Privacy notice

What is collected

Your name and email address when you create an account or accept an invite, and the password you choose, which is stored as a hash and never readable by anyone.

If you continue with Google, the name and email address it confirms, and which account it was, so the same one signs you in next time. Nothing else is kept, not your picture or Google's tokens.

If you are a tenant, the name your owner typed for you, the room you are in, the dates you were in it, and the deposit held.

If your owner has your email address or phone number, whichever of them they entered. Neither is checked.

The email is where your invite to set your own sign in goes, and, until you have joined, the bills your owner issues, the reminders before they fall due, a receipt for each payment and what your deposit came to, unless the owner turns bill mail off. Once you have joined they go to the address you sign in with. Nothing is sent to the phone number.

If your owner invited you, the address the invite went to, and when it was sent, accepted or cancelled.

If your owner has your home address, notes about you, or an emergency contact's name and number, those as the owner typed them. That contact is another person's data, kept and removed with yours.

Meter readings, the amounts you owe and have paid, how you paid and any reference you gave.

If you are an owner, the property name and the rules you publish at the rules link. Your sign in address gets an evening email on days with something waiting, unless you turn it off.

When you turn notifications on, the address your phone gives us to deliver them.

The notifications the app sent you, and when you read or archived each one.

If an owner removes you from a property, that property's name and the day, so the app can tell you.

A feed of what happened in the property, such as a payment recorded or a month issued, pointing at the tenant, room or bill it concerns. It holds no name of its own, so it shows what those records say now.

The problems you report for maintenance: what is wrong, where, and the details you write. What the owner notes about a request, and what a repair cost, stay with the owner.

If you attach a photo to a payment or a maintenance request, that photo, kept privately and shown only to the owner and to you.

If you add a profile picture, that picture, seen by the people in your property and kept until you remove it or delete your account.

The address your requests come from, kept briefly to stop abuse of public forms and of sign in.

If you left your email on the home page to hear about a phone app, that address and nothing else with it. Nothing is sent to it unless the app is made, and the team is told how many addresses there are, never which.

How it is used

To bill each tenant for the month, show how each number was made, record what was paid, and remind you before a bill is due. Nothing is used for advertising and nothing is sold.

How long it is kept

Account data stays until you delete your account from its settings page, or ask for it to be removed.

A tenant who has a payment on any bill, an electricity bill or a settled deposit stays with the property, with their name and contact details, as the owner's record until the owner deletes the property, even after the account is gone. A tenant the owner archives who has none of those, only unpaid rent bills at most, is deleted after thirty days, or at once if the owner chooses. If the owner removes you from a property, the property's name and the day are kept with your account, only to tell you at your next visit, until you set up a property of your own or accept a new invite.

Readings stay as long as the property does. An invite stays as long as the tenant row it was for. Sent messages are logged for thirty days, then purged. Abuse counters last a day.

Notification addresses stay until you turn notifications off or the phone stops answering. Your notifications stay in your inbox and its archive as long as your account does, and once it is deleted no screen shows them.

Maintenance requests and the activity feed stay with the property as its records. A photo stays with the payment or request it is on. A profile picture stays until you remove it or delete your account. A deletion request is kept for a year as the record that it was made and handled.

An address left on the home page to hear about the app is kept until the app ships, you ask for it to go, or a year passes.

Who can see it

The owner of the property sees everything in it. A tenant sees only their own bills, payments, deposit settlement and feed rows, and the maintenance requests they reported.

A shared charge shows how many people it was divided by, and nothing else about them. The team that runs the product sees it too, when needed. Nobody else.

Six services help run it, each under its own notice. Neon holds the database. Vercel serves the pages and counts visits without cookies or a profile. Vercel Blob holds the photos you attach, privately.

Resend delivers the product's mail: address confirmations, password resets, invites, the bills, reminders and receipts your owner sends you, and an owner's evening email. Sentry receives error reports, set up to carry no personal data. Google confirms who you are, if you continue with it.

Your rights

Under the Data Privacy Act of 2012 you can ask what is held about you, ask for it to be corrected, or ask for it to be deleted.

Use the deletion request form or write to privacy@cjjutba.dev. Requests are answered within fifteen working days.

Deleting your account removes your name, email, password, profile picture and the link to your Google account. The property keeps its bills, readings and photos as the owner's record.