How we keep your data safe

1. Account isolation

Server security rules ensure one landlord cannot read another landlord’s properties, tenants, invoices, or payments. Tenants only see their own balance history. Caretakers only see properties they were assigned.

2. Companion (payment SMS detection)

• Optional and separate from the main Play Store app.
• Only looks at payment SMS from banks you turn on in Companion.
• We extract amount, sender, and reference for matching — not your personal chat history.
• Full original message text is not kept as a permanent archive on our servers.
• Background sync uses a per-device secret token. You can revoke it from Settings → My Account (Danger Zone) or rotate it by tapping Re-link inside Companion.
• Re-open Companion on a trusted phone to re-link after revoke.

3. What travels over the network

Data between your device and our servers uses encrypted HTTPS. We also send Strict-Transport-Security and a Content-Security-Policy so browsers prefer HTTPS and limit what scripts and frames can load. Passwords are handled by our authentication provider and are never stored in readable form by KodiManager.

4. Caretaker invites

Invite codes are generated with a strong random source. Only a one-way hash of the code is stored server-side; the plain code is sent once in the SMS. Failed attempts are limited and the invite can expire.

5. Your controls

• Revoke Companion sync — Settings → My Account (Danger Zone)
• Re-link / rotate token — open Companion → Background sync → Re-link
• Sync now — wake a linked Companion device
• Bank toggles — choose which banks Companion may read
• Delete account — permanently remove your data (Settings → My Account)

6. How long we keep records

Active account data (tenants, invoices, matched payments) is kept while your account is active so balances and history work correctly. Structured payment records are business records; temporary capture queues on device are cleared after successful sync. If you delete your account, we remove personal data from active systems as described in the Privacy Policy.

7. Honest limits

No online system is 100% risk-free. Protect your password, use a device lock, and revoke Companion if a phone is lost. Platform administrators may access accounts only for support, billing, and security. We do not sell your data for advertising.