This Privacy Policy explains how EstateFolio [TODO: legal entity name, e.g. "EstateFolio, Inc."] ("EstateFolio," "we," "us") collects, uses, and protects information when you use the EstateFolio iOS application, the estatefolio.app website, and related services (together, the "Service").
1. Information we collect
- Account information. Email address and authentication credentials when you create an account. Passwords are hashed; we never see or store them in plain text.
- Portfolio information you provide. Properties, purchase prices, valuations, loans, tenants, transactions, documents, and CSV files you import. This is the core data the Service exists to manage.
- Bank account information (optional). If you connect a bank account, the connection is made through Plaid. We receive account balances and transaction data; we never receive or store your bank username or password. Plaid's handling of your data is governed by the Plaid End User Privacy Policy.
- Waitlist information. If you join our waitlist, we collect the email address you submit.
- Usage and device information. Basic technical data such as app version, device type, and crash logs, used to keep the Service reliable.
2. How we use information
- To provide the Service: portfolio tracking, cash-flow analysis, net-worth timelines, and document storage.
- To compute projections such as buying power, acquisition timelines, refinance scenarios, and the Portfolio Health Score.
- To generate AI-powered insights. Portfolio summaries are processed by Anthropic (our AI provider) solely to produce your insights; they are not used by us to train AI models.
- To surface market data, such as listings and rent estimates (via RentCast) and published mortgage rates (via the Federal Reserve's FRED service). Market queries are not tied to your identity.
- To communicate with you about the Service, respond to support requests, and send waitlist updates.
3. What we do not do
- We do not sell your personal information.
- We do not share your portfolio or financial data with advertisers.
- We do not use your data for purposes unrelated to operating and improving the Service.
4. Service providers
We rely on a small set of processors to operate the Service: Supabase (database, authentication, and file storage), Plaid (bank connections), Anthropic (AI insight generation), RentCast (property market data), and Formspree (waitlist form handling). Each receives only the data necessary to perform its function.
5. Security
Data is encrypted in transit (TLS) and at rest. Database access is protected by row-level security, meaning your records are technically isolated to your authenticated account. Session tokens on your device are stored in the iOS Keychain. No method of storage is 100% secure, but we design so that a breach of one layer does not expose your portfolio.
6. Data retention and deletion
We retain your data while your account is active. You may request deletion of your account and all associated data at any time by emailing hello@estatefolio.app; we will complete deletion within 30 days, except where retention is required by law. [TODO: add in-app account deletion before App Store submission — Apple requires it.]
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these rights, contact us at hello@estatefolio.app. We will not discriminate against you for exercising them.
8. Children
The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18.
9. Changes to this policy
We may update this policy as the Service evolves. Material changes will be announced in the app or by email, and the "Last updated" date above will change. Continued use of the Service after changes take effect constitutes acceptance.
10. Contact
Questions about privacy: hello@estatefolio.app
EstateFolio [TODO: entity name and mailing address]