Darp App Privacy

Effective: June 2026

Darp (“we,” “our,” or “us”) is a personal property management application designed to help individual owners privately track their properties, units, tenants, and rental income. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your personal data. It is written to be consistent with the General Data Protection Regulation (GDPR) and other comparable global data-protection standards. By creating an account or using Darp, you agree to the practices described below.

1. Data We Collect

We collect only the minimum information required to operate the service. Specifically:

Account details. When you register manually, we collect your Name, Email address, and Password. Your password is never stored in clear text; it is hashed using industry-standard one-way cryptography before it reaches our database.
Google Sign-In. If you choose to sign in with Google, we receive your name and email address from Google to create or match your account. We do not receive your Google password and we do not request any Google permissions beyond basic profile identification.
Session data. To keep you signed in and to secure your account, we store a short authentication token and basic session metadata (issue time, device platform). No advertising identifiers are collected.

2. Apple and Facebook Sign-In (Placeholders)

The “Continue with Apple” and “Continue with Facebook” buttons visible on the sign-in screen are non-functional placeholders reserved for future development. Tapping them does not initiate any authentication flow and does not transmit, collect, or store any data on Apple, Facebook, or our own servers. These providers will be enabled only after we publish an updated Privacy Policy describing the specific data they will use.

3. Property and Estate Information

You may enter details about the properties you manage — including a property name, a manually-typed address, unit counts, tenant contact details, and rent amounts. This information is stored under your account and is visible only to you.Darp does not use your device camera and does not upload property photos. Property visuals in the app are represented exclusively by monochrome icons that you select from a fixed catalogue, so no image-upload capability is exposed for property listings.

3a. Lease Documents and File Attachments

You may voluntarily attach lease agreements or other supporting files (PDF, images, DOC/DOCX, XLS/XLSX, TXT) to the tenants you record in Darp. When you tap “Add file” on a unit’s Documents section, the app opens the operating system’s document picker so you can choose a file from your device. The selected file is transmitted to our servers only after you save it, stored under your account, and is visible only to you.When you tap “Download” on an attached document, Darp may request access to your device’s Photos / Media Library so it can save an image or PDF to your gallery, or use the Android Storage Access Framework to write to a folder you pick (typically Downloads). This access is requested contextually, only when you invoke the download action, and can be denied without affecting any other feature.Each attachment is limited to 5 MB, and a maximum of 5 files may be attached per tenant. Deleting a tenant or property also permanently removes its attached documents from our servers.

4. Financial Confidentiality

All financial figures you record in Darp — including rent amounts, estimated monthly and annual income, projected property values, expenses, and occupancy statistics — are strictly private to your account and are intended solely for your personal tracking and planning.We do not sell, rent, share, or license your financial data to any third party. We do not use it for advertising, profiling, or marketing analytics. No Darp employee, contractor, or partner reads or manually inspects individual users’ financial entries. Aggregated, fully anonymized product metrics (for example, total user count) may be used to improve the service, but never in a way that can be linked back to you.

5. Hosting and Infrastructure

User data is stored securely on managed cloud infrastructure provided by Emergent, backed by MongoDB Atlas for the primary database. Data is transmitted between your device and our servers over TLS/HTTPS, and is encrypted at rest using the standard AES-256 protocols offered by these providers. Access to production data is restricted by role-based controls and is protected by administrative audit logging.These providers act as data processors on our behalf. They do not use your data for their own purposes and are contractually bound to comparable confidentiality and security obligations.

6. Payments

Subscriptions are processed exclusively through Google Play Billing on Android. We never see or store your full card number, banking credentials, or complete billing address — the payment provider handles that information under its own privacy terms. We store only the minimum information required to verify your subscription entitlement (a purchase token and the resulting subscription tier).

7. Your Rights

Consistent with the GDPR and equivalent global standards, you have the following rights over your personal data:

Right of access. You may request a copy of the personal data we hold about you. The Settings screen provides an in-app “Export data” tool that generates a JSON archive of your account.
Right to rectification.You may correct any inaccurate information directly from within the app, or by contacting us if a correction cannot be made through the interface.
Right to erasure. You may delete your account at any time through Profile → Account Actions → Delete account. This permanently removes your properties, tenants, maintenance records, and account from our systems.
Right to object and restrict. You may object to specific processing activities or ask us to restrict them by writing to darpsupport@gmail.com.
Right to portability.The exported JSON archive is a portable, machine-readable copy of your data intended to satisfy portability requests.
Right to complain. If you believe your rights have been infringed, you may lodge a complaint with your local data-protection supervisory authority.

8. Data Retention

We retain your account and property data for as long as your account exists. When you delete your account, the associated records are permanently removed from active systems. Encrypted backups may retain residual data for a limited operational period, after which they are securely rotated.9. ChildrenDarp is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the service or to legal requirements. When we do, we will update the effective date at the top of this document and, where the changes are material, notify you in-app before they take effect.

11. Contact Us

Questions about this Privacy Policy, or requests to exercise any of the rights described above, can be sent to darpsupport@gmail.com. We aim to respond within one business day.

End of Privacy Policy