Effective date: April 8, 2026
door.lease is built to protect renters. We treat your data the same way: your photos, reports, and personal information belong to you. We never sell your data, and we only collect what's needed to make the app work.
When you create an account, we collect your email address, name, and optionally your phone number. This is used for authentication, account recovery, and to identify you in reports and dispute letters.
You provide property addresses, lease dates, deposit amounts, landlord details, and room descriptions. This information is stored in your account and used to generate reports and manage disputes.
When you use the camera to document property conditions, photos are uploaded to secure cloud storage (Cloudflare). Photos may include metadata such as the timestamp and GPS coordinates of where and when they were taken. This metadata serves as evidence to establish when and where photos were captured.
Photos may be processed by AI services, including OpenAI and Cloudflare Workers AI, to detect damage, identify close-up needs, classify room areas, and generate condition descriptions. AI processing runs through secure API endpoints and background worker queues where needed. We do not use your photos to train AI models. Damage detection crop images may be retained in anonymized form to improve our detection accuracy.
Our app includes automatic face detection to protect privacy. When faces are detected in photos, they are blurred before the photo is stored. Face detection data (bounding box coordinates) is used only for the blurring process and is discarded immediately afterward. We do not perform facial recognition or identify individuals.
Payments are processed by Apple using In-App Purchase. We do not store credit card numbers, bank account details, or other sensitive payment credentials on our servers. Apple handles all payment data in accordance with their own privacy policy and security standards. We retain only transaction records (amount, date, product purchased) for your purchase history.
We collect crash reports and basic analytics through Firebase Crashlytics and Firebase Analytics to diagnose bugs and improve app stability. This may include device model, operating system version, and crash stack traces. We do not collect browsing history or track your activity outside the app.
If you enable push notifications, we store your device's push token to send you notifications about report completion, dispute updates, and service alerts. You can disable notifications at any time through your device settings.
If you use AI Coach voice dictation, the app accesses the microphone only while you are actively recording. The audio is sent to a secure transcription service to convert your question into text. Voice dictation is optional and is not used for room photo notes or report evidence.
We use the information we collect to:
We do not sell, rent, or trade your personal information. We share data only with the following service providers who are necessary to operate the app:
Each provider processes data only as needed to perform their specific function and is bound by their own privacy policies and data processing agreements.
Your data is stored on servers in the United States. Photos are stored on secure cloud infrastructure with global content delivery. Database records are hosted on encrypted servers within the United States.
We protect your data using:
You can view all your property data, photos, and reports within the app at any time. The Export Data feature (available in each property's menu) lets you download a complete copy of your property information as an HTML report.
You can delete individual properties and reports from within the app. Photos can be deleted before move-in is marked complete. After that, photos are locked as evidence to preserve the integrity of your documentation. To delete your entire account and all associated data, go to Settings and use the Delete Account option. Account deletion is permanent and removes all your data from our systems within 30 days.
You can change your email address in Settings. Push notifications can be disabled through your device's notification settings at any time.
GPS location is only captured when you actively take photos in the app and is used solely to timestamp evidence. The app does not track your location in the background.
door.lease is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We retain your account data and property records for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (for example, payment transaction records may be retained for tax and compliance purposes).
Anonymized damage detection training data (cropped images with no personally identifiable information) may be retained indefinitely to improve our AI detection models.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email address below.
We may update this privacy policy from time to time. If we make material changes, we will notify you through the app or by email. The "Effective date" at the top of this page indicates when the policy was last updated.
If you have questions about this privacy policy or your data, contact us at: