Privacy Policy

Account information — When you sign up, we collect your email address and the password you create (stored securely — we never see the plain-text version).

Property and tenant data — Information you enter about your properties (address, unit count) and your tenants (name, email, phone, lease dates, rent amount). This data belongs to you.

Payment information — When you subscribe to UnitKey Core, you enter your card details on Stripe's secure checkout page. We never see or store your card number, expiry, or CVV. Stripe handles all of that.

Usage data — We collect basic usage information such as which pages you visit and when, so we can improve the product. We do not sell this data.

Emails you send — If you use the automated rent reminder feature, we store a log of which emails were sent to which tenants and when. We use this to prevent duplicate sends.

To provide the service — Your property, tenant, and financial data is used to power your dashboard, rent tracking, maintenance requests, and expense logs.

To send automated reminders — If you enable rent reminders, we use your tenants' email addresses to send them payment due and overdue notifications on your behalf.

To process your subscription — We pass your email to Stripe to create a billing account when you upgrade to Core.

To improve UnitKey — Aggregated, anonymized usage patterns help us decide what to build next. We never analyze your tenant data for this purpose.

To contact you — We may email you about important account updates, security notices, or major product changes. We will not send you marketing emails unless you opt in.

We do not sell your data. We share it only with the third-party services that power UnitKey:

• Supabase — our database and file storage provider. Your data lives in their infrastructure. See supabase.com/privacy.
• Stripe — handles all subscription billing and payment processing. See stripe.com/privacy.
• Resend — sends transactional emails on your behalf (rent reminders, account notifications). See resend.com/privacy.

We may also disclose data if required by law or to protect the rights and safety of our users.

All data is stored in Supabase's cloud infrastructure. Your account data is protected by row-level security — meaning each user can only access their own records, enforced at the database level.

Passwords are hashed and never stored in plain text. Receipt files are stored in a private bucket and are only accessible via short-lived signed URLs generated server-side.

We use HTTPS for all data in transit. While we take reasonable precautions, no system is 100% secure — please use a strong, unique password for your account.

We retain your data for as long as your account is active. If you delete your account, all of your data — properties, tenants, expenses, maintenance records, and uploaded receipts — is permanently deleted within 30 days.

Some anonymized, aggregated data (e.g. total number of users) may be retained for analytics purposes, but it cannot be traced back to you.

You have the right to:

• Access your data — everything you've entered is visible in your dashboard at any time.
• Correct your data — you can edit any of your property, tenant, or profile information directly in the app.
• Delete your data — you can delete your account from Settings → Danger zone. This permanently removes all your data.
• Export your data — email us and we will provide a copy of your data in a machine-readable format within 30 days.

To make a privacy request, email us at privacy@unitkey.app.

UnitKey uses only essential cookies — specifically, a session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across the web.

UnitKey is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

If we make significant changes to this policy, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of UnitKey after a change means you accept the updated policy.

Questions about this policy? Email us at privacy@unitkey.app.