HomePerty Privacy Policy

Effective date: 24 September 2026

HomePerty ("the app", "we", "us", "our") is published by KingNerd (Gabriel), an independent developer based in Bucharest, Romania. Contact: hello@homeperty.com

This is HomePerty's own, complete Privacy Policy. See also the HomePerty Terms of Service.

HomePerty documents: Privacy Policy · Terms of Service · EULA · Delete Account & Data

The short version

By default, everything stays on your phone. No account, no cloud, no analytics, no ads, ever.
Pro includes automatic Cloud Backup. Sign in once with Google or with Apple, and the app keeps the last few versions of your data backed up to your own private space in our Firebase (Google Cloud) project, automatically, with nothing to configure. It exists for backup, restore, moving to a new device and disaster recovery.
Pro also offers Cloud Sync, which you switch on yourself. With it on, your records, photos and documents are kept in step across your own devices through the same private space, and shared with the people you invite to your workspace. With it off, nothing is synchronised; Cloud Backup is separate and still works.
Everything in the cloud is encrypted in transit (TLS) and at rest on Google's infrastructure, and security rules make sure only your signed-in account, and anyone you have invited, can reach it. It is not end-to-end encrypted: as the operator we are technically able to read it, and we do not, except in the narrow cases set out below.
Backup files you make yourself are not encrypted. Anyone who has one can open it, so keep them somewhere private.
If you would rather your data never left your phone, simply do not sign in. The app is fully functional without an account.
We never sell your data and never use it for advertising.

Data the app stores on your device

Everything you enter, meaning properties, tenants, leases, finances, documents, photos, calendar entries and notes, is stored on your device in the app's own private storage. If you never sign in, which is the default, the copy on your device is the only copy that exists, and we never receive or see it.

Two small things are kept in your phone's secure storage (the iOS Keychain, or the Android Keystore): the App Lock PIN, stored only as a one-way hash that cannot be turned back into the PIN, and your Pro licence details.

One phone, one account's data. The data on a device belongs to the first account that signs in there. If a different account later signs in on the same phone, that phone's data is not backed up, synchronised or copied into it, and the app says so.

Accounts and sign-in

An account is optional. You only need one for Cloud Backup, Cloud Sync and shared workspaces.

You can sign in with Google or with Apple, both through Firebase Authentication. Either one opens the same HomePerty account, and you can add the second provider to an account you already have, so it stays reachable from whichever phone you happen to be holding. There is no HomePerty password to create, remember or lose.

When you sign in, we receive through Firebase Authentication:

Your name, email address and profile photo, as far as the provider supplies them. Apple returns your name only the first time you authorise the app, and if you choose Hide My Email we only ever see Apple's private relay address, never your real one.
A unique account identifier (UID), used to key your cloud data so that only your account can reach it.

Signing in by itself uploads none of your app data. Backup and sync also require Pro. Signing in with Google or with Apple also means that provider processes your authentication request under its own terms. See Google's Privacy Policy and Apple's Privacy Policy.

Cloud Backup, included with Pro

When you have Pro and a connected account, the app backs your data up automatically: after meaningful changes, when you leave the app, and at most once a day as a safety catch-up. There are no backup passwords, no buttons and no settings to maintain.

What is stored: compressed archives of your app data, meaning the database, your account settings, photos and documents, plus a small record for each backup holding the date, the size, the app version, the number of properties and the device model. Settings that belong to one device, such as your App Lock PIN or which account last signed in there, are never included.
Versioning: the last five backup versions are kept, and older ones are deleted automatically. You can restore any kept version from Settings, Cloud backup. Five rather than more because an archive carries every photograph, and a large portfolio's history would otherwise fill the whole allowance on its own.
How much you can store: Pro accounts have a 5 GB cloud allowance, measured over the photographs, documents and receipts you put there. When it is reached, no further files are uploaded. Nothing on your device is touched or deleted, and the app keeps working normally.
Where it is hosted: Firebase Cloud Storage and Cloud Firestore for the metadata, on Google Cloud infrastructure in the European Union (europe-west1, Belgium).
Security: see How your data is protected below.
Who can reach it: you, from any device where you sign in with the same account. People you invite to a workspace never see your backups. We administer the Firebase project and can access backup files only for customer support you have asked for, for abuse prevention, or for legal compliance. Never for marketing, profiling, or anything else. Support assisted recovery is possible after we have verified that you control the account.
How long we keep it: five rolling versions while your account is active. If Pro lapses, your existing cloud data is kept for twelve months in case you come back, and is then deleted permanently. Your data on the device is never affected by this.
Deleting it: Settings, Account & License, Danger zone, Delete account removes every backup version, all your other cloud data and the sign-in account itself, in one action inside the app. Uninstalling the app does not delete your cloud data. Use the in-app deletion first, or email us. Full steps: Delete Your HomePerty Account & Data.

Cloud Sync, a Pro feature you switch on

Cloud Sync is separate from Cloud Backup, and it is off unless you turn it on. A Pro user can use HomePerty entirely on one phone without it.

What is stored: each of your records (properties, tenants, leases, payments, expenses, documents and the rest) as its own entry in Cloud Firestore, and your photographs and documents as files in Firebase Cloud Storage, in the same private space and the same EU region as your backups.
Your account settings travel with it, such as your currency, language, date format and how your lists are laid out, so they follow you to another phone. Settings that belong to one device, such as your App Lock PIN, never leave it.
A record that your account holds Pro, with the licence key and its dates if you redeemed one, so Pro follows your account to your other devices.
Shared workspaces: if you invite someone, we store the email address you invited so the invitation can reach them, and a record of who has joined. The people in your workspace can read your synchronised records and files, and change them if you gave them permission to. They never see your backups, your settings or your Pro record.
HomePerty on the web: if you use HomePerty in a web browser, your records are read from your account into the open page and are not saved on the computer; the browser keeps you signed in until you sign out.

The same security, retention and deletion apply as for Cloud Backup. Switching Cloud Sync off stops further synchronising; to remove what is already in the cloud, delete your account, or ask us.

Backup files you make yourself

Settings, Backup & Restore saves your data as a single `.hpbk` file, and Recover my data from cloud makes the same kind of file from your account.

It is not encrypted. It is a standard ZIP archive holding your database, your account settings and your photos and documents. Anyone who has the file can open it and read your records, so keep it somewhere private, and only send it to someone you trust.
It never contains a password, a sign-in token, your licence, your App Lock PIN or settings that belong to one device.
It is checked before it is restored. Each file carries a checksum for everything inside it, and the app refuses a backup that is damaged, has been altered, or was made by a newer version of HomePerty, before anything on your phone is changed.
It stays where you put it. A backup file leaves your device only through your phone's own share sheet, to a destination you pick. We never receive it unless you send it to us.

How your data is protected

HomePerty does not use any encryption of its own. It relies on the standard protections built into iOS, Android and web browsers, and on those of the services it uses:

In transit: everything the app sends or receives travels over HTTPS/TLS.
In the cloud: Firebase Cloud Storage and Cloud Firestore encrypt all data at rest with Google-managed encryption, and server-side Firebase Security Rules restrict every read and every write to your own authenticated account and the people you have invited. Cloud data is not end-to-end encrypted.
On your device: your data sits in the app's own private storage, protected by your phone's operating system. The App Lock PIN is stored only as a one-way hash, in the iOS Keychain or the Android Keystore, together with your licence details.
Sign-in: handled by Google or Apple through Firebase Authentication. HomePerty never sees or stores a password.
Biometrics: Face ID, Touch ID and Android biometrics are checked by the operating system; HomePerty only learns whether the check succeeded.
Backup files: protected against damage and tampering by checksums, not by encryption. See Backup files you make yourself.

Data that leaves your device

Google Maps. Map tiles are requested from Google when you look at a property's map or use the location picker. Google's privacy policy applies. Address lookup uses the geocoder built into your phone's operating system, which is Apple's on iPhone and the system service on Android, so that request is your device's own and does not pass through us.
Sign-in. Only if you choose to sign in, as described above.
Cloud Backup. Only for Pro users with a connected account: the archives and metadata described above.
Cloud Sync. Only for Pro users who switch it on: the records, files and settings described above.
Licence keys. Redeeming or re-checking a Pro licence key sends the key string over HTTPS to our licensing endpoint. Nothing about you goes with it. If you are signed in, the licence is also kept with your account, as described above.
Subscriptions. If you subscribe to Pro, the purchase is handled entirely by the App Store or by Google Play. They tell the app that a subscription is active. We never see your name, card details or billing address.
Email. See the next section.
Backups and exports that you share. Backup files, PDFs, CSV and ZIP files leave the device only through your phone's own share sheet, to a destination you pick. Backup files are not encrypted.

Email we send you

One welcome email, sent when an account is first created. It is a transactional message about your account and is sent whatever your newsletter choice is.
The HomePerty newsletter, only if you switch it on. The switch is in Settings, Account & License, under Email preferences, and you can turn it off there or from the unsubscribe link at the foot of any newsletter. Both routes work, and an unsubscribe made from an email is never quietly overwritten by the app.

Email is sent through Brevo (Sendinblue SAS, registered in France), our email provider. Brevo receives your email address and nothing else. No property data, no financial data, no workspace data and no other personal information is ever sent to it. The key that allows us to talk to Brevo is held on our server and is not in the app.

Permissions the app may ask for

Camera and photos. Photographing properties, scanning documents and receipts, and attaching pictures you already have.
Location. Only to place a property on the map and fill in its address, and only while you are using the app. It is optional and the app works without it.
Notifications. Local reminders you choose, such as rent due, lease expiry and backup status. They are generated on your device.
Face ID, Touch ID or Android biometrics. Only to unlock the app when you have switched App Lock on. Your biometric data stays inside the operating system and is never seen by HomePerty.

HomePerty does not use the microphone and never asks for it. It does not read your contacts, your calendar or your call history.

What we do not do

HomePerty contains no advertising SDK, no analytics SDK, no tracking or attribution SDK, no crash reporting service and no artificial intelligence or machine learning service. It does not use an advertising identifier and shows no App Tracking Transparency prompt, because there is nothing to track. We do not sell user data to anyone.

If the app crashes, it writes a plain text log to your device. Nothing is sent anywhere unless you choose to email that file to us yourself.

Data processing and your rights (GDPR and comparable laws)

For users in the EU and EEA, the UK, and countries with comparable laws:

Controller: KingNerd (Gabriel), Bucharest, Romania, contact hello@homeperty.com, is the data controller for the account data, cloud data and email described above. For data that never leaves your device, no processing by us takes place at all.
Processors: Google Ireland Limited and Google LLC (Firebase, Google Cloud) process account data and store your cloud data on our behalf under the Google Cloud Data Processing Addendum. Data is hosted in the EU (europe-west1). Where Google transfers data internationally it relies on the EU Standard Contractual Clauses and equivalent safeguards. Sendinblue SAS, trading as Brevo, registered in France, processes your email address on our behalf for the two kinds of message described above, and is therefore also in the EU.

Account name, email address, profile photo, UID
- Purpose: Operate your sign-in and key your cloud data to your account
- Legal basis: Performance of a contract, Art. 6(1)(b)
Backup archives, meaning your app content
- Purpose: Provide the automatic backup and restore service included with Pro
- Legal basis: Performance of a contract, Art. 6(1)(b)
Backup metadata: dates, sizes, app version, device model
- Purpose: Show backup status, manage versions and retention
- Legal basis: Performance of a contract, Art. 6(1)(b)
Synchronised records, photos and documents
- Purpose: Provide Cloud Sync, which you switch on
- Legal basis: Performance of a contract, Art. 6(1)(b)
Account settings
- Purpose: Let your settings follow you to your other devices
- Legal basis: Performance of a contract, Art. 6(1)(b)
Pro record: licence key, activation and expiry dates
- Purpose: Let Pro follow your account
- Legal basis: Performance of a contract, Art. 6(1)(b)
Email addresses you invite to a workspace, and who has joined
- Purpose: Deliver the invitation and run the shared workspace you set up
- Legal basis: Performance of a contract, Art. 6(1)(b); for the invited person, legitimate interest, Art. 6(1)(f)
Email address, for the welcome message
- Purpose: Tell you your account exists and how to reach support
- Legal basis: Performance of a contract, Art. 6(1)(b)
Email address, for the newsletter
- Purpose: Send product news you asked for
- Legal basis: Consent, Art. 6(1)(a), withdrawable at any time
Licence key string
- Purpose: Check a Pro entitlement
- Legal basis: Legitimate interest, Art. 6(1)(f), fraud prevention

Your rights: access, rectification, erasure, restriction, portability and objection. Most are self-service: your data is readable and exportable inside the app, which covers portability, and erasure is Settings, Account & License, Danger zone, Delete account. For anything else, email us and we will answer within 30 days. You also have the right to complain to your supervisory authority, which in Romania is ANSPDCP.

No profiling, no automated decision-making and no marketing use of your records. Your cloud data is stored and synchronised to give it back to you and to the people you share it with, and for nothing else.

Deleting your data, in short

On your device: Settings, Data & Storage, Reset app, or simply uninstall.
In the cloud, with your account: Settings, Account & License, Danger zone, Delete account, or email us. It removes your backups, your synchronised records and files, your settings, your Pro record and your workspace invitations and memberships. Uninstalling on its own does not delete the cloud copies.
Backup files you saved yourself are outside HomePerty: delete them wherever you keep them.

Step-by-step instructions for every option, including deleting only part of your data without closing your account: Delete Your HomePerty Account & Data.

Children

HomePerty is a financial and productivity tool intended for adults, 18 and over. It is not directed at children and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy. Material changes will be reflected in the app's About screen and in the effective date above. See also the HomePerty Terms of Service for subscription and account terms.

Contact

Questions about this Privacy Policy or your data: hello@homeperty.com