This Privacy Policy describes how Rental App ("the App", "we", "us") collects, uses, and protects information when you use this application. The App is a private tool for managing rental properties, tracking utility bills, and sending payment notifications to tenants.
The App is operated by Tomasz Bekas. For privacy-related questions, contact: tomasz.bekas@gmail.com.
Account information — when you sign in with Google we receive your name, email address, and profile photo from Google. This is used solely to identify you within the App.
Property data — addresses of rental properties you add to the App.
Utility portal credentials — usernames, passwords, and portal URLs for utility providers. These are stored encrypted at rest using Google Cloud KMS and are used exclusively to retrieve your bills automatically.
Bill data — billing records (amounts, dates, descriptions) and associated PDF documents scraped from utility portals on your behalf. Documents are stored in Google Cloud Storage in the EU (europe-central2 region).
Tenant data — first name, last name, email address, and tenancy dates that you enter for tenants of your properties. This data is used to populate payment notification emails.
Notification recipient data — email addresses you provide when sending bill notifications.
Push notification tokens — browser push notification registration tokens (FCM tokens) used to deliver alerts about newly scraped bills to your devices. These are stored per-device and removed automatically when a token becomes invalid.
When you send a bill notification, the App delivers the email through Resend, a third-party transactional email provider, from the address bills@rentalapp.pl. The Reply-To address is set to your own email so that any tenant replies go directly to you.
To deliver each message, the App transmits to Resend the recipient email addresses you chose, the message subject and body, and any attached bill PDF documents. The App does not connect to, read, or access your personal mailbox or any inbox. Email delivery is never used for advertising or profiling — only to send the notifications you explicitly request.
We do not use your data for advertising, marketing, or automated profiling.
Processing is based on:
We do not sell, rent, or share your personal data with third parties for their own purposes. Data is shared only with the following sub-processors to operate the App:
When you send a notification, the recipient email addresses, message content, and attached bill documents are transmitted to Resend to deliver the message. No recipient data is stored beyond what you entered.
Sensitive credentials (utility portal passwords) are encrypted at rest using Google Cloud KMS. The Resend API key used to send email is held in Google Secret Manager and is never exposed to client-side code. Firestore security rules enforce that each user can only access their own data and properties they have been explicitly invited to.
Under GDPR you have the right to:
To exercise any of these rights, contact tomasz.bekas@gmail.com.
The App uses Firebase Authentication session cookies to keep you signed in. No third-party advertising or analytics cookies are used. No cross-site tracking occurs.
The App is not directed at children under 16. We do not knowingly collect data from children.
We may update this policy as the App evolves. The "Last updated" date at the top of this page reflects when changes were last made. Continued use of the App after changes constitutes acceptance of the updated policy.
Questions or requests regarding this Privacy Policy: tomasz.bekas@gmail.com