1. Who We Are
TenantAlly ("we", "us", "our") is the operator of the TenantAlly mobile application. We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, contact us at privacy@tenantally.co.uk.
2. What Personal Data We Collect
We collect the following categories of personal data when you use TenantAlly:
Account data
- Email address — used to create and authenticate your account.
- Full name — optionally provided by you in your profile, used to populate complaint letters.
Property and landlord data
- Property address — the address of your rented home, entered by you.
- Landlord or letting agent name and email address — entered by you for use in complaint letters.
Housing issue data
- Issue descriptions — text descriptions of housing problems you log, including room, category, severity, and dates.
- Contact history — records of communications you log between yourself and your landlord, including dates, methods, notes, and responses.
Photographs
- Photos — images you capture of housing issues using the in-app camera.
- GPS coordinates — the location at which a photo was taken, recorded at the time of capture if you grant location permission. Location permission is optional; photos can be taken without it.
- Timestamp — the server-verified date and time each photo was stored.
Technical data
- We do not collect device identifiers, analytics data, crash reports, or browsing behaviour. We use no third-party analytics or advertising SDKs.
3. Why We Collect This Data
All data we collect is used solely to provide the TenantAlly service to you. The specific purposes are:
- Creating and maintaining your account so you can sign in across devices.
- Storing your housing issue records, contact logs, and photographs so they are accessible to you.
- Pre-populating complaint letters with your name, address, and landlord details to save you time.
- Attaching GPS coordinates and timestamps to photographs to strengthen their evidential value.
The legal basis for processing under the UK GDPR and EU GDPR is performance of a contract (Article 6(1)(b)) — processing is necessary to provide the service you have signed up for. Where you have provided optional data such as GPS location, the legal basis is consent (Article 6(1)(a)), which you may withdraw at any time via your device settings.
4. Where Your Data Is Stored
All data — including your account details, issue records, and photographs — is stored on servers operated by Supabase Inc., our infrastructure provider. Supabase stores data in the European Union (EU West region). Supabase acts as a data processor under a Data Processing Agreement and may not use your data for any purpose other than providing the service.
Generated PDF complaint letters are created and processed locally on your device and are not transmitted to or stored on our servers unless you choose to share them externally.
5. How Long We Retain Your Data
We retain your personal data for as long as your account remains active. When you delete your account — either through the app or by emailing us — all of the following are permanently and irreversibly deleted from our servers:
- Your account and authentication credentials
- Your profile information (name, property address, landlord details)
- All housing issue records and contact logs
- All photographs and associated metadata (GPS coordinates, timestamps)
Deletion is permanent. We do not retain backups of deleted account data beyond the standard infrastructure backup window of 7 days, after which deletion is complete across all systems.
6. How We Share Your Data
We do not sell, rent, or trade your personal data to any third party. We do not use your data for advertising. We have no advertising partners and use no advertising SDKs or tracking pixels.
We share data only in the following limited circumstances:
- Supabase — as our infrastructure and storage provider, as described in Section 4. Supabase processes data only as directed by us and is contractually prohibited from using it for any other purpose.
- Legal obligation — if we are required to disclose data by law, regulation, or valid legal process, we will do so only to the extent required and will notify you where legally permitted.
7. Your Rights Under GDPR
Under the UK GDPR and EU GDPR you have the following rights regarding your personal data. To exercise any of these rights, email us at privacy@tenantally.co.uk. We will respond within 30 days.
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data. You can also update most data directly in the app.
Right to Erasure
Request deletion of your account and all associated data. See our Delete Account page for details.
Right to Portability
Request an export of your data in a structured, machine-readable format.
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances.
Right to Object
Object to processing based on legitimate interests, including any future direct marketing.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.
8. Cookies and Tracking
The TenantAlly mobile app does not use cookies. This website (tenantally.co.uk) is a static informational site and does not use cookies, analytics scripts, or any form of user tracking.
9. Children's Privacy
TenantAlly is intended for use by adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this privacy policy from time to time. Where changes are material, we will notify you within the app before they take effect. The date at the top of this page reflects when the policy was last revised. Continued use of the app after a policy update constitutes acceptance of the revised terms.
11. Contact Us
For any privacy-related queries, data requests, or concerns:
Email: privacy@tenantally.co.uk
We aim to respond to all privacy requests within 7 days and will
always respond within the 30-day statutory period.