Privacy policy

What this app is

A private cashflow tool for a small short-term-rental business. It is used by the people who run that business and the people they invite. It is not a public service, it has no advertising, and it sells nothing.

What it stores

• Your Google account details. Signing in with Google gives the app your email address, your name and your profile picture URL. Nothing else, and no access to your Gmail, Drive or calendar.
• Property and booking data. Buildings, units, reservation dates, confirmation codes, and the guest name as it appears in an Airbnb export.
• Financial data. Airbnb payout amounts and dates, costs you enter, and — if you upload a bank export — the transactions in it, including descriptions and running balances.

Where it comes from

From you, and from files you choose to upload. The app also fetches each listing's calendar from the iCal feed URL you provide. It does not connect to Airbnb or to your bank on your behalf, and it holds no credentials for either.

Who can see it

Only people invited to your business. Data is separated per business: a member of one cannot read another's, and the app is built so that a record belonging to someone else is indistinguishable from one that does not exist.

It is not sold, rented, or shared with advertisers or data brokers. It is disclosed to third parties only where the law requires it.

How it is protected

Served over HTTPS. Calendar feed URLs are encrypted in the database, because anyone holding one can read that listing's calendar. Sign-in is delegated to Google — the app never sees or stores a password. Uploaded files are parsed and then discarded; only the parsed figures are kept.

Third parties

Hosting and the database are provided by Heroku (Salesforce), in the United States. Sign-in is provided by Google. No analytics, tracking pixels or advertising services are used, and the app sets no third-party cookies — the only cookie it sets keeps you signed in.

How long it is kept

For as long as the business uses the app. Deleting a building, unit or report deletes its data. Ask an owner of your business to remove your access, or to delete the business and everything in it, and it is gone.

Your choices

You can ask for a copy of what the app holds about you, ask for it to be corrected, or ask for it to be deleted. Revoking the app's access in your Google account settings stops it identifying you at all.

Children

This is a business tool and is not intended for anyone under 16.

Changes and contact

If this policy changes in a way that affects what is collected or who can see it, the date at the top changes too. Questions about any of it go to the owner of the business you were invited to.