Privacy Policy
The short version
- We collect your email address and the property details you choose to enter — nothing else about you.
- No ads, no third-party analytics, no tracking across other apps or websites. We never sell or share your data.
- Your data is locked to your account and encrypted in transit and at rest.
- If you pre-register on our website, we keep only your email and preferred platform, use them once to tell you we've launched, then delete them.
- Delete your account in the app at any time and everything goes with it.
This policy explains how Door Alpha (“Door Alpha”, “we”, “us”) handles personal data when you use the Door Alpha mobile app and the website at dooralpha.app (together, the “Service”). Door Alpha is the controller of the personal data described here.
- Information we collect
- What we don't collect
- How we use your information
- Service providers
- Where your data is stored
- How long we keep it
- Your rights and choices
- Deleting your account
- Security
- Children
- Changes to this policy
- Contact us
1. Information we collect
Information you give us
- Account details — your email address and password when you create an account, and an optional display name. Passwords are hashed by our authentication provider; we never see or store them in readable form.
- Property and financial details — anything you enter about your properties, such as addresses, purchase price and year, current value, improvements, depreciation, mortgage balance, interest rate and lender, rent, operating expenses and the name of the entity that owns each property.
- Preferences — settings such as date format and fiscal-year start.
- Messages — anything you send us when you contact support.
Pre-registration on our website
Before Door Alpha is available in the App Store and Google Play, you can pre-register on dooralpha.app. If you do, we store your email address, the platform you chose (iPhone & iPad, Android or both) and the date you signed up. We use these only to email you when Door Alpha launches on your platform. We send no other marketing, and we don't share the list with anyone. The list is stored with Supabase in Ireland (see section 5). It can't be read from the website: it can only be added to. We delete each entry after the launch email is sent, or sooner if you ask at info@dooralpha.app.
Information created when you use the Service
- Subscription status — if you subscribe, the App Store or Google Play processes your payment. We receive confirmation of which plan you hold and when it renews, via our subscription provider. We never receive your card or bank details.
- Information stored on your device — your sign-in session, display preferences (such as theme), dismissed alerts and cached public house-price data are stored locally on your device so the app works smoothly.
- Technical data — like any internet service, our providers receive your device's IP address and basic request information when the app connects to them. We don't use this to profile you.
2. What we don't collect
- We don't use advertising SDKs, third-party analytics or cross-app tracking.
- We don't access your contacts, photos, camera, microphone or precise location.
- We don't ask for bank, brokerage or credit-card login details.
- We don't sell your personal information, and we don't share it for targeted advertising.
3. How we use your information
We use your information only to:
- create and secure your account and let you sign in on your devices;
- store your properties and calculate the figures the app shows you (net worth, cash flow, depreciation, tax estimates and similar);
- provide and manage your subscription;
- answer your support requests; and
- keep the Service secure, prevent abuse and meet our legal obligations.
If you're in the UK or EU, our legal bases are: performance of a contract (providing the Service you signed up for), legitimate interests (keeping the Service secure and improving it in ways you'd expect) and legal obligation where the law requires us to keep or disclose information.
4. Service providers
We use a small number of providers to run the Service. They may only process your data on our instructions and for these purposes.
| Provider | What it does | Data involved |
|---|---|---|
| Supabase | Account sign-in and database hosting | Email, hashed password, display name, preferences, your property data |
| RevenueCat | Manages subscription status across iOS and Android | An app user identifier and your purchase and renewal history |
| Apple App Store / Google Play | Process subscription payments | Handled under Apple's or Google's own privacy policy; we never see payment details |
| Google Maps Platform | Shows your properties on a map and street-level photos of them | Property addresses or coordinates, and your device's IP address |
| RentCast | Automated property value and rent estimates, where this feature is enabled | The address of the property being estimated |
| U.S. Federal Housing Finance Agency (FHFA) | Public house-price index data | None — the app downloads a public data file |
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the business (in which case this policy would continue to apply to your data).
5. Where your data is stored
Your account and property data are stored with Supabase in a data centre in Ireland (European Union). Some providers listed above, such as RevenueCat and Google, may process data in the United States or elsewhere. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
6. How long we keep it
Pre-registration entries are kept until we send the launch email for your platform, then deleted.
We keep your account data for as long as your account is open. When you delete your account, your account, profile and properties are removed from our live database immediately. Encrypted backups are kept for a limited period for disaster recovery and are overwritten within 30 days. Records of subscription purchases are kept by Apple, Google and RevenueCat as required for tax and accounting purposes.
7. Your rights and choices
Wherever you live, you can:
- Access and export your data — the app's CPA export pack lets you download your property data as CSV or PDF at any time, or you can ask us for a copy.
- Correct your data — edit any property or setting directly in the app.
- Delete your data — see section 8.
UK and EU residents also have the right to restrict or object to processing and to data portability, and the right to complain to a data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information to infer characteristics about you.
To exercise any right, email info@dooralpha.app from the address on your account. We'll respond within 30 days and may need to verify your identity first.
8. Deleting your account
Open the app and go to Settings → Delete account. This permanently deletes your account, profile and every property you've entered. If you can't access the app, follow the steps on our account deletion page.
Deleting your account does not cancel a subscription billed by Apple or Google — cancel it in your App Store or Google Play account settings so you aren't charged again.
9. Security
Data is encrypted in transit (TLS) and at rest. Row-level security in our database ensures each account can read and change only its own records, and access to production systems is restricted. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.
10. Children
The Service is intended for adults managing real estate investments and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We'll change the effective date above and, for significant changes, let you know in the app or by email before they take effect.
12. Contact us
Questions about this policy or your data: