apple or on your computer, not by us. Backups you export from the app are files you control.
What our server holds
Our database and sign-in run on Supabase, hosted in the EU (Ireland). It holds:
| Data | Why | Who sees it |
|---|---|---|
| Email address, and a password stored hashed (never readable) | To sign you in and check your access | You and the ComdKit admin |
| If you sign in with Google or Apple: the email and account identifier they give us | To sign you in | You and the ComdKit admin |
| Sign-in sessions: when you signed in and last used the app, the device and browser type, and the IP address | To keep you signed in, keep accounts secure, and let the admin see which app (iPhone, Android or web) people use | The ComdKit admin |
| Name and note on an access request | So the admin can approve you | The ComdKit admin |
| Username and Zap number, and the dates you changed your username | So friends can find and add you, and your team knows who you are. The dates allow two changes a month | Anyone signed in to ComdKit who looks up your username |
| Profile picture, colour, profile background and saying | Shown on your profile and next to your name | Picture and colour: anyone who looks up your username. A photo you upload is kept, made small, in a public folder that anyone with its web address can open. Background and saying: friends. A built-in army picture is just a name, not a photo |
| Activity totals, levels, badges and rewards: minutes in a team (and after dark), distance covered in Field Kit at walking pace, and counts of pings, contact reports, voice messages, team-map marks, navigations to a target, ENDEXes, SOSes acknowledged, teams built and days you used the app | For your profile's levels, badges and rewards | You and your friends. Only running totals and the dates badges were earned: never your tracks, positions or where you were |
| When you last had the app open | To show friends whether you're online | Friends, as "online" or "offline" |
| Friends, and a private add key for your QR code | To run friends. Scanning your QR code adds you straight away; the add key in it is readable only by you | You and each friend |
| Your current team, your role and any call sign | To run teams | Your team, and the Troop Commander and Staff Sergeant above it |
| Teams you build: name, short description, picture and background | To show the team card | The team |
| Your last name, Zap number, and (only if you tick "share with my team") blood group and allergies | To fill in your team's nominal roll on the Commander's and 2IC's cards | Teams you're in |
| Team messages: text, quick messages, photos, places, map pings, timings, HIT / CAS status, SOS and voice messages | To deliver them to your team | Your team (pings, SOS and HIT / CAS status also to the Troop Commander and Staff Sergeant) |
| Command chat messages (Section Commander, 2iC, Troop Commander, Staff Sergeant) | To deliver them | Those four roles in that team |
| Reports to command (contact reports, MIST, 9-liners and other slate cards you file) | To deliver them to your Troop Commander and Staff Sergeant | You and those two people |
| Team-map marks | To show them on the team's map | Your team |
| Your live position (grid, accuracy, heading) and whether the app is open | To show you on your team's map, as online, lost or offline | Your team and the people commanding it, only while position sharing is on |
| Chats with friends: text, photos and places | To deliver them | You and that friend |
| Your phones' public encryption keys, and chat and team keys locked to your phones | For end-to-end encryption (below) | Your public keys are visible to the people you share a team or chat with. The locked keys can only be opened on your own phones |
| Count of map tiles downloaded | To keep paid map services within their limits | The ComdKit admin |
| How much ComdKit AI you've used this month (cost and number of requests, not what you asked) | To keep each person within the monthly AI allowance | The ComdKit admin |
| Feedback you send, with your email, the app version and the screen it was sent from | To fix and improve the app | The ComdKit admin |
| Reports you make: who you reported, why, your note, and a copy of the message or messages you reported | To deal with abuse and keep people safe | The ComdKit admin |
| People you've blocked | To stop them contacting you | Only you. They aren't told |
End-to-end encryption
Chats with friends, and every team built since team encryption arrived (the team screen shows a lock), are end-to-end encrypted. Each phone makes its own key pair; the private half never leaves the phone. Message text, photos, places, voice messages, positions, team-map marks and reports are locked on the sender's phone and only unlocked on the recipients' phones. Our server stores the locked version and can't read it. The one exception: if you report a message, your phone sends us a readable copy of it with the report, so we can check it.
What the server can still see: who is in each team and chat, who sent each message and when, what kind of message it is (text, photo, place, SOS and so on), when a chat message was read, and the plain lines the server writes itself (for example "joined the team", ENDEX). A few teams built before encryption arrived are not encrypted; the team screen says so.
How long we keep it
| Data | Kept for |
|---|---|
| Team messages | Until END EX, or 72 hours, whichever comes first |
| Command chat | 72 hours |
| Reports to command | 30 days |
| Team-map marks | Until a team lead clears them, or the team is deleted (not wiped by END EX) |
| Your live position | Replaced each time it updates; removed when you turn sharing off or leave the team |
| Chats with friends | Until you or your friend deletes your account. Unfriending stops new messages but keeps the chat |
| Feedback and access requests | Until you delete your account, or we no longer need them to run the test |
| Reports | Up to 12 months after they're closed, so we can spot repeated abuse. The reported person's name is removed if their account is deleted |
| Everything else on the server | While you have an account |
Health information
Your blood group and allergies are health information. They stay on your phone (for your ME and MIST cards) unless you tick Share my blood group and allergies with my team in Settings → Personal information. Ticking it is your explicit consent to share them with every team you're in, so your commander has them for the nominal roll and a casualty report. Untick it at any time to stop sharing: the next save removes them from the server. They're used for nothing else.
Location
ComdKit uses your phone's GPS to show your grid, bearing and position, and to record tracks. That stays on your phone. On iPhone, a track you start keeps recording when the phone is locked (iOS shows that the app is using your location). Your position only reaches our server when you turn on position sharing in a team, or send a place in a message.
Our lawful bases
| What | Lawful basis (UK GDPR) |
|---|---|
| Your account, sign-in, profile, friends, teams, chats, positions you share, reports and ComdKit AI | Contract: it's how we provide the app you asked to use |
| Blood group and allergies | Your explicit consent (Article 9(2)(a)), given by ticking the box. You can withdraw it at any time |
| Security, sign-in sessions, usage limits for maps and AI, and the admin's view of which app people use | Our legitimate interests in keeping ComdKit secure, within its costs, and working on each kind of phone |
| Feedback and access requests | Our legitimate interests in running the invite-only test and improving the app |
| Reports and blocks | Our legitimate interests in keeping ComdKit safe and acting on abuse |
| Anything we must keep or disclose by law | Legal obligation |
What we don't do
- No advertising, and no advertising or analytics trackers. The website and app load their fonts from comdkit.com, not Google.
- We don't sell your data or share it for marketing.
- We don't see or keep your orders or your dictation. When you use ComdKit AI, the text passes through our server to Anthropic and back; we don't store it.
- We never see or store your Battle Box (MOD) sign-in. You sign in on the MOD's own page inside the app, and that session stays between your phone and the MOD.
- We don't make automated decisions about you that have legal or similar effects.
Other services your phone talks to
Some features connect your phone directly to another service. We don't receive this data. Each has its own privacy policy.
- Maps: map tiles come from Ordnance Survey, OpenStreetMap, OpenTopoMap, Esri, Mapbox, Google and the AWS elevation tiles, depending on the map you pick. Requesting tiles tells that service which area you're looking at, and your IP address.
- Place search: the name you search for goes to Ordnance Survey or OpenStreetMap (Nominatim).
- Libraries in the web app: in a browser, the map and document libraries load from cdnjs (Cloudflare) and jsDelivr, which see your IP address. The iPhone and Android apps carry their own copies.
- Google and Apple sign-in: if you choose them, you sign in on Google's or Apple's own page, under their terms.
- Voice dictation: handled by your phone's built-in speech recognition (Apple on iPhone, Google on Android). On iPhone it runs on the device where it can.
- ComdKit AI: when you use an AI feature (sorting dictation, the DS check, reports, reading a scanned document), the text or image you ask it to work on is sent through our server to Anthropic (Claude) and the answer comes back. Anthropic processes it for us under its commercial terms, which don't allow it to train its models on this data. Nothing you send is kept on our server.
- Your own AI key (optional): if you add your own key for Claude, ChatGPT, Gemini, Mistral, Grok or OpenRouter, the text goes straight from your phone to that provider, under your own account with them, instead of through ComdKit.
- Battle Box: opens the MOD's own website. Its use is governed by the MOD.
Who processes data for us
- Supabase: database, sign-in and file storage (EU, Ireland).
- Vercel: hosts the app and this website, and keeps standard request logs (including IP addresses) for a short time.
- Anthropic: ComdKit AI.
- Resend: sends ComdKit's emails (invites and sign-in codes).
They process data only on our instructions, under data processing terms, and don't use it for their own purposes.
Where your data goes
Our database is in the EU. Vercel, Anthropic and Resend are based in the United States and may process data there (Vercel also serves pages from servers near you). Where personal data goes outside the UK, it's protected by the UK's adequacy regulations (for example the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or by the UK International Data Transfer Addendum to the providers' standard contractual clauses. Email us for a copy of the safeguards.
Who can see your data
- Your team and friends: what you share with them, as set out in the table above.
- Other ComdKit users: only your username, Zap number, picture and colour, and only if they look up your username.
- The ComdKit admin: account emails, sign-in devices, access requests, feedback and usage counts, to run the app. Not your messages.
- Our processors: as listed above.
We only disclose data to anyone else if the law requires it.
Deleting your account
In the app
Settings → Account → Delete account, then type DELETE to confirm. It happens straight away.
Without the app
Email support@comdkit.com from the email address on your account, with the subject "Delete my ComdKit account". We'll delete it within 30 days and confirm by email.
Deleting your account removes your sign-in, email, username, Zap number, profile picture, saying, activity totals, badges and rewards, card details, friends, team memberships, any teams you own (with their messages and marks), your shared position, your chats with friends (for both of you), your encryption keys, your AI usage, the messages you sent, your feedback, and your access request and invite. Nothing is kept afterwards, except where the law requires us to keep it, and short-lived request logs at Vercel. Orders and other work on your phone aren't affected: uninstall the app to remove those.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, ask us to limit how we use it, object to how we use it, or ask for the data you gave us in a format you can take elsewhere. Where we rely on your consent (blood group and allergies), you can withdraw it at any time. Email support@comdkit.com; we'll reply within a month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
All data travels over encrypted connections (HTTPS). Passwords are stored hashed. Database rules only let each person read their own data and the data of their own friends, teams and chats. Chats and new teams are end-to-end encrypted.
Cookies and storage
ComdKit doesn't use advertising or analytics cookies. The app keeps your sign-in and your work in your browser's or phone's storage so it works offline. See the cookies page for the full list.
Changes
If this policy changes, we'll update the date at the top. If a change is significant, we'll also say so in the app before it applies.