Privacy policy

Who this covers

Rentbase is a record-keeping app for landlords and tenants. This policy describes the information the Rentbase iOS app, website, and API handle. It was last updated on 27 October 2026.

Information you provide

When you create an account, Rentbase stores your email address and sign-in credentials with Supabase, plus the name, preferred name, and phone number you choose to add. Your role is stored so the app can tell a landlord from a tenant.

Landlords and tenants can add property and tenancy records, including addresses, rooms, rent, payments, bonds, expenses, bills, maintenance, inspections, calendar events, messages, and documents. Photos, videos, and audio are stored only when you attach them.

People who share a property can see the records their role allows. Someone who is not a participant on that property cannot see those records.

Device access

• The camera is used when you photograph a receipt, document, message, or maintenance or inspection record.
• The photo library is used when you attach an existing photo or file.
• The microphone is used when a maintenance or inspection video includes sound.
• Notifications are used when you allow alerts about messages, rent, maintenance, tenancy, and bills.

You can deny these permissions. The rest of the app still works for records that do not need a new photo, video, recording, or notification.

Notifications

When you allow notifications, Rentbase stores a push token, an installation identifier, the platform, and whether delivery is enabled. Expo and Apple deliver the alert. The token and installation identifier are removed when account deletion removes your push devices. You can deny notification permission and keep using the rest of the app.

Diagnostics

Rentbase sends diagnostic reports to Better Stack through a Sentry-compatible SDK so failures in the iOS app, website, and API can be fixed. A report can include the error type, a redacted stack trace, the app release and build, the platform and environment, and operational context such as the route, method, or failure code. It does not include access tokens, email addresses, request bodies, names of files you upload, full web addresses, text you entered, and your account identity. Personal-data collection on the SDK is turned off, and no account identity is attached. The release does not send performance traces, screenshots, or session replay. Reports are not used for advertising or to track you across other companies' apps.

Rentbase does not sell personal information and does not use it to track you across other companies' apps.

Who else processes information

• Supabase stores accounts, database records, and uploaded files.
• Vercel hosts the Rentbase website and API. Operational logs can include the route, status, and duration of a request, and the host can record a network address. Those logs are not used for advertising.
• Resend sends invitation and other transactional email and processes the address needed to deliver it.
• Better Stack receives redacted diagnostic reports from the iOS app, website, and API through a Sentry-compatible SDK.
• Expo and Apple deliver a push notification when you allow notifications.
• Apple distributes the iOS app through TestFlight or the App Store and controls its own distribution diagnostics.
• Stripe processes website subscription payments when a landlord uses billing on the website. Rentbase does not store card numbers. The iOS app does not offer in-app purchases.

A mobile subscription library is included in the iOS app but is not configured in this release. Rentbase does not use it to collect purchases or account identity while in-app purchases are off.

How long it is kept

The deletion job removes the sign-in, email, name, phone, roles, preferences, and push devices. Files that belong only to that person are removed. A file attached to a shared property record can remain with that record. Invitation email addresses tied to the account are removed or replaced. Durable invitation jobs tied to the account drop the recipient email, the invitation token, and the inviter name. An invitation email already accepted by the provider cannot be recalled and follows that provider's retention policy. Subscription links stored for the account are removed.

Property, tenancy, rent, bond, bill, maintenance, inspection, and message records that another person is allowed to see can remain. The shared history keeps a pseudonymous actor so those records stay intact. Other people see the name Deleted user, not the deleted person's email, phone, or profile name. Copies in backups are removed when the backup expires. Retention follows policy version 2026-10-27.

Your choices

You can edit your profile in the app.

Open Account → Delete account. Confirm with your password and the word DELETE. The app then shows Account deleted. That notice confirms the request was accepted. Starting deletion freezes the account immediately and signs you out. Removing the login and direct personal data finishes afterwards. There is no promised completion time.

You do not have to email support to delete an account you can sign in to with a password. If you cannot sign in, or this sign-in method cannot be confirmed with a password, email hello@rentwise.dev from the address on the account.