RentlorPrivacy Policy
Effective 20 July 2026
Rentlor is built so that your portfolio stays yours. This policy explains, in plain language, what data lives where, what our servers store, and the choices you have.
1. Your portfolio data stays on your device
Properties, tenancies, transactions, mortgages, documents and everything else you record in Rentlor are stored on your iPhone or iPad, not in our database. We cannot browse your portfolio. Deleting the app deletes this on-device data.
2. What our servers store
To secure the assistant and meter fair use, our servers keep a minimal account record when you sign in with Apple:
- Account — your Apple-provided user identifier, and (if you chose to share them) your name and email address.
- Sessions — a hashed token per signed-in device, so a stolen database record could not be replayed as a login. You can revoke a device by signing out.
- Workspace membership — the identifier and name of each workspace you register, so the assistant only ever answers you about your own workspaces.
- Usage counts — how many assistant messages you've used and their processing size, for plan limits. Not the content of your questions.
3. How the assistant handles your data
When you ask the assistant a question, the app sends that question together with the relevant slice of your records to our server, which uses Anthropic's Claude models to compose the answer. This data is processed transiently to answer that question: we do not store your questions or portfolio snapshots in our database, and our agreement with Anthropic does not permit your data to be used to train their models. You can use everything except the assistant without signing in at all.
4. What we don't do
- No advertising and no third-party trackers — in the app or on this website.
- No selling or renting of personal data, ever.
- No tracking across other companies' apps or websites.
- No passwords — sign-in is exclusively through Apple.
Payments are processed entirely by Apple; we never see your payment details.
5. Retention and deletion
Server-side account records are kept while your account is active. Signing out revokes that device's session immediately.
Delete your account from inside the app: More → Account & sign-in → Delete account. This immediately and permanently removes your account and every server-side record tied to it — your sign-in record, sessions on all devices, workspace registrations and assistant usage counts. It cannot be undone.
You can also email hello@rentlor.com from the address linked to your account and we'll action it within 30 days. Your on-device portfolio is unaffected by server-side deletion — it never left your device — and is removed by deleting the app.
6. Legal basis and your rights
We process the data above to provide the service you asked for (contract) and to keep it secure and fairly metered (legitimate interests). Depending on where you live — including under UK and EU GDPR — you may have rights to access, correct, export, restrict or delete your personal data, and to complain to your data-protection authority. Contact us and we'll help.
7. Children
Rentlor is for property owners and is not directed at children; you must be at least 18 to use it.
8. Changes
If we materially change this policy we'll give notice in the app before the change takes effect, and update the date at the top of this page.