Privacy Policy

Last updated: March 31, 2026

Overview

SimplyUnits ("we", "our", or "us") provides property management tools and payment processing for landlords and tenants. This policy explains what data we collect, how we use it, and your rights.

Information We Collect

Landlords: Name, email, phone (optional), business name (optional).

Tenants: Name, email, phone. Payment method details are collected and stored by Stripe — we never see or store card numbers or bank account details.

Receipt images: Photos submitted for AI expense categorization are processed by the Claude API and are not stored by Anthropic or used for training.

How We Use Your Information

  • Provide property management and payment processing services
  • Send rent reminders via SMS and email (with your consent)
  • Process payments through Stripe
  • Generate reports and tax exports for landlords
  • Improve our services through anonymized analytics (zero PII)

Third-Party Services

  • Supabase: Database and authentication (PostgreSQL, AES-256 encryption at rest)
  • Stripe: Payment processing (PCI DSS Level 1 compliant)
  • Twilio: SMS notifications (TCPA compliant opt-in/opt-out)
  • Anthropic (Claude API): Receipt scanning (inputs not used for training)
  • Analytics: Anonymous usage tracking only — no PII transmitted

SMS Communications

Tenants receive SMS reminders only after explicitly opting in by replying "YES" to an initial message. You can opt out at any time by replying "STOP". We comply with TCPA regulations.

Data Security

  • All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • Authentication tokens stored in device secure storage (iOS Keychain)
  • Row-Level Security ensures strict data isolation between accounts
  • No sensitive payment data stored on our servers

Data Retention & Deletion

Landlords can delete their account from the app settings. Accounts enter a 30-day soft delete period, then are permanently purged.

Tenants can request data deletion by emailing JCapps.contactus@gmail.com. Stripe data follows Stripe's own retention policies.

California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information. We do not sell personal information.

Children's Privacy

SimplyUnits is not directed at children under 13. We do not knowingly collect personal information from children.

Contact

For privacy questions or data requests, contact us at JCapps.contactus@gmail.com.