Deposio Privacy Policy
This policy applies to Deposio's initial United Kingdom release.
1. About Deposio
Deposio helps renters create a move-in condition report. The app does not require an account and does not upload inspection evidence to a Deposio backend or cloud evidence service in v1.
2. Information Stored On Your Device
Deposio stores the following information locally in the app's private storage:
- an internal inspection identifier, rental type, optional property address, room names, and inspection dates;
- original room and utility-meter photographs selected or captured by you;
- issue labels and optional notes added by you;
- optional gas, electricity, and water meter readings and photograph details;
- generated PDF reports and the local file information needed to manage them; and
- technical metadata needed to organise evidence, such as local file paths, image dimensions, file size, source, and capture/import time.
This evidence remains on your device unless you choose to share it. Deposio does not use it for advertising, profiling, artificial-intelligence analysis, or legal assessment.
3. Camera And Photo Library
Deposio asks for camera access only when you choose to take a photograph. The system photo picker opens only when you choose to import an image. Deposio does not request location, contacts, or microphone access and does not record audio.
Imported and captured photographs are copied into the app's private local storage so the inspection remains available inside Deposio.
4. Sharing Reports
Deposio creates PDF reports locally. A report leaves Deposio only when you choose Share or save PDF and select a destination through your device's native share sheet. The destination you choose, such as a files service, email provider, or messaging app, handles the copy under its own privacy terms. You can also choose to save or share an editable .deposio archive. The operating system copies that archive to the destination you select; Deposio does not automatically upload it.
A shared report may contain the property address, inspection dates, rental type, room names, photographs, issue labels, notes, meter evidence, and summary counts. Review the report and its destination before sharing it.
5. Purchases
Deposio offers a one-time purchase for an individual report. The current UK price is £3.99 per report; the app shows the price localised by the store and it may differ by country. A purchase unlocks the selected report identity for continued editing and repeated PDF and .deposio exports. A separate purchase is required for each additional independent report; editing the already-unlocked report does not require another payment. There is no subscription. People who previously bought Deposio's lifetime unlock continue to receive its existing app-wide access.
RevenueCat supports purchase validation and access management. To verify and reconcile Android report purchases, Deposio sends the Google Play purchase token and related store transaction identifiers to RevenueCat. RevenueCat and Apple or Google process information associated with a transaction, including the store purchase record, product and entitlement state, transaction identifiers, an anonymous RevenueCat customer identifier, and relevant app/store/platform context. To bind a payment to the correct report, Apple receives the report UUID through StoreKit's appAccountToken; Google Play receives an obfuscated SHA-256 value derived from the report UUID as its account/profile binding. These store-provided values may be part of transaction metadata handled during RevenueCat verification. Deposio stores purchase-intent and transaction-recovery records in the app's local storage, including transaction status, report binding, store transaction identifiers, and the Google Play purchase token where applicable. Deposio does not send your property address or evidence with a purchase request. RevenueCat and the app stores may retain purchase records under their own legal and operational requirements.
Deposio does not send RevenueCat or PostHog your property address, photographs, notes, meter readings, or PDF reports. The report-binding value is used for purchase routing and is not included in PostHog analytics. Deposio does not receive your payment-card details. Apple or Google processes payment under the terms and privacy policy of the store you use.
Third-party privacy information:
- RevenueCat privacy information;
- PostHog privacy information;
- Apple privacy information; and
- Google privacy information.
6. Advertising, Tracking, And Analytics
In production builds, Deposio sends a limited set of anonymous product-interaction events to its PostHog project: app opened, inspection started or completed, report preview viewed, paywall viewed, purchase started or completed, PDF generated, the native PDF share sheet invoked, the native review-request API called, and the native share sheet opened to share Deposio. These events describe only that an action was invoked; they do not say that a review prompt was displayed, a rating was submitted, or a shared link was received or opened. Events include the event name, event time, and app platform. The PostHog SDK supplies an anonymous installation identifier and technical SDK/session context. To deliver event requests, PostHog's server also receives the connection's IP address and request metadata; Deposio disables IP-based GeoIP enrichment and does not use the IP address to infer your location. Deposio does not create accounts or person profiles for analytics. Analytics is disabled when its explicit enable flag, project key, or host is missing. Internal diagnostic builds may enable privacy-safe purchase or performance timing diagnostics; these diagnostics are disabled in the production build and do not include purchase tokens, report UUIDs, order IDs, or evidence contents.
These events do not contain property addresses, room names entered by renters, notes, issue descriptions, meter readings, photo paths or files, report contents or identifiers, contact details, purchase receipts, transaction tokens, or order IDs. Photographs and tenancy evidence stay in Deposio's local app storage and are not uploaded to PostHog. A PDF or .deposio archive leaves the device only when you choose a destination, as described above. Deposio does not use an advertising or attribution SDK, cross-app advertising tracking, session replay, screen recording, crash/error monitoring, automatic screen tracking, or interaction autocapture. RevenueCat's separate purchase processing is described in section 5.
PostHog processes the events for Deposio according to the project host and retention settings configured by the operator. The analytics project must be configured before collection is enabled in a production build.
7. Retention And Deletion
Reports, original photographs, and generated PDFs are stored locally in Deposio. A .deposio archive contains the selected report data and original evidence needed to move or back up that report; it may also carry a portable access marker for that report only. Imports are processed locally and do not upload evidence to Deposio. Anyone with a saved or shared archive may be able to view its contents, so choose its destination carefully.
Local report content, photographs, and generated PDFs remain in Deposio until you delete the report, clear the app's data, or uninstall the app. Deleting a report removes its report content, locally stored evidence, and generated PDF. Purchase-intent, access, and transaction-recovery records may remain in the app's private local storage after report content is deleted, including the report binding and store transaction identifiers or Google Play purchase token, to preserve purchase history and prevent transaction reuse. Clearing app data or uninstalling removes these local records too. Creating another tenancy keeps existing reports on the device. Deposio has no cloud recovery service. Deposio cannot recover a .deposio file that you lose. Restoring store purchases can restore an eligible legacy lifetime entitlement; it cannot restore deleted local reports or photos. A paid .deposio archive can carry access for the report it contains, but does not grant access to other reports. PDFs or archives already saved or shared outside Deposio remain separate copies.
RevenueCat and the app stores retain purchase records according to their own legal and operational requirements. PostHog retains product analytics according to the retention configured for Deposio's project. You may contact the Deposio support/privacy email to request deletion of off-device data. Deposio will use the information you provide and available provider tools to locate and action a request where possible; anonymous records may not be identifiable without a relevant provider identifier. Store transaction records may remain subject to Apple or Google's retention and legal obligations.
8. Support Communications
If you contact deposio.support@gmail.com, the Deposio operator will receive the information you choose to include in that communication. It will be used to answer the request, troubleshoot the app, or handle a privacy request. Support messages are retained only as long as reasonably necessary to resolve the request and meet legal or operational obligations.
9. Security And International Processing
Deposio uses app-private device storage and the security controls provided by the operating system. No storage method is completely secure, so protect access to your device and review where you save or share reports.
RevenueCat, PostHog, Apple, Google, and a chosen share destination may process information in other countries under their own terms and safeguards.
10. Your Choices And Rights
You can choose whether to add an address, notes, meter evidence, or any photograph. You can delete evidence or a report through the available app controls, choose whether and where to share a PDF or save a .deposio file, and manage camera permission through device settings.
Under applicable United Kingdom data-protection law, you may have rights concerning personal data processed by the operator or its service providers. Contact deposio.support@gmail.com to make a request.
11. Children
Deposio is intended for renters and tenants, including students and young adults. It is not designed or positioned as a children's app. Deposio does not impose an explicit in-app age restriction unless one is legally required.
12. Changes
This policy may be updated when Deposio's features, providers, or legal obligations change. The current policy will show its effective date at the top. Material changes will be communicated in a manner appropriate to the change and applicable law.
13. Contact
Questions, support requests, and privacy requests can be sent to:
Neil Massella
deposio.support@gmail.com
No postal address is published unless legally required.