← Back to home
Privacy Policy
Effective date: March 31, 2026
Renter's Vault ("we", "our", or "the app") is a mobile application developed by FoundFirst LLC that helps tenants document rental property condition to protect security deposits. This privacy policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
1.1 Photos and Evidence
- Photos you capture or import within the app are stored on your device and, if you enable Google Drive sync (Pro feature), in your own Google Drive account.
- We do not store, access, or transmit your photos to any server we operate.
- Photo metadata (timestamps, GPS coordinates, file hashes) is stored locally on your device to support evidence integrity verification.
1.2 Location Data
- The app requests while-in-use location permission to attach GPS coordinates to photos as evidence metadata.
- Location data is stored only on your device (and in your Drive if sync is enabled).
- We do not collect, transmit, or share your location with any third party.
- Location access is optional. The app functions without it, but photos will lack geolocation metadata.
1.3 Camera
- The app requests camera permission for in-app photo capture.
- Photos are saved to your device and optionally to your Google Drive. They are never sent to our servers.
1.4 Google Drive Access
- If you enable Google Drive sync (Pro feature), the app uses the
drive.file OAuth scope.
- This scope limits the app to only files it creates. The app cannot read, modify, or delete any other files in your Drive.
- Your Google account credentials are handled by Google's sign-in flow. We never see or store your Google password.
- OAuth refresh tokens are stored securely on your device using Android Keystore-backed encrypted storage.
1.5 Analytics and Crash Reporting
- Firebase Analytics: We collect anonymous usage data (screen views, feature usage, app version, device type) to understand how the app is used and improve it. This data is not linked to your identity.
- Firebase Crashlytics: We collect crash logs and device information (device model, OS version, stack traces) to identify and fix bugs. Crash reports do not contain your photos, location, or personal data.
- Analytics and crash reporting are provided by Google Firebase and are subject to Google's Privacy Policy.
1.6 Purchase Information
- In-app purchases (Pro unlock, state law packs) are processed by Google Play Billing.
- We use RevenueCat to manage purchase entitlements. RevenueCat receives an anonymous app user ID and purchase receipt from Google Play, but does not receive your name, email, or other personal information.
- We do not process or store payment card information. All payment processing is handled by Google Play.
2. Data We Do Not Collect
- We do not collect your name, email address, phone number, or other personal contact information.
- We do not collect or store your photos on any server we operate.
- We do not share your photos, location data, or property information with any third party.
- We do not use advertising SDKs or sell data to advertisers.
- We do not track you across other apps or websites.
3. Where Your Data Is Stored
- On your device: Property data, photo index, metadata, and app settings are stored in a local SQLite database on your device.
- In your Google Drive: If you enable Drive sync, original photos are uploaded to a "Renter's Vault" folder in your Google Drive account. You own and control this data.
- Firebase (Google Cloud): Anonymous analytics and crash data are processed by Firebase, hosted on Google Cloud infrastructure.
- RevenueCat: Anonymous purchase entitlement data is processed by RevenueCat.
4. Data Retention and Deletion
- You control all your data. You can delete properties, photos, and all app data at any time from within the app.
- Uninstalling the app removes all locally stored data.
- Files in your Google Drive persist until you delete them from Drive. The app does not automatically delete Drive files.
- To request deletion of analytics data, contact us at the email below.
5. Children's Privacy
Renter's Vault is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it.
6. Third-Party Services
The app uses the following third-party services, each with their own privacy policies:
7. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.
8. Contact
If you have questions about this privacy policy or your data, contact us at:
FoundFirst LLC
Email: privacy@rentersvault.com