Tentunit Assistant Mobile – International – Privacy Policy

Tentunit, Inc., a Delaware corporation
Effective 13 September 2026  ·  Version 2.0  ·  International edition
help.tentunit.com/privacy-policy

Tentunit, Inc. operates Tentunit Assistant, our iOS app; business.tentunit.com, our web app for property managers; and Tuni, the automated assistant in both. This policy covers all of them, along with any other Tentunit app that links to it.

It explains what we collect, why we collect it, who sees it, where it goes, and what control you have. Additional rights apply depending on where you live — see the annexes at the end.

Who this covers

Property managers and landlords. You create an account, set up a project, upload documents to the knowledge base, and receive issues raised by residents.

Residents and tenants. You join a project with an access code and chat with Tuni. You never create a Tentunit account. This policy still covers you.

Our role

Data protection law distinguishes between the party that decides why information is processed and the party that processes it on their behalf. Tentunit is both, depending on what is being processed.

For resident conversations and issue records, we act on your property manager’s behalf. They decide to deploy Tuni in your building, they decide what documents it answers from, and they receive what you report. They are responsible for that processing; we operate the tool under a written agreement with them.

We decide for ourselves how to keep the service secure, how to fix it when it breaks, how to improve how Tuni answers, and how to run our own business relationship with property managers. We are responsible for those.

What we collect

From property managers

Name, email, and phone number if you provide it. Project and building information. Documents you upload to the knowledge base, and their contents.

Payment is processed by Stripe. We never receive or store your card number.

From residents

• A device identifier, which keeps your session attached to a project without requiring an account.
• The messages you send to Tuni, including anything you choose to put in them.
• Your triage answers — issue category, description, and follow-up notes.
• The resulting issue record, once your report is resolved or escalated.

We do not ask for your name, phone number, or email address. If you type them into a message, we have them, and so does your property manager.

Automatically

IP address, used for rate limiting and abuse prevention only. Timestamps. Basic usage and error logs.

Diagnostics and analytics

When the app crashes or hits an unexpected error, a technical report goes to Sentry. Before the report leaves your device, we strip session tokens, email addresses, access codes, and device identifiers from it. What remains — the error, the call stack, app version, iOS version, device model — is not connected to you.

The app also includes Google Analytics for Firebase, which measures which screens are opened and whether actions succeed. This is off by default. It collects nothing unless you turn it on under Settings → Privacy, and turning it back off resets the measurement identifier on your device.

Analytics never captures message content, issue content, or building addresses.

What we don’t do

• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.
• We do not read your device’s advertising identifier (IDFA).
• We do not track you across other apps or websites.
• We do not collect your location. The app requests no location permission of any kind.
• We do not use your information for advertising.

Why we use information, and on what basis

Where the law requires us to identify a legal basis for processing, these are the bases we rely on.

Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms, and you can object at any time — see section 13.

Sensitive information

We do not ask for health information, immigration or residence status, religious or political views, or other sensitive details, and Tuni is not designed to collect them.

But people describe real problems in their own words, and those descriptions sometimes contain such details — damp affecting a child’s asthma, for example. Where sensitive information appears in a message, we do not use it to make decisions about you, to profile you, to infer characteristics about you, or for any purpose beyond passing your report to your property manager and operating the service.

Please avoid including sensitive details you do not want your property manager to see.

How Tuni works

Messages you send to Tuni are processed by a third-party AI service — currently Google’s Gemini API — to generate follow-up questions and attempt an answer from your property manager’s documents. We use it under commercial terms that do not permit the provider to use your content to train its models.

If we change AI providers, we will update this policy before the change takes effect.

Tuni is automated. No one at Tentunit reads your messages in the ordinary course of running the service. Your messages go to your property manager when an issue is escalated.

Automated decisions

Tuni decides which reports to answer directly and which to escalate to your property manager. That is the only automated judgment it makes.

Tuni does not make decisions about your tenancy, your lease, your eligibility for housing, or anything else affecting your housing status. Those decisions are your property manager’s, made by a person.

You can ask for a human at any point. If you want your report to reach your property manager directly without going through triage, say so in the chat and it will be escalated. You can also contact your property manager directly.

Who we share with

Your property manager, for residents, as described at the top of this policy.

Service providers who operate parts of the product for us: Google (AI processing), Vultr (application servers), Neon (database hosting), Mailgun (email delivery), Stripe (payments), Sentry (crash reporting), and Google Firebase (analytics, where enabled). They act on our instructions under written terms and may not use your information for their own purposes. We keep this list current and will post changes here before they take effect.

Where the law requires it, as described in section 12.

Where information is stored and transferred

Our application servers run on Vultr. Our primary database is hosted on AWS. Email delivery runs through Mailgun. Document storage and AI processing run on Google and AWS infrastructure.

Our infrastructure is currently located in the United States. If you use Tentunit from outside the United States, your information is transferred there and processed there.

Where information is transferred out of the European Economic Area, the United Kingdom, or another region with its own transfer rules, we rely on the safeguards recognised under that region’s law — including standard contractual clauses with our service providers, and, where the provider is certified under it, the EU–US Data Privacy Framework. You can request a copy of the safeguards we rely on by writing to us.

Before publishing this edition: confirm the Vultr region, and either put EU infrastructure in place or state plainly that all processing occurs in the United States. Confirm which providers are certified under the Data Privacy Framework and which need standard contractual clauses, and complete a transfer impact assessment for each.

How long we keep information

Your device session as a resident lasts 30 days. It ends sooner if you leave the project or your property manager revokes access.

Conversations and issue records outlast the session, so that your property manager keeps a record of what was reported. They are retained for the life of the project and deleted when a property manager purges a project’s chat history or deletes the project, which removes everything tied to it.

Property manager account information is kept while the account is open. Billing records are kept for seven years to meet tax and accounting obligations. IP and error logs are kept for 30 days.

Where you ask us to delete information and no obligation requires us to keep it, we delete it.

Legal process and government requests

We require valid legal process before disclosing personal information to law enforcement or a private party, and we push back on requests that are overbroad or improper.

Conversations in this product can become evidence in housing disputes. If we receive a subpoena or similar demand for your information, we will notify you before responding unless we are legally prohibited from doing so, so that you have an opportunity to object.

Your rights

Wherever you live, you can ask us to:

• Tell you what information we hold about you, and give you a copy.
• Correct information that is wrong or incomplete.
• Delete information we no longer need to keep.
• Restrict how we use it while a question about it is resolved.
• Send it elsewhere in a portable format, where that right applies.
• Object to processing we carry out on the basis of legitimate interests.
• Withdraw consent you have given, at any time, without affecting what we did before you withdrew it.

Property managers: email us at the address below. We verify against your account. You can also delete your account from within the app, which removes your account information and your projects.

Residents: email us at the address below. Because you don’t have a login, we verify against your device or session rather than a password. If we cannot verify that a request is really yours, we will tell you why rather than simply not responding.

Where we act on your property manager’s behalf, we will pass your request to them and support them in answering it.

We respond within one month, or within 45 days where local law allows longer. We will tell you if we need more time. We do not charge for this, and we will not treat you differently for asking.

Children

Tentunit is for adults. You must be 18 or older to use the service, and property managers agree to distribute access codes only to adults on the lease.

We do not knowingly collect personal information from children. If we learn that we have, we delete it. If you believe a child has used the service, email us at the address below.

Security

Information is encrypted in transit. Access is limited by role and logged. Payment card data never reaches our systems. Crash reports are stripped of identifying fields before they leave your device.

No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authority within the time your law requires.

Business transfers

If Tentunit is acquired, merges, or sells assets, personal information may transfer as part of that transaction. The acquiring party remains bound by this policy until it provides notice of any change, and we will notify you before your information becomes subject to a materially different policy.

Changes to this policy

We will update the effective date and version when this policy changes, and notify you in the app for material changes. Previous versions are archived and available on request.

The current version of this policy is always published at help.tentunit.com/privacy-policy. If you are reading a downloaded copy, check there for the version in force.

Annex A

If you are in the European Economic Area, the United Kingdom, or Switzerland

The following applies in addition to the policy above.

Controller and processor

For resident conversations and issue records, your property manager is the controller and Tentunit, Inc. is a processor acting on their documented instructions under a written data processing agreement. For the purposes listed as “Tentunit” in section 5, Tentunit, Inc. is the controller.

Where we operate, and our representative

Tentunit Assistant is not currently offered in the European Economic Area or the United Kingdom. Before it is, we will appoint a representative in each region as Article 27 of the GDPR and the UK GDPR require, and name them here.

Until then, you can reach us directly using the details at the end of this policy.

Before any EEA or UK launch: appoint an Article 27 representative in a member state and a separate UK representative, and replace the paragraph above with their names and addresses. This is a paid service, typically a low four-figure annual cost per region, and it must be in place before the service is offered — not after.

International transfers

Our infrastructure is in the United States, which has not received an adequacy decision of general application. Where we transfer information out of these regions we rely on standard contractual clauses approved by the European Commission and, for the UK, the International Data Transfer Addendum — and, where our provider is certified under it, the EU–US Data Privacy Framework. Write to us for a copy of the safeguards in place.

Complaints

If you are unhappy with how we have handled your information you can complain to your local supervisory authority. In the UK this is the Information Commissioner’s Office. We would appreciate the chance to address it first.

Automated decision-making

Tuni’s triage does not produce legal effects concerning you or similarly significantly affect you: every decision about your housing is made by a person at your property manager. You can request human involvement at any point, express your point of view, and contest an outcome — see section 8.

Children

Our 18+ requirement sits above the digital consent age in every member state, which ranges from 13 to 16.

Annex B

If you are in the United States

The following applies in addition to the policy above.

Categories of information

We collect, and for as long as the service has been available have collected, the categories described in section 3: identifiers, including a device identifier and, for property managers, name, email and phone; commercial information, for billing; internet and network activity, including IP address and — where enabled — usage data; and your own content, being the messages you send to Tuni and the documents property managers upload. We collect these from you directly and from your device. We use and disclose them for the purposes in section 5 and to the recipients in section 9.

Sale and sharing

We do not sell personal information and we do not share it for cross-context behavioral advertising, including as those terms are defined under California law. We have never done so. We do not knowingly sell or share the personal information of anyone under 16.

Sensitive personal information

We do not collect sensitive personal information for the purpose of inferring characteristics about you. Where it appears incidentally in a message, we use it only as described in section 6 — a use that does not trigger the right to limit.

Your rights

You may request access, a copy, correction, deletion, and information about what we collect and disclose, and you may not be discriminated against for exercising these rights. Where local law permits, you may use an authorised agent. Requests go to the address below; we verify as described in section 13, and will tell you if we cannot.

Appeals

If we decline a request and you are in a state that gives you a right of appeal, write to us again at the same address with “appeal” in the subject line. We will respond within the period your state’s law sets and, if we decline again, tell you how to contact your attorney general.

Notice of financial incentive

We offer none. We do not pay for personal information or give anything in exchange for it.

Annex C

Other regions

Where you are in a country with its own data protection law that gives you rights beyond those in this policy, those rights apply and you can exercise them through the contact address below.

Before launching in a given market, confirm whether it requires a local representative, registration with a regulator, local data storage, or its own annex. Brazil, Canada — particularly Quebec — Australia, India, South Korea and Japan each have requirements this policy does not yet address by name. China requires data localisation and a government security assessment for any export, and is not covered by this policy at all.