Privacy Policy

What we collect

• Account data: your name, email address and a hashed password (or your Apple / Google account identifier if you sign in with them). Passwords are stored with the argon2id algorithm and never in plain text.
• Content you add: properties, appliances, meter numbers, log entries, reminders, contacts, photos and documents. This data exists so the app can do its job; we do not use it for anything else.
• Contractor reports: when a contractor submits a report through a link you send them, we store the name, trade and contact details they provide, and use them to build a work reference profile (number of documented jobs and their towns). Contractors can object to this at any time (see Contact).
• Work sheets a contractor sends you: a registered contractor can send a work sheet to your email address after doing a job for you. We store your email address, the job details and files they provide, and email you once (plus one reminder) so you can add the job to your logbook. If you decline, the files are deleted; if you tell us you do not know the contractor, we record that to prevent misuse.
• How you use Housefolio: what you told us you use it for (your own home, rentals, as an agent, as a building manager) — it only decides what we show you first. If you asked for occasional emails about new features, we record that consent; we also record when you accepted our Terms of Service and which version.
• Agent listings: if an agent starts or holds the listing of your property, we store the link between them and that one property, and we mark with their name anything they added to your logbook. They see which systems have records and what is missing — not your entries, costs or income. After a sale we keep a record of who sold the property. If you ask us to let that agent know that you are getting ready to sell, we pass on your name, email address and the phone number you give us at that moment, and nothing else. An agent's own name, office, area and phone number are published on their reference page and on the listing pages of their clients' properties only if they turn that on.
• Listing page visits: when you publish a property's listing page, we count how many times it is opened each day, so you and your agent can see whether the advertisement works. We store nothing but the daily number — no IP address, no identifier, no visitor profile. Whether a visitor is counted again the next day is decided in their own browser.
• Fingerprints for the time-stamped record: every night we compute a one-way fingerprint (SHA-256) of each log entry and attached file, combine the day's fingerprints into a single value, and have that value time-stamped by an independent time-stamping service. This lets a buyer check that an entry was not written or changed after the fact. The fingerprint cannot be turned back into your data, and the time-stamping service receives only the combined value — never an entry, a file or anything about you. When you publish or download a dossier, we also keep the dossier's fingerprint, issue date, town and entry counts, so the code printed on it can be checked.
• Technical data: push notification device tokens and standard server logs (IP address, request path, timestamp) kept for security and troubleshooting.
• Support log: so we can answer when you tell us something went wrong, we record what happened in your account — the actions you took and whether they succeeded, errors in the app or on this website, and the emails and notifications we sent you — together with the error code shown to you. It never contains what you typed into the app; email addresses are stored only in a scrambled form.

We do not use analytics or advertising trackers, in the app or on this website. We do not sell data to anyone.

One exception, for fraud prevention: our card-payment provider, Barion Payment Zrt., requires every shop to run its fraud-prevention script (the Base Barion Pixel) on every page of the website. It sends Barion technical data about your browser and device, and sets two cookies: ba_sid (the visit, 30 minutes) and ba_vid (a device identifier that includes a browser fingerprint, 1.5 years). Barion uses this only to detect fraudulent card payments. We have not switched on Barion's marketing pixel, and the app does not contain this script.

Why we process it

• To provide the service you signed up for (contract performance) — storing your logbook, sending the reminders you set up.
• To keep the service secure and working (legitimate interest) — server logs, the support log, backup copies.
• To prevent card-payment fraud (legitimate interest — ours and Barion's) — the Base Barion Pixel on this website.
• Contractor reference profiles are processed on the basis of legitimate interest; contractors may object and have their profile removed.
• Publishing a listing page, letting your agent know that you plan to sell, and emails about new features happen only when you ask for them (consent), and you can withdraw that at any time in the app.

Where your data lives

Everything stays in the European Union:

• Servers: Contabo GmbH (Germany)
• Photos and documents: Cloudflare R2, EU jurisdiction
• Email delivery: Resend, EU region
• Card payments: Barion Payment Zrt. (Hungary) — we receive the payment result, never your card details; on this website Barion also runs its fraud-prevention pixel (see above)
• Invoicing: Billingo Technologies Zrt. (Hungary) — the billing name, address, tax number and email you give when you subscribe or buy a dossier
• Sign-in and push notifications: Apple and Google process the minimum data needed for these features under their own terms.
• Time stamps: an independent RFC 3161 time-stamping service (currently freetsa.org, Germany) receives one combined fingerprint per day — no personal data.

How long we keep it

Until you delete it. Deleting your account (Settings → Delete account) permanently removes your properties, log entries, photos and documents. Encrypted backups are retained for 30 days and then disappear as well. The support log is deleted after 90 days — this also applies after you delete your account, so we can still look into a problem you reported just before. Dossier checks issued for your properties are deleted with them. The one-way fingerprints in the time-stamped record are kept: they cannot be turned back into your data, and other homes' proofs depend on them — removing one would break the check of entries that are not yours.

Your rights

Under the GDPR you can access, correct, export and delete your data, and object to processing based on legitimate interest. Export is built in (property dossier PDF and cost CSV); deletion is built in (Settings). For anything else, write to us. You can also complain to your supervisory authority (in Hungary: NAIH, naih.hu).

Contact

Data controller: Housefolio, operated by Nguyen Van Nam Tamás, sole trader, 1028 Budapest, Rákóczi utca 49/B., registration number 58040971, tax number 59988782-1-41, phone +36 30 657 0776 (Hungary).
Email: support@gethousefolio.com

Changes

If this policy changes in a way that matters, we will note it here with a new effective date and let you know in the app.