This Privacy Policy explains how NEXTRE LLC, a Florida limited liability company ("NextRE," "we," "us," "our"), collects, uses, and protects information when you use the NextRE iOS application, the NextRE website, and related services (together, the "Service").
1. Information we collect
- Account information. Email address and authentication credentials when you create an account. Passwords are hashed; we never see or store them in plain text.
- Portfolio information you provide. Properties, purchase prices, valuations, loans, tenants, transactions, documents, and CSV files you import. This is the core data the Service exists to manage.
- Bank account information (planned future feature). The Service does not currently connect to bank accounts. If we introduce bank connections in the future, they would be made through Plaid: we would receive account balances and transaction data, and would never receive or store your bank username or password. Any such connection would be optional, clearly presented before activation, and governed additionally by the Plaid End User Privacy Policy.
- Waitlist information. If you join our waitlist, we collect the email address you submit.
- Usage and device information. Basic technical data such as app version and device type, used to keep the Service reliable. Crash reports reach us only through Apple's opt-in crash reporting system; the app does not collect them itself.
- Cookies and analytics. The Service does not use advertising cookies, cross-site tracking, or third-party analytics or attribution SDKs. The website uses only the cookies strictly necessary to function. Crash and diagnostic data is limited to what is described above. If this ever changes, we will update this policy before the change takes effect.
2. How we use information
- To provide the Service: portfolio tracking, cash-flow analysis, net-worth timelines, and document storage.
- To compute projections such as buying power, acquisition timelines, refinance scenarios, and the Portfolio Health Score.
- To generate AI-powered insights. AI insights are generated only when you request them — nothing is sent to Anthropic unless you initiate a generation. When you do, portfolio summaries are processed by Anthropic (our AI provider) solely to produce your insights. Under Anthropic's Commercial Terms of Service, data submitted through its API is not used to train Anthropic's models, and we do not use your data to train AI models.
- To surface market data, such as listings and rent estimates (via RentCast) and published mortgage rates (via the Federal Reserve's FRED service). Property imagery is provided through Apple Maps, a built-in iOS service; map requests are handled by Apple under Apple's privacy policy, and we do not send your addresses to any separate imagery provider. Market queries are not tied to your identity.
- In the future, we may produce aggregated, de-identified market research and statistics, which we may publish or license to third parties, always without revealing your individual data (see Section 3).
- To communicate with you about the Service, respond to support requests, and send waitlist updates.
Opportunity scoring. Opportunity scores are computed solely from financial inputs — listing price, market rent estimates, mortgage rates, and your own portfolio cash flow and buying power. Candidate listings are drawn from markets where you already own property. NextRE does not collect or use neighborhood demographic data, school ratings, crime statistics, or any characteristic protected under fair housing law.
3. What we do not do
- We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under California law).
- We do not share your portfolio or financial data with advertisers.
- We do not use your data for purposes unrelated to operating and improving the Service.
We may use aggregated, de-identified data — data from which you and your specific properties cannot reasonably be re-identified — to produce market research, statistics, and analysis, which we may publish or license to third parties (for example, regional lenders, insurers, or other real-estate businesses). If we do, we will apply disclosure controls, including a minimum group size before any statistic is published, so that no published figure could reveal an individual property or user. We do not currently produce or license any such data. If we do, we will maintain it only in de-identified form, will not attempt to re-identify it, and will contractually require the same of any recipient. This applies only to published market research and aggregated statistics, and the underlying comparable-market data that supports it — it does not apply to your individual portfolio, property, or opportunity records, which remain your account data under the promises in this Privacy Policy and are never included in any aggregate. This aggregated use is separate from, and does not change, the promises above: we do not sell or share your individually identifiable portfolio, property, address, or contact data.
We do not accept compensation from lenders, listing providers, or any third party to influence how properties, listings, or opportunities are ranked, scored, or recommended to you. Scores and rankings are computed from the financial methodology described in the app, and that does not change if we introduce referral or partner relationships in the future.
4. Service providers
We rely on a small set of processors to operate the Service. Each receives only the data listed:
- Supabase hosts our database, authentication, and file storage, and receives your account and portfolio data in order to store it.
- Anthropic receives portfolio summaries, generated at the time you request an insight, solely to produce that insight. Nothing is sent to Anthropic unless you initiate a generation.
- RentCast receives property addresses and market-query parameters to return listings, valuations, and rent estimates. These queries are not tied to your account identity.
- Formspree receives the email address you submit to our waitlist.
Property imagery. Map and satellite imagery of your properties and of candidate listings is displayed using Apple Maps, a built-in iOS service, from coordinates already stored in your account. Map requests are handled by Apple under Apple's privacy policy. We do not use a separate imagery processor, and no imagery vendor other than Apple receives your addresses or coordinates.
If bank connections launch in the future, Plaid would be added to this list. When we add or replace a processor, we will update this section before the new processor receives any personal information.
Business transfers. If NextRE is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will require the successor to honor the commitments in this policy or give you notice and a chance to delete your account before a materially different policy applies.
5. International data transfers
NextRE is based in the United States, and our service providers process data in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required by applicable law, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
6. Security
Data is encrypted in transit (TLS) and at rest. Database access is protected by row-level security, meaning your records are technically isolated to your authenticated account. Session tokens on your device are stored in the iOS Keychain. No method of storage is 100% secure, but we design so that a breach of one layer does not expose your portfolio.
7. Data retention and deletion
We retain your data while your account is active. Specific windows:
- Account deletion. You can permanently delete your account and all associated data at any time directly in the app: Settings → Delete Account. Deletion removes your portfolio data, documents, and login from our production systems immediately — including files you have uploaded — and from routine encrypted backups as those backups expire on their normal schedule.
- Emailed deletion requests (info@nextre.io) are completed within 30 days, except where retention is required by law.
- Crash and diagnostic reports are collected by Apple's opt-in crash reporting system and retained under Apple's own schedule; we do not operate a separate crash-log store.
- Support communications are retained as long as needed to maintain a record of the issue and its resolution.
- Waitlist emails are retained until you unsubscribe or ask us to delete them.
8. Your rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- To know the categories and specific pieces of personal information we hold about you. The categories we collect are: identifiers (email address); financial information you provide (portfolio, property, loan, and transaction data); documents you upload; and device and diagnostic information. We do not collect your device's location, and the app never requests location permission. Property addresses you enter are stored as part of your portfolio data; Apple's App Store privacy taxonomy classifies these as "coarse location." We collect no biometric or inferred-profile data.
- To correct inaccurate information.
- To request deletion.
- To receive a portable copy of your data. The app exports your portfolio value history as a CSV; a complete copy is available by request at info@nextre.io within 30 days.
- To object to or limit certain processing, including use of sensitive personal information. We use financial information you provide only to deliver the features described in Section 2 — never for advertising, profiling unrelated to the Service, or sale.
- To opt out of the "sale" or "sharing" of personal information. NextRE does not sell or share personal information (see Section 3), so there is no sale or sharing to opt out of. Where the Global Privacy Control (GPC) signal applies under your state's law, we treat it as a valid opt-out request.
To exercise any of these rights, contact us at info@nextre.io. We may need to verify your identity before completing a request — typically by confirming you are writing from your account's registered email address. If we deny a request, we will explain why in writing and describe how to appeal; appeals are reviewed by a person not involved in the original decision. We will not discriminate against you for exercising any of these rights.
For users in the European Economic Area or United Kingdom. Where GDPR or UK GDPR applies, our legal bases for processing are: performance of our contract with you (operating the Service on your data, including generating an AI insight when you request one); your consent (waitlist); our legitimate interests (securing and improving the Service, responding to support requests); and compliance with legal obligations. You also have the right to lodge a complaint with your local supervisory authority.
9. Children
The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18. If we learn we have collected personal information from a child, we will delete it.
10. Changes to this policy
We may update this policy as the Service evolves. For material changes, we will provide notice in the app or by email at least 30 days before the change takes effect, and the "Last updated" date above will change. Continued use of the Service after changes take effect constitutes acceptance.
11. Contact
Questions about privacy: info@nextre.io
NEXTRE LLC
11439 Citra Circle, Apt 205
Windermere, FL 34786