HomePerty Privacy Policy

Effective date: 23 October 2026

HomePerty ("the app", "we", "us", "our") is published by KingNerd (Gabriel), an independent developer based in Bucharest, Romania. Contact: hello@homeperty.com

This is HomePerty's own, complete Privacy Policy. See also the HomePerty Terms of Service.

HomePerty documents: Privacy Policy · Terms of Service · EULA · Delete Account & Data

The short version

By default, everything stays on your phone. No account and no cloud unless you choose them, and no ads inside the app, ever.
Usage analytics and advertising measurement are optional, and off until you say yes. The first time you open the app, one screen asks: Accept all turns both on, Necessary only leaves both off. If you agree, the app tells Google how it is used, and tells Google and Meta when an install came from one of our ads. Your properties, tenants, amounts and documents are never part of it. You can change your mind at any time, for each one separately, in Settings, Privacy choices.
Pro includes automatic Cloud Backup. Sign in once with Google or with Apple, and the app keeps the last few versions of your data backed up to your own private space in our Firebase (Google Cloud) project, automatically. It exists for backup, restore, moving to a new device and disaster recovery.
Pro also offers Cloud Sync, which you switch on yourself. With it on, your records, photos and documents are kept in step across your own devices through the same private space, and shared with the people you invite to your workspace. With it off, nothing is synchronised; Cloud Backup is separate and still works.
Everything in the cloud is encrypted in transit (TLS) and at rest on Google's infrastructure, and security rules make sure only your signed-in account, and anyone you have invited, can reach it. It is not end-to-end encrypted: as the operator we are technically able to read it, and we do not, except in the narrow cases set out below.
Backup files you make yourself are not encrypted. Anyone who has one can open it, so keep them somewhere private.
If you would rather your data never left your phone, simply do not sign in. The app is fully functional without an account.
We never sell your data, and your records are never used for advertising.

Data the app stores on your device

Everything you enter, meaning properties, tenants, leases, finances, documents, photos, calendar entries and notes, is stored on your device in the app's own private storage. If you never sign in, which is the default, the copy on your device is the only copy that exists, and we never receive or see it.

Two small things are kept in your phone's secure storage (the iOS Keychain, or the Android Keystore): the App Lock PIN, stored only as a one-way hash that cannot be turned back into the PIN, and your Pro licence details.

One phone, one account's data. The data on a device belongs to the first account that signs in there. If a different account later signs in on the same phone, that phone's data is not backed up, synchronised or copied into it, and the app says so.

Accounts and sign-in

An account is optional. You only need one for Cloud Backup, Cloud Sync and shared workspaces.

You can sign in with Google or with Apple, both through Firebase Authentication. Either one opens the same HomePerty account, and you can add the second provider to an account you already have, so it stays reachable from whichever phone you happen to be holding. There is no HomePerty password to create, remember or lose.

When you sign in, we receive through Firebase Authentication:

Your name, email address and profile photo, as far as the provider supplies them. Apple returns your name only the first time you authorise the app, and if you choose Hide My Email we only ever see Apple's private relay address, never your real one.
A unique account identifier (UID), used to key your cloud data so that only your account can reach it.

Signing in by itself uploads none of your app data. Backup and sync also require Pro. Signing in with Google or with Apple also means that provider processes your authentication request under its own terms. See Google's Privacy Policy and Apple's Privacy Policy.

Cloud Backup, included with Pro

When you have Pro and a connected account, the app backs your data up by itself, once a day unless you choose another interval in Settings, Cloud backup, and whenever you press Back up now. There are no backup passwords.

What is stored: compressed archives of your app data, meaning the database, your account settings, photos and documents, plus a small record for each backup holding the date, the size, the app version, the number of properties and the device model. Settings that belong to one device, such as your App Lock PIN or which account last signed in there, are never included.
Versioning: the last five backup versions are kept, and older ones are deleted automatically. You can restore any kept version from Settings, Cloud backup. Five rather than more because an archive carries every photograph, and a large portfolio's history would otherwise fill the whole allowance on its own.
How much you can store: Pro accounts have a 10 GB cloud allowance, shared by your own photographs, documents and receipts and the backup versions we keep for you. Our servers keep a running total of the space your account uses, so the allowance holds whichever device uploads. When it is reached, no further files are uploaded and no new backup versions are kept. Nothing on your device is touched or deleted, and the app keeps working normally.
Where it is hosted: Firebase Cloud Storage and Cloud Firestore for the metadata, on Google Cloud infrastructure in the European Union (europe-west1, Belgium).
Security: see How your data is protected below.
Who can reach it: you, from any device where you sign in with the same account. People you invite to a workspace never see your backups. We administer the Firebase project and can access backup files only for customer support you have asked for, for abuse prevention, or for legal compliance. Never for marketing, profiling, or anything else. Support assisted recovery is possible after we have verified that you control the account.
How long we keep it: five rolling versions while your account is active. If Pro ends, no new backups are made, but your existing cloud data is not deleted automatically: it stays in case you come back, until you delete it yourself or ask us to. If an account's Pro ended more than twelve months earlier, we may remove its cloud data after reviewing that account by hand. Your data on the device is never affected by this.
Deleting it: Settings, Account & License, Danger zone, Delete account removes every backup version, all your other cloud data and the sign-in account itself, in one action inside the app. Uninstalling the app does not delete your cloud data. Use the in-app deletion first, or email us. Full steps: Delete Your HomePerty Account & Data.

Cloud Sync, a Pro feature you switch on

Cloud Sync is separate from Cloud Backup, and it is off unless you turn it on. A Pro user can use HomePerty entirely on one phone without it.

What is stored: each of your records (properties, tenants, leases, payments, expenses, documents and the rest) as its own entry in Cloud Firestore, and your photographs and documents as files in Firebase Cloud Storage, in the same private space and the same EU region as your backups.
Your account settings travel with it, such as your currency, language, date format and how your lists are laid out, so they follow you to another phone. Settings that belong to one device, such as your App Lock PIN, never leave it.
A record that your account holds Pro, with the licence key and its dates if you redeemed one, so Pro follows your account to your other devices.
Shared workspaces: if you invite someone, we store the email address you invited so the invitation can reach them, and a record of who has joined. The people in your workspace can read your synchronised records and files, and change them if you gave them permission to. They never see your backups, your settings or your Pro record.
HomePerty on the web: if you use HomePerty in a web browser, your records are read from your account into the open page and are not saved on the computer; the browser keeps you signed in until you sign out.
Recovering your data on the web: Settings, Cloud backup, Recover my data from cloud builds one backup file of everything your account holds in the cloud. In browsers that let you choose where to save it, it is written straight into the file you chose. Other browsers prepare it in their own temporary storage for the download and remove it shortly afterwards.

The same security, retention and deletion apply as for Cloud Backup. Switching Cloud Sync off stops further synchronising; to remove what is already in the cloud, delete your account, or ask us.

Backup files you make yourself

Settings, Backup & Restore on your phone saves your data as a single `.hpbk` file, and Recover my data from cloud makes the same kind of file from what your account holds in the cloud, on your phone or, in HomePerty on the web, as a download. Data kept only on a phone and not yet synchronised is not in the cloud, so it is not in a recovered file.

It is not encrypted. It is a standard ZIP archive holding your database, your account settings and your photos and documents. Anyone who has the file can open it and read your records, so keep it somewhere private, and only send it to someone you trust.
It never contains a password, a sign-in token, your licence, your App Lock PIN or settings that belong to one device.
It is checked before it is restored. Each file carries a checksum for everything inside it, and the app refuses a backup that is damaged, has been altered, or was made by a newer version of HomePerty, before anything on your phone is changed.
It stays where you put it. A backup file leaves your device only through your phone's own share sheet, or in a browser as a file you save, to a destination you pick. We never receive it unless you send it to us.

How your data is protected

HomePerty does not use any encryption of its own. It relies on the standard protections built into iOS, Android and web browsers, and on those of the services it uses:

In transit: everything the app sends or receives travels over HTTPS/TLS.
In the cloud: Firebase Cloud Storage and Cloud Firestore encrypt all data at rest with Google-managed encryption, and server-side Firebase Security Rules restrict every read and every write to your own authenticated account and the people you have invited. Cloud data is not end-to-end encrypted.
On your device: your data sits in the app's own private storage, protected by your phone's operating system. The App Lock PIN is stored only as a one-way hash, in the iOS Keychain or the Android Keystore, together with your licence details.
Sign-in: handled by Google or Apple through Firebase Authentication. HomePerty never sees or stores a password.
Biometrics: Face ID, Touch ID and Android biometrics are checked by the operating system; HomePerty only learns whether the check succeeded.
Backup files: protected against damage and tampering by checksums, not by encryption. See Backup files you make yourself.

Data that leaves your device

Google Maps. Map tiles are requested from Google when you look at a property's map or use the location picker. Google's privacy policy applies. Address lookup uses the geocoder built into your phone's operating system, which is Apple's on iPhone and the system service on Android, so that request is your device's own and does not pass through us.
Sign-in. Only if you choose to sign in, as described above.
Cloud Backup. Only for Pro users with a connected account: the archives and metadata described above.
Cloud Sync. Only for Pro users who switch it on: the records, files and settings described above.
Licence keys. Redeeming or re-checking a Pro licence key sends the key string over HTTPS to our licensing endpoint. Nothing about you goes with it. If you are signed in, the licence is also kept with your account, as described above.
Subscriptions. If you subscribe to Pro, the purchase is handled entirely by the App Store or by Google Play. They tell the app that a subscription is active. We never see your name, card details or billing address.
Email. See the next section.
Backups and exports that you share. Backup files, PDFs, CSV and ZIP files leave the device only through your phone's own share sheet, or in a browser as a download, to a destination you pick. Backup files are not encrypted.
Usage analytics and advertising measurement. Only on a phone, and only if you said yes on the privacy screen. See the next section.

Usage analytics and advertising measurement

Both are optional and both start switched off. Nothing described in this section happens until you answer the privacy screen, and if you choose Necessary only it never happens at all. The app works exactly the same either way. HomePerty on the web does neither.

Usage analytics uses Google Analytics for Firebase. It counts how the app is used: when it is opened, how long it stays open, and whether you finished setting it up, added a first property, saved a first income or expense, or bought Pro (which plan, never the price). We use it to see where people get stuck and what to improve.
Advertising measurement lets Google (Google Ads, through Firebase) and Meta (Facebook and Instagram ads, through the Meta App Events SDK) tell us when somebody who saw or tapped one of our ads installed HomePerty and started using it, using the same events. We use it to keep paying only for ads that work. With this choice on, the phone's advertising identifier is used, and on an iPhone only if you also allow it in Apple's own prompt. If you refuse Apple's prompt, advertising measurement stays off on that iPhone.

What is sent: the name of each event and, for a few of them, one detail from a fixed list (which plan, which store, income or expense), together with what the Google and Meta software attaches by itself: an identifier for the app on your phone, the advertising identifier when you allowed it, the device model and operating system, the app version, and the country, which Google works out from your IP address. Never sent: your name, email address or account, property or tenant details, amounts, documents, photos, notes or anything else you typed.

What it is not used for: showing you ads, inside HomePerty or anywhere else. Personalised advertising and remarketing are switched off in the app for Google, and we do not build advertising audiences from it with Meta. We do not sell it.

Changing your mind: Settings, Privacy choices, at any time. Turning a choice off stops it on that phone straight away, and turning usage analytics off also clears the analytics identifier stored there. Your choices belong to the phone you made them on and do not travel with your account, so another device asks for itself. Because these events carry no name, email or account, we cannot pick out one person's events from their account; turning the choices off, or Reset app, is how to make sure nothing further is sent.

How long it is kept: Google Analytics keeps event-level data for no longer than 14 months. Meta keeps app events under its own data policy. Google and Meta may process this data outside the European Union, under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. See Google's Privacy Policy and Meta's Privacy Policy.

Email we send you

One welcome email, sent when an account is first created. It is a transactional message about your account and is sent whatever your newsletter choice is.
The HomePerty newsletter, only if you switch it on. The switch is in Settings, Account & License, under Email preferences, and you can turn it off there or from the unsubscribe link at the foot of any newsletter. Both routes work, and an unsubscribe made from an email is never quietly overwritten by the app.

Email is sent through Brevo (Sendinblue SAS, registered in France), our email provider. Brevo receives your email address and nothing else. No property data, no financial data, no workspace data and no other personal information is ever sent to it. The key that allows us to talk to Brevo is held on our server and is not in the app.

Permissions the app may ask for

Camera and photos. Photographing properties, scanning documents and receipts, and attaching pictures you already have.
Location. Only to place a property on the map and fill in its address, and only while you are using the app. It is optional and the app works without it.
Notifications. Local reminders you choose, such as rent due, lease expiry and backup status. They are generated on your device.
Face ID, Touch ID or Android biometrics. Only to unlock the app when you have switched App Lock on. Your biometric data stays inside the operating system and is never seen by HomePerty.
Tracking, on an iPhone. Apple's App Tracking Transparency prompt appears only if you turn on advertising measurement. Refusing it keeps advertising measurement off on that iPhone and changes nothing else.

HomePerty does not use the microphone and never asks for it. It does not read your contacts, your calendar or your call history.

What we do not do

HomePerty shows no ads, and contains no crash reporting service and no artificial intelligence or machine learning service. The only measurement in it is the usage analytics and advertising measurement described above, which do nothing until you say yes. We do not sell user data to anyone, and we never use your records, as opposed to those counts, for advertising.

If the app crashes, it writes a plain text log to your device. Nothing is sent anywhere unless you choose to email that file to us yourself.

Data processing and your rights (GDPR and comparable laws)

For users in the EU and EEA, the UK, and countries with comparable laws:

Controller: KingNerd (Gabriel), Bucharest, Romania, contact hello@homeperty.com, is the data controller for the account data, cloud data and email described above. For data that never leaves your device, no processing by us takes place at all.
Processors: Google Ireland Limited and Google LLC (Firebase, Google Cloud) process account data and store your cloud data on our behalf under the Google Cloud Data Processing Addendum. Data is hosted in the EU (europe-west1). Where Google transfers data internationally it relies on the EU Standard Contractual Clauses and equivalent safeguards. Sendinblue SAS, trading as Brevo, registered in France, processes your email address on our behalf for the two kinds of message described above, and is therefore also in the EU.
Measurement, only with your consent: Google Ireland Limited processes usage analytics on our behalf as Google Analytics for Firebase, and uses advertising measurement for Google Ads under the Google Ads Data Processing Terms. Meta Platforms Ireland Limited receives advertising measurement events under the Meta Business Tools Terms, and is responsible together with us for collecting them, and on its own for what it does with them afterwards.

Account name, email address, profile photo, UID
- Purpose: Operate your sign-in and key your cloud data to your account
- Legal basis: Performance of a contract, Art. 6(1)(b)
Backup archives, meaning your app content
- Purpose: Provide the automatic backup and restore service included with Pro
- Legal basis: Performance of a contract, Art. 6(1)(b)
Backup metadata: dates, sizes, app version, device model
- Purpose: Show backup status, manage versions and retention
- Legal basis: Performance of a contract, Art. 6(1)(b)
Synchronised records, photos and documents
- Purpose: Provide Cloud Sync, which you switch on
- Legal basis: Performance of a contract, Art. 6(1)(b)
Account settings
- Purpose: Let your settings follow you to your other devices
- Legal basis: Performance of a contract, Art. 6(1)(b)
Pro record: licence key, activation and expiry dates
- Purpose: Let Pro follow your account
- Legal basis: Performance of a contract, Art. 6(1)(b)
Email addresses you invite to a workspace, and who has joined
- Purpose: Deliver the invitation and run the shared workspace you set up
- Legal basis: Performance of a contract, Art. 6(1)(b); for the invited person, legitimate interest, Art. 6(1)(f)
Email address, for the welcome message
- Purpose: Tell you your account exists and how to reach support
- Legal basis: Performance of a contract, Art. 6(1)(b)
Email address, for the newsletter
- Purpose: Send product news you asked for
- Legal basis: Consent, Art. 6(1)(a), withdrawable at any time
Licence key string
- Purpose: Check a Pro entitlement
- Legal basis: Legitimate interest, Art. 6(1)(f), fraud prevention
Usage analytics: app events, app identifier, device model and system, country
- Purpose: Understand how the app is used and improve it
- Legal basis: Consent, Art. 6(1)(a), and for storing and reading the identifier on your phone, consent under the ePrivacy rules; withdrawable at any time in Settings, Privacy choices
Advertising measurement: the same events, and the advertising identifier where allowed
- Purpose: Find out which of our ads lead to installs and use, at Google and at Meta
- Legal basis: Consent, Art. 6(1)(a), and consent under the ePrivacy rules; withdrawable at any time in Settings, Privacy choices

Your rights: access, rectification, erasure, restriction, portability and objection. Most are self-service: your data is readable and exportable inside the app, which covers portability, and erasure is Settings, Account & License, Danger zone, Delete account. For anything else, email us and we will answer within 30 days. You also have the right to complain to your supervisory authority, which in Romania is ANSPDCP.

No profiling, no automated decision-making and no marketing use of your records. Your cloud data is stored and synchronised to give it back to you and to the people you share it with, and for nothing else. The usage counts described above, if you allowed them, are used only to improve the app and to measure our own ads.

Deleting your data, in short

On your device: Settings, Data & Storage, Reset app, or simply uninstall.
In the cloud, with your account: Settings, Account & License, Danger zone, Delete account, or email us. It removes your backups, your synchronised records and files, your settings, your Pro record and your workspace invitations and memberships. Uninstalling on its own does not delete the cloud copies.
Backup files you saved yourself are outside HomePerty: delete them wherever you keep them.
Usage analytics and advertising measurement: Settings, Privacy choices, turns either off on that phone at once.

Step-by-step instructions for every option, including deleting only part of your data without closing your account: Delete Your HomePerty Account & Data.

Children

HomePerty is a financial and productivity tool intended for adults, 18 and over. It is not directed at children and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy. Material changes will be reflected in the app's About screen and in the effective date above. See also the HomePerty Terms of Service for subscription and account terms.

Contact

Questions about this Privacy Policy or your data: hello@homeperty.com