Katofli
Sign in

Privacy policy

⚠️ DRAFT. The data inventory below is accurate — it is generated from the code itself. The legal wording, however, has not been reviewed by a lawyer and must be before launch.

Who is responsible for what

For your own data as an owner — name, email, properties, finances — we are responsible.

For your tenants' data, you are responsible. You collected it, you decide what happens to it; we hold it on your behalf. If a tenant asks you to delete it, that is your call.

What we keep, why, and who sees it

WhatWhyWho sees itHow long
Name and contactTo make the app work, To get in touchSupabase (database) (EU), Resend (email) (US)While the account exists
Property, apartment, address, tenancyTo make the app workSupabase (database) (EU), OpenStreetMap (address lookup — the map itself is served by us) (EU)While the account exists
Messages, fault reports, announcementsTo make the app work, As evidence in a disputeSupabase (database) (EU), Anthropic (translation & understanding) (US)While the account exists
Photos of faults, handover and receiptsAs evidence in a disputeSupabase (database) (EU)While the account exists
Rent, deposits, expenses, common chargesFinancial tracking, Legal obligationSupabase (database) (EU)And afterwards, as long as the law requires
Contract templates, changeover listsTo make the app work, Legal obligationSupabase (database) (EU)And afterwards, as long as the law requires
Your device's notification subscriptionTo make the app workSupabase (database) (EU), Your browser's provider (varies)Until it is no longer needed
Interest in an apartmentTo get in touchSupabase (database) (EU), Resend (email) (US)While the account exists

Artificial intelligence

Message text is sent to Anthropic for translation and to produce the fault summary. It is not used to train models. Voice reports are turned into text INSIDE your device — the audio never leaves it. Anything produced by a model is marked as such inside the app.

Your rights

You can download all your data as a file, whenever you want, without asking anyone.

Deletion is not always total, and we say so openly: financial records are accounting and tax records that the law requires to be kept. We do not promise what we cannot keep.

Go to my data →

Security

Every row in the database is protected by access rules at the database level, not only in the code. Photos live in private storage and open only through a temporary one-hour link. Invitation links are stored only as a hash: if a copy of the database leaks, they are useless.

Questions about your data? Write to us from inside the app.