Privacy notice

Who holds this data

Rentolio is a private application used by the members of one or more households. The account holder who set it up — the admin — decides who has an account and what each person may do, and is the person to ask about anything held here.

What is stored about you

• Your account — name, email address, role, and the permissions granted to you. Your password is never stored: only a bcrypt hash of it, which cannot be turned back into the password.
• Contact details — a phone number, if one is added, used to send the SMS messages described below.
• Bank details — an IBAN and account holder name, if added. These are shown to the people on your property so they can pay you. They are never used to move money.
• A profile picture, if you or the admin adds one.
• Passkeys— the public half of any passkey you enrol, a counter, and a label such as “iPhone”. The private half never leaves your device, and no biometric data of any kind reaches this app: your face or fingerprint unlocks a key your device holds, and all the server sees is a signature.

What is stored about the household

• Properties — name, address, who owns and rents them, the rent, and the contract terms recorded against them, including the deposit.
• Bills — the document you upload, and the details read from it: issuer, amounts, dates, reference numbers and any notes.
• Payments — what was marked paid, when, by whom, and how much.
• Meter readings — gas, electricity and water indexes with their dates.
• Notifications — the messages generated for you, and the subscription details your browser issues if you turn on device notifications.
• Board posts — what you write on a board, your replies, and which posts you liked or disliked, all under your name and picture.
• Failed sign-in attempts — an email address and an IP address, kept for a short window so repeated guessing can be slowed down, and deleted within a day.

Who else sees it

Within the app, what you can see follows from the property you are attached to. People on one property cannot see another's bills, payments or readings. Nothing here is sold, shared for advertising, or used to build a profile of you, and there is no analytics or tracking of any kind in this app.

The community boards are the exception, and the only one.The board for your property stays within it, like everything else. The renters board and the landlords board deliberately cross households: what you post there is visible to every account in the app holding that role, along with your name, your picture and your reactions — people you may never have met and whose properties you cannot otherwise see. That is what makes them communities, but it means anything you would not want a stranger reading does not belong on one. Your own property's board, or a message outside the app, is the place for that.

The admin can read every board — both communities, and the board of any property. No board is private from them, and none is presented as though it were.

These services process data on the app's behalf in order for it to work:

• Vercel — hosting, and storage of uploaded bill documents and profile pictures.
• Neon — the database everything else is kept in.
• Google (Gemini) — reads uploaded bills to extract their details. This means the document you upload is sent to Google for processing. Do not upload documents containing information you would not want processed this way.
• Twilio — delivers SMS messages, and therefore receives the phone number and message text.
• Apple, Google or Mozilla — deliver device notifications, if you enable them, through whichever push service your browser uses.

Exchange rates are fetched from the National Bank of Romania. That request contains no personal data.

Cookies

Rentolio sets no advertising or analytics cookies. It sets three, all strictly necessary, and all readable only by the server:

• vb_session — keeps you signed in, for thirty days or until you sign out or change your password.
• vb_property — remembers which property you were looking at, for a year.
• vb_wa_challenge — a passkey challenge, valid for five minutes and discarded the moment it is used.

Your browser also stores a couple of preferences locally, such as a prompt you dismissed and whether this device has a passkey. Those never leave the device.

How long it is kept

Bills, payments and readings are kept as the household's record until someone deletes them, since their point is to be a history. Board posts are kept until you delete them; you can remove your own at any time, and the admin can remove any post. Deleting an account removes it along with its notifications and passkeys; bills it uploaded are kept and reassigned, so the property's financial history does not develop holes. Failed sign-in attempts are deleted within a day.

What you can do

You can change your own name, email, phone, bank details and picture at any time from the account page, and add or remove passkeys there. You can delete anything you have posted on a board, which removes its replies with it. To have your account deleted, or to ask what is held about you, speak to the admin of your household — they can do both.

If you are in the EU or UK, data protection law gives you rights of access, correction, erasure, restriction, objection and portability. In a private household application those are exercised by asking the admin rather than through a formal process.

Security

Passwords are hashed with bcrypt. Sessions are signed tokens in cookies your browser will not expose to scripts. Changing a password or having it reset ends every other session on the account. Sign-in attempts are rate limited. Bill documents are served only to people attached to the property they belong to, and access is re-checked on every request rather than at the moment a link was created.