This Privacy Policy explains how NEXTRE LLC, a Florida limited liability company ("NextRE," "we," "us," "our"), collects, uses, and protects information when you use the NextRE iOS application, the NextRE website, and related services (together, the "Service").
1. Information we collect
- Account information. Your email address and password when you create an account, the name on your profile, and a phone number if you choose to add one. Passwords are hashed; we never see or store them in plain text. If you turn on 2-step verification, our authentication provider stores the authenticator key it needs to check your codes.
- Portfolio information you provide. Properties and their addresses, units, purchase prices, valuations, loans, rents, leases, transactions, expenses, investment targets, documents, photos, and spreadsheets you import. This is the core data the Service exists to manage.
- Information about other people that you enter. When you record your tenants or the vendors who work on your properties, you give us their details, such as names, phone numbers, email addresses, lease dates and rent amounts. We collect this information from you, not from them. We use it only to operate your account and do not use it for any other purpose. You are responsible for having the right to share it with us. If you are a tenant or vendor and have a question about your information, contact us (Section 11).
- Device information. If you allow notifications, we store your device's push notification token so we can send notifications to that device. Face ID and Touch ID are handled by iOS: your face or fingerprint data stays on your device and is never sent to us.
- Bank account information. The Service does not connect to bank accounts and does not collect banking credentials.
- Waitlist information. If you join our waitlist, we collect the email address you submit.
- Crash reports. The app does not collect usage or diagnostic information itself. Crash reports reach us only through Apple's opt-in crash reporting system.
- Cookies and analytics. The Service does not use advertising cookies, cross-site tracking, or third-party analytics or attribution SDKs. The website uses only the cookies strictly necessary to function. Crash and diagnostic data is limited to what is described above. If this ever changes, we will update this policy before the change takes effect.
2. How we use information
- To provide the Service: portfolio tracking, cash-flow analysis, value and equity over time, and document storage.
- To compute projections such as buying power, your path to the next purchase, refinance scenarios, and how well a listing fits your targets.
- To provide optional AI features. AI features are off until you agree on the in-app consent screen, which shows what is sent before anything leaves NextRE. With your agreement, Anthropic (our AI provider) processes: spreadsheets you import; receipts, documents and repair photos you upload to be read; text you ask to have rewritten; transactions you ask to have sorted into categories; and portfolio figures (such as values, loans, cash flow and occupancy) used to write the advice on the Insights tab. Tenant names and contact details are included only if something you send contains them, and when you import a spreadsheet you can choose to remove tenant names first. Under Anthropic's Commercial Terms of Service, data submitted through its API is not used to train Anthropic's models, and we do not use your data to train AI models. You can turn AI features off at any time on the app's Who we share data with screen; after that nothing is sent to Anthropic. Advice already written stays in your account.
- To show rent estimates. If you agree in the app, we send a property's street address, its property type and, for a multifamily property, the bedroom, bathroom and square-footage figures you enter for each unit type to RentCast, which returns a rent estimate and comparable rentals. Your rents, tenants, loans and other figures are not sent. Nothing is sent until you agree, and you can turn this off at any time in Who we share data with.
- To surface market data: for-sale listings in markets where you already own property (via RentCast, queried by city and state, not tied to your identity) and published mortgage rates (via the Federal Reserve's FRED service, which receives no information about you). Property maps and address search use Apple Maps, a built-in iOS service; these requests are handled by Apple under Apple's privacy policy, and we do not send your addresses to any separate imagery provider.
- To send notifications you allow, through Apple's push notification service. Notifications about deals and rate alerts are marketing and stay off until you turn them on.
- To check a new password against known data breaches when you change it in the app (see Section 4).
- In the future, we may produce aggregated, de-identified market research and statistics, which we may publish or license to third parties, always without revealing your individual data (see Section 3).
- To communicate with you about the Service, respond to support requests, and send waitlist updates.
Opportunity scoring. Opportunity scores are computed solely from financial inputs — listing price, market rent estimates, mortgage rates, your own portfolio cash flow and buying power, and the targets you set (such as price range, property type, cap rate, cash flow and loan-to-value). Candidate listings are drawn from markets where you already own property. NextRE does not collect or use neighborhood demographic data, school ratings, crime statistics, or any characteristic protected under fair housing law.
3. What we do not do
- We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under California law).
- We do not share your portfolio or financial data with advertisers.
- We do not use your data for purposes unrelated to operating and improving the Service.
We may use aggregated, de-identified data — data from which you and your specific properties cannot reasonably be re-identified — to produce market research, statistics, and analysis, which we may publish or license to third parties (for example, regional lenders, insurers, or other real-estate businesses). If we do, we will apply disclosure controls, including a minimum group size before any statistic is published, so that no published figure could reveal an individual property or user. We do not currently produce or license any such data. If we do, we will maintain it only in de-identified form, will not attempt to re-identify it, and will contractually require the same of any recipient. This applies only to published market research and aggregated statistics, and the underlying comparable-market data that supports it — it does not apply to your individual portfolio, property, or opportunity records, which remain your account data under the promises in this Privacy Policy and are never included in any aggregate. This aggregated use is separate from, and does not change, the promises above: we do not sell or share your individually identifiable portfolio, property, address, or contact data.
We do not accept compensation from lenders, listing providers, or any third party to influence how properties, listings, or opportunities are ranked, scored, or recommended to you. Scores and rankings are computed from the financial methodology described in the app, and that does not change if we introduce referral or partner relationships in the future.
4. Service providers
We rely on a small set of processors to operate the Service. Each receives only the data listed:
- Supabase hosts our database, authentication, and file storage, and receives your account and portfolio data, including information you enter about tenants and vendors, in order to store it.
- Anthropic receives the content described in Section 2, only while you have AI features turned on, solely to produce the result you asked for. Nothing is sent to Anthropic unless you have agreed on the in-app consent screen.
- RentCast receives the property details described in Section 2, only after you agree in the app, to return rent estimates and comparable rentals; and city and state market queries, not tied to your identity, to return listings.
- Apple receives your device's push notification token and the text of each notification in order to deliver push notifications, and handles map and address-search requests made through Apple Maps.
- Have I Been Pwned (Pwned Passwords) receives the first five characters of a one-way hash of a new password when you change your password in the app, so the app can warn you if that password appears in a known breach. Your password and its full hash never leave your device.
- Formspree receives the email address you submit to our waitlist.
Property imagery. Map and satellite imagery of your properties and of candidate listings is displayed using Apple Maps, a built-in iOS service, from coordinates already stored in your account. Map requests are handled by Apple under Apple's privacy policy. We do not use a separate imagery processor, and no imagery vendor other than Apple receives your addresses or coordinates.
When we add or replace a processor, we will update this section before the new processor receives any personal information.
Business transfers. If NextRE is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will require the successor to honor the commitments in this policy or give you notice and a chance to delete your account before a materially different policy applies.
5. International data transfers
NextRE is based in the United States, and our service providers process data in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required by applicable law, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
6. Security
Data is encrypted in transit (TLS) and at rest. Database access is protected by row-level security, meaning your records are technically isolated to your authenticated account. Session tokens on your device are stored in the iOS Keychain. You can add 2-step verification with an authenticator app, which is then required at every sign-in, and you can lock the app with Face ID, Touch ID or your passcode. No method of storage is 100% secure, but we design so that a breach of one layer does not expose your portfolio.
7. Data retention and deletion
We retain your data while your account is active. Specific windows:
- Account deletion. You can delete your account at any time directly in the app: tap your initials at the top left to open Account, then tap Delete account. Deletion is scheduled: your account closes 30 days after your request, and until then you can cancel by tapping Keep my account on the same screen. When the 30 days end, we delete your account, portfolio data, information about your tenants and vendors, documents, uploaded files and photos, and login from our production systems, and from routine encrypted backups as those backups expire on their normal schedule.
- What we keep after deletion. A count of the rent-estimate and AI requests made, used for billing and usage limits, with nothing in it that identifies you or your properties; and any record we are required to keep because of a legal hold, dispute or legal obligation, kept only for as long as that requirement lasts and not used for anything else. The Delete account screen in the app lists what is kept.
- Emailed deletion requests (info@nextre.io) are completed within 30 days, except where retention is required by law.
- AI processing. Under our agreement with Anthropic, content sent for an AI feature is deleted by Anthropic within 30 days.
- Rent estimates are stored in your account so they are not requested again for about a month, and are deleted with your account.
- Crash and diagnostic reports are collected by Apple's opt-in crash reporting system and retained under Apple's own schedule; we do not operate a separate crash-log store.
- Support communications are retained as long as needed to maintain a record of the issue and its resolution.
- Waitlist emails are retained until you unsubscribe or ask us to delete them.
8. Your rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- To know the categories and specific pieces of personal information we hold about you. The categories we collect are: identifiers (email address, the name on your profile, a phone number if you add one, your account ID, and your device's push notification token); financial information you provide (portfolio, property, loan, and transaction data); documents, photos, and spreadsheets you upload; contact and lease details you enter about your tenants and vendors; and crash reports, only if you have opted in to share them through Apple. We do not collect your device's location, and the app never requests location permission. Property addresses you enter are stored as part of your portfolio data; Apple's App Store privacy taxonomy classifies these as "coarse location." We collect no biometric or inferred-profile data.
- To correct inaccurate information.
- To request deletion.
- To receive a portable copy of your data. In the app, Account › Export your data exports everything, or one part, as Excel, CSV, or a PDF report, with your document files as a ZIP if you choose. A copy is also available by request at info@nextre.io within 30 days.
- To object to or limit certain processing, including use of sensitive personal information. We use financial information you provide only to deliver the features described in Section 2 — never for advertising, profiling unrelated to the Service, or sale.
- To opt out of the "sale" or "sharing" of personal information. NextRE does not sell or share personal information (see Section 3), so there is no sale or sharing to opt out of. Where the Global Privacy Control (GPC) signal applies under your state's law, we treat it as a valid opt-out request.
To exercise any of these rights, contact us at info@nextre.io. We may need to verify your identity before completing a request — typically by confirming you are writing from your account's registered email address. If we deny a request, we will explain why in writing and describe how to appeal; appeals are reviewed by a person not involved in the original decision. We will not discriminate against you for exercising any of these rights.
For users in the European Economic Area or United Kingdom. Where GDPR or UK GDPR applies, our legal bases for processing are: performance of our contract with you (operating the Service on your data); your consent (AI features, sending property details to RentCast for rent estimates, marketing notifications, and the waitlist), which you can withdraw at any time in the app or by contacting us; our legitimate interests (securing and improving the Service, responding to support requests); and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.
9. Children
The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18. If we learn we have collected personal information from a child, we will delete it.
10. Changes to this policy
We may update this policy as the Service evolves. For material changes, we will provide notice in the app or by email at least 30 days before the change takes effect, and the "Last updated" date above will change. Continued use of the Service after changes take effect constitutes acceptance.
11. Contact
Questions about privacy: info@nextre.io
NEXTRE LLC
Florida, United States