Privacy Policy
Last updated: April 27, 2026
Rental Tracker (“we”, “our”) is operated by Tamation Inc. This policy explains what information we collect when you use the Rental Tracker mobile app or web portal at www.rentaltrackerapp.com, how we use it, and the choices you have.
Quick summary: We only collect what's needed to run the app — your account, the properties and transactions you enter, and basic technical logs. We don't sell your data, share it for advertising, or use it to track you across other apps or websites.
1. Information we collect
Account information
When you register, we collect:
- Email address (used to sign in and receive transactional email)
- First and last name
- A hashed password — we never see or store your password in plain text
- Role within your tenant (Property Manager, Tenant Owner, Tenant User / Owner)
Content you create
The app stores the data you enter:
- Properties (name, address, type, currency, acquisition cost, market rates)
- Owners and their contact details that you enter
- Transactions (rent payments, expenses, security deposits, dates, categories, notes)
- Invitations you send to teammates or property owners
- Files and CSV imports you upload
This data belongs to you. We process it on your behalf so the app can show it back to you.
Technical information
Our servers automatically log:
- IP address, browser/device type, and timestamps of requests — used for security, abuse prevention, and debugging
- Sign-in events and refresh-token activity
Payment information
If you subscribe to a paid plan, payment is processed by Stripe. We do not see or store your card details. Stripe sends us back a customer ID and subscription status only.
2. How we use your information
- To provide the core app functionality — managing your properties, owners, and transactions
- To send you account-related email (verification, password reset, invitations) via Resend
- To process subscriptions via Stripe and grant access to paid features
- To respond to your support requests
- To detect and prevent abuse, fraud, or unauthorized access
- To comply with legal obligations
We do not use your data for advertising, profiling, or third-party marketing.
3. Who can see your data
Your data is scoped to your tenant — the workspace tied to your account or company. Only people you explicitly invite to your tenant can see your properties and transactions.
We do not share your data with third parties except for the service providers listed below, and only to the extent needed for them to do their job:
- Stripe — payment processing
- Resend — transactional email delivery
- Cloudflare — DNS, CDN, and DDoS protection
- Hosting provider — the cloud server running the app
We may disclose data when required by law (subpoena, court order) or to protect the rights, safety, or property of users or the public.
4. Data retention
We keep your data as long as your account is active. If you delete your account, we permanently remove your tenant data within 7 days. Some technical logs may be retained for up to 90 days for security and audit purposes, then deleted.
Backups containing your data are kept for up to 30 days for disaster recovery, then expire automatically.
5. Your rights
You can:
- Access your data — everything you've entered is visible inside the app and portal
- Update or correct your account info and content at any time inside the app
- Export your data — email [email protected] and we'll send a CSV
- Delete your account — email [email protected] from the email tied to your account; we'll wipe your tenant data within 7 days
- Withdraw consent for processing where consent is the basis — just delete your account
If you're in the EU, UK, California, or another jurisdiction with privacy laws (GDPR, UK GDPR, CCPA), you have additional rights including the right to data portability, the right to object to processing, and the right to lodge a complaint with your data protection authority.
6. Security
We use industry-standard practices to protect your data:
- HTTPS/TLS for all traffic between your device and our servers
- Passwords are hashed using a strong adaptive algorithm
- JWT-based authentication with short-lived access tokens and rotating refresh tokens
- Tenant-scoped database queries so your data is isolated from other tenants
- Regular automated backups
No system is perfectly secure. If you ever suspect your account has been compromised, change your password immediately and contact us.
7. Children
Rental Tracker is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we'll delete it.
8. International data transfers
Our servers are hosted in the European Union. If you access the app from another region, your data will be transferred to and processed in the EU. We rely on standard contractual clauses or equivalent safeguards where applicable.
9. Changes to this policy
If we make material changes to this policy, we'll update the “Last updated” date above and, where appropriate, notify you by email or inside the app. Continued use of the app after a change means you accept the updated policy.
10. Contact us
Questions about this policy or how we handle your data?
Email [email protected] — we read every message.