Privacy Policy

What we collect

Your account: your phone number (which is also your username), your name, a contact email, your language, and your password — stored only as a one-way hash by our sign-in provider, never readable by us.

Telegram, if you connect it: your Telegram ID and username. We use them to confirm your phone number, to deliver messages and reminders, and to ask you to confirm sensitive changes such as a new password or deleting your account.

What you and the people you rent with enter: unit addresses and details, leases and their terms, rent, bills, payments and balances, utility contracts, utility account numbers and tariffs, meter readings, photos (of meters, inventory, bills, your profile picture), messages between landlord and tenant, and a record of actions taken in the account.

Security information: the IP address of each sign-in and session, the approximate location it implies, and the type of device or browser. We use it only to protect your account — for example, to notice a sign-in from an unusual place.

Error reports: when the app hits an error, we record which screen it was on, the error message, the app version and the platform, so we can fix it.

We do not collect your precise location, your contacts or your advertising ID, and we use no analytics or advertising tools. Photos are re-encoded on your device before upload, which removes their location data.

How we use it

To run the service: calculating bills, keeping readings and payment history, delivering the reminders your landlord sets up, and sending a reading to a utility company when someone with access to the unit asks for it.

To keep accounts and the service safe, to prevent fraud and abuse, to answer support requests, and to meet legal obligations.

We never sell your data, never use it for advertising, and never build profiles of you.

Who receives it

Other users, only as the app shows: the landlords and tenants of a tenancy see that tenancy; members of a landlord's organization see what their role allows; a homeowners' association sees the building and what each unit owes it — never who lives there or what they pay in rent.

Companies that host and run Yarmlen for us: Supabase (database, file storage and sign-in) and Cloudflare (website and network). They process data on our behalf and may store it outside Ukraine.

Telegram: messages our bot sends you. When a reading is sent to a utility company through that company's Telegram bot, the reading, the account number and, if that bot asks for one, the meter photo go to it through Telegram, from Yarmlen's own account — never yours.

Utility companies: the reading and account number that are sent to them, through their bot or their website, and the meter photo when the company's bot asks for one. Yarmlen is not affiliated with any utility company.

Authorities, when the law requires it.

How long we keep it

Your data is kept while your account exists. Meter photos are kept in full quality for 13 months, then replaced by a smaller copy where the digits are still readable. Error reports are deleted 90 days after they are handled, and the renting side of the activity record after 12 months.

When you delete your account, we delete your profile, sign-in methods, Telegram link and sessions. You have 7 days to change your mind: sign in and cancel, and nothing is lost.

Lease records are kept. A tenancy is a shared record between a landlord and a tenant. After you delete your account, the landlords you rented from keep their records of those tenancies — the agreement and its terms, your name and phone number as recorded on the lease, meter readings, bills and payment history. Only the landlords of that tenancy can see them, and they are deleted when the landlord deletes them or their account.

Security retention. We also keep your name and phone number in restricted, encrypted storage for 3 years, for security, fraud prevention and legal requests, and then delete them automatically.

We never use retained data for marketing or to contact you.

Your rights

You can see and correct your details in the app, and delete your account at any time (Profile → Security → Delete account). You can also ask us for a copy of your data, or object to how we use it, by writing to us.

If you think we have handled your data wrongly, you can complain to the Ukrainian Parliament Commissioner for Human Rights, who oversees personal data protection in Ukraine.

Security

Everything travels encrypted (HTTPS). Who may see what is checked by the database itself on every request, not only by the app's screens.

Children

Yarmlen is meant for adults. It is not intended for anyone under 18.

Changes

We will publish any change to this policy on this page with a new date, and tell you in the app before a significant change takes effect.