Privacy Policy

1. Who we are

Domivka is run by Vladyslav Tsyndrin, an individual based in Lviv, Ukraine ("we", "us"). We are the controller of the data described in this policy, except where section 6 says otherwise. Contact: [email protected].

2. Data on your device

Properties, units, tenants, leases, charges, payments, meter readings, expenses, documents, photos, photo reports and settings are stored in the app's database on your iPhone. Without an account we don't receive any of it.

• Camera and photos. Used only when you take or attach a picture of a meter, receipt, document or room. Pictures are saved inside the app.
• Notifications. Reminders are scheduled on the device. No push server is involved.
• Face ID or passcode. The lock is checked by iOS. The app only gets a yes or no and never sees biometric data.
• Data export. A ZIP you create in Settings goes wherever you choose to share it.

3. Account

An account is optional. You sign in with Apple. We receive a unique Apple user identifier, your email address (which may be an Apple private relay address) and, if you choose to share it, your name. Our hosting provider also keeps technical logs, such as IP address and sign-in times, to protect the service.

You can delete your account in Settings → Account. Deletion removes your account, every record synced to the server and all uploaded files, and revokes the app's Sign in with Apple access. Data on your iPhone stays there until you delete the app or the data.

4. Cloud sync and backup (Pro)

With cloud sync on, your records, photos and documents are copied to our database and private file storage so you can restore them and use several devices. Every record is tied to your account, and access rules on the server let only your account read it. Files are kept in a private bucket and are never public.

5. Tenant portal (Pro)

You can send a tenant a personal link to a web page at my.domivka.site. When you create or update a link, the app uploads a summary for that lease: your name as you want the tenant to see it, the amount due, recent charges and payments, meters and the payment details you entered. The server keeps only a hash of the link's secret token, not the token itself.

A tenant who opens the link sees that summary and can tell you they have paid or send a meter reading with an optional photo. Tenants don't create an account. A link stops working when you revoke it, when it expires (after one year) or when you delete your account.

6. Data about your tenants and other people

You may enter information about other people: tenants, guarantors and contacts, such as names, phone numbers, email addresses, messenger handles, ID document details and photos. For this data you are the controller and you decide why it's processed. Make sure you have a lawful basis, tell those people about it and keep only what you need. The ID document field is optional.

When this data is synced or shared through the tenant portal, we process it only on your behalf, as your processor, to provide the service. We don't use it for anything else and never combine data about the same person across different landlords.

7. Subscriptions

Domivka Pro is sold through the App Store. Apple processes the payment, and we never see your card details. We use RevenueCat to check whether your subscription is active. It receives an anonymous app user ID, your purchase history and basic device information (such as the iOS version and the country of your App Store account).

8. Other services the app contacts

• Exchange rates. The app downloads official rates from the National Bank of Ukraine and the National Bank of Poland. The request contains only a date and a currency. Like any website, those servers see your IP address.
• Messengers and phone. When you tap call, WhatsApp, Viber, Telegram, SMS or email, the app opens that app with the text prepared. What happens next is governed by that service's own policy.
• Website hosting. This site and the tenant portal are served by Cloudflare, which processes visitors' IP addresses to deliver and protect the pages. The site doesn't use cookies or analytics.
• Crash reports. When the app crashes or hits an error, it sends a technical report to Sentry: the error, where in the code it happened, the app and iOS versions and the iPhone model. Reports contain no records, names, device name or account, and the app removes logged text and request details before sending.
• Usage statistics. The app sends anonymous events to PostHog, such as "property added", "payment marked" or "paywall shown", with the app's language, the country chosen in the app, the app version and the iPhone model. Events are tied to a random identifier created on the phone, not to your account, and contain no names, amounts, addresses or location. You can turn them off in Settings → Your data → Anonymous usage statistics.

9. Service providers

Where data leaves the European Economic Area, the transfer relies on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

10. Legal bases

• Performing our contract with you (GDPR art. 6(1)(b)): the account, sync, the tenant portal and subscriptions.
• Legitimate interests (art. 6(1)(f)): security logs, protecting the service from abuse, and crash reports and anonymous usage statistics to fix errors and improve the app.
• Legal obligations (art. 6(1)(c)): for example, tax records about purchases kept by Apple.

We also follow the Law of Ukraine "On Personal Data Protection", which provides similar grounds.

11. How long we keep data

• On your iPhone: until you delete it or the app.
• On the server: while your account exists. A record you delete in the app is marked as deleted so your other devices remove it too, and it is erased with the account. Write to us if you want a deleted record erased sooner.
• Tenant portal links: until revoked, expired or the account is deleted.
• Crash reports: up to 90 days. Usage statistics: up to two years.
• Technical logs: for a limited period set by the hosting provider.

12. Your rights

You can ask for access to your data, its correction, deletion or restriction, or a copy in a portable format, and you can object to processing. Most of this you can do yourself: edit or delete records in the app, export everything in Settings and delete the account in Settings → Account. For anything else, write to [email protected]. We reply within one month.

Tenants and other people whose data a landlord entered should contact that landlord first. We will help the landlord respond.

You can also complain to a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, the authority in your country, for example the President of the Personal Data Protection Office (UODO) in Poland.

13. Security

Connections use HTTPS. The account session is kept in the iOS Keychain. On the server, each record is readable only by its owner's account, files are private, and tenant portal links are stored as hashes. You can also lock the app with Face ID or a passcode.

14. Children

Domivka is meant for adults managing rentals and isn't directed at children under 16.

15. Changes

If we change this policy, we will update the date above. If the change is significant, we will also tell you in the app before it takes effect.

16. Contact

Vladyslav Tsyndrin, Lviv, Ukraine · [email protected]