Privacy Policy

1. Who this applies to

• Landlords and property managers who create an account and run a business in RentDera.
• Tenants who accept an invitation from their landlord and sign in to see their own tenancy.
• Tenants who never sign in. A landlord can keep records about a tenant without inviting them. If that's you and you have questions about what a landlord has entered, contact privacy@notils.com and we'll direct you to the right steps.

One account can be both: someone can rent from one landlord and let a property of their own, and switch between the two in the app.

2. What we collect

We collect only what the app needs to function:

• Account information — your name, email address, a password (stored only as a one-way hash, never in readable form), an optional profile picture, and the identifiers that tie your account together. If you sign in with Google, we receive your name, email address, and profile picture from Google instead of you entering them.
• A verified phone number, if you confirm one. Accepting a WhatsApp invitation asks you to confirm the number it was sent to with a 6-digit code delivered on WhatsApp; once confirmed, that number is stored on your account.
• Sign-in and security records — for each sign-in, the time, the IP address and the device it came from, used to keep your account secure. We don't use the IP address to work out where you are.
• Business details — your business's name, its default currency, and, if you add them, the contact name, phone number, and email address you want your tenants to see.
• Property and unit data — property names, addresses, unit labels, rent amounts, and currency, which landlords enter to set up their portfolio.
• Tenant information a landlord enters — a tenant's name and phone number, and optionally an ID number and an emergency contact, used to manage leases and generate dues and receipts. If a landlord invites a tenant by email, the tenant's email address too.
• Lease, due, payment, and expense records — start dates, rent and deposit amounts, recurring charges, meter readings, the payments recorded against each due (amount, date, and how it was paid, such as cash or eSewa), the receipts issued, and the expenses a landlord logs, forming the rent ledger.
• Notes and descriptions you type into the app, such as a note on a payment or a description of an expense.
• Invitations — who invited whom, to which business and role, the phone number or email address it was sent to, whether it was delivered, and whether it was accepted, declined, revoked, or expired.
• Subscription information — if you buy RentDera Pro, which plan you have, when it started, and whether it is still active (see §5, Payments).
• Payment details for your tenants, if you add them. RentDera today records only the method a payment was made by. If you add payment details for your tenants once the app supports it — a bank account, wallet ID, or payment QR code showing them where to pay — we store them and show them only to your own tenants.
• Usage and device data — product-analytics events (app opens, screens viewed, buttons used, and errors such as a request that failed) tied to your account, the app version, device type, and device identifiers used by our analytics and subscription providers. Diagnostic and crash information, if collected, is used only to find and fix bugs.
• Messages we send you — a record of each email and WhatsApp message the platform sends (verification codes, invitations, and account notices): the address or number, which message it was, and whether it was delivered.

We do not collect a tenant's payment card or bank details, and RentDera does not ask for your location, your contacts, or access to your files beyond a photo you choose as your profile picture.

3. How we use it

• To run the core features: track rent, generate dues, record payments, and produce receipts and reminders.
• To let a landlord invite a tenant, deliver that invitation by WhatsApp or email, and confirm that the person accepting it holds the phone number or email address it was sent to.
• To show tenants their own tenancy, and landlords their dashboard.
• To authenticate you, verify your email address, and keep your account secure.
• To manage RentDera Pro and the free plan's limits.
• To diagnose and fix bugs, and to understand basic app usage so we can improve it.

We do not sell your data, or a tenant's data, to anyone.

4. What landlords and tenants see of each other

A tenant who joins sees only their own tenancy: their name and phone number as the landlord recorded them; their leases (unit, property name and address, rent, due day, deposit, and dates); their dues, charges, and meter readings; the payments recorded against them; receipts already issued; and the landlord's contact details.

A tenant never sees other tenants or their units, the landlord's totals, dashboard, expenses or reports, the ID number or emergency contact the landlord recorded about them, or the landlord's private notes on a payment. A tenant cannot record or change anything.

A landlord's contact details — the name, phone number, and email address set in Settings → Business — are shown to every tenant of that business who has joined. They are optional, and the landlord chooses what to put there.

An invitation shows the person it was sent to the business's name and the name and email address of whoever sent it. The landlord sees whether it was delivered and accepted, and the name on the account that joined.

Invitation links are hosted by Notils at notils.com/i/rentdera/…. They expire after 72 hours and can be accepted only by an account holding the phone number or email address the invitation was sent to — a forwarded link is no use to anyone else.

When a landlord removes a tenant's access, or deletes the tenant's record, the tenant can no longer see anything of that business in the app. The records of the tenancy stay with the landlord's business, because they are the landlord's ledger. Receipts the tenant already downloaded or was sent stay with them.

5. Payments

Rent is never processed by RentDera. A tenant pays their landlord outside the app, through whatever method they already use (cash, bank transfer, eSewa, Khalti, and similar). The app records that a payment happened and generates a receipt — it is a ledger, not a payment processor, and it never holds anyone’s money.

Subscriptions are different. RentDera Pro is an optional paid plan for landlord accounts. It is billed by Google Play, which is the merchant and handles the transaction end to end. We never see your card number, bank details, or billing address — Google does not share them with us. What we receive is confirmation that a subscription is active, which plan it is, and when it renews or ends.

6. Who processes data on our behalf

These providers handle data only to provide their service to us, under their own security commitments. None of them may use it for their own purposes.

• Render (application hosting) and Neon (database hosting), where the app's servers and data live.
• Cloudflare, which serves this website, sits in front of our servers, and stores profile pictures. A profile picture is served from a public web address, so anyone who has that address can open the picture.
• Google, if you choose to sign in with a Google account — we send Google the sign-in token your device generated so Google can confirm your identity, and receive back your name, email address, and profile picture in return.
• Meta, through the WhatsApp Business Platform, which delivers the verification codes and invitations we send on WhatsApp. Meta receives the phone number and the message — the code, or the invitation with the inviter's and business's names and the link.
• Resend, which delivers the emails we send — verification and password-reset codes, invitations, and security notices.
• Zoho Mail, which hosts our support and privacy mailboxes, so it holds any email you send us.
• Amplitude, a product-analytics provider, which receives app-usage events and a device identifier, tied to your account, so we can understand how the app is used.
• RevenueCat, a subscription-management provider, if you subscribe to RentDera Pro. It receives your account identifier, email address and display name, a device identifier, and the purchase details Google Play reports — which plan, when it started, and whether it is still active. We use it to know whether your subscription is live; it never receives your property, tenant or payment records.
• Google Play, which processes the subscription payment itself as merchant of record and holds the payment details we never see.
• We do not share tenant or landlord data with advertisers, data brokers, or any other third party for their own purposes.

If this changes, we’ll update this policy first, with a new “last updated” date above.

7. Data retention

We keep your account and records for as long as your account is active, so your rent history stays available to you. Some things are short-lived by design:

• Verification and password-reset codes, by email or WhatsApp, are stored only in hashed form and stop working after 10 minutes.
• Invitations expire after 72 hours. We keep a record that an invitation was sent and what happened to it, so the landlord who sent it can see where it stands.

If you delete your account, we delete your data as described in our Account & Data Deletion page, except where we're required to keep certain records for a limited time to meet a legal obligation. That page also explains what you can delete yourself without deleting your account.

8. Your rights

You can review and correct the information in your account directly in the app at any time. To request a copy of your data, ask us to correct something you can't fix yourself, or delete your account or part of your data, email privacy@notils.com — see also Account & Data Deletion.

If you're a tenant, the records about your tenancy are kept by your landlord's business. You can ask your landlord to correct them, or to remove your access, at any time — and you can always write to us.

9. Security

We use industry-standard measures — encrypted connections (HTTPS), hashed passwords and codes, access controls, and scoped authentication tokens — to protect your data in transit and at rest. What a tenant may see is enforced by our servers on every request, not only by the app. No system is perfectly secure, but we take reasonable steps to protect what you share with us.

10. Children

RentDera is a tool for landlords and their tenants and is not directed at, or intended for use by, children. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

We may update this policy as the app changes. We'll update the date at the top of this page whenever we do, and for material changes, we'll let you know in the app.

12. Contact

Questions about this policy or your data: privacy@notils.com. Help with the app: support@notils.com. RentDera is made by Notils in Kathmandu, Nepal.