01Information we collect
TrueFolio requires an account. We collect the following categories of information, all of it entered directly by you or generated by your use of the app:
| Category | Examples |
|---|---|
| Account information | Email address and password (handled by our authentication provider; we never see your password in plain text) |
| Profile information | Name, business name, province of residence, marginal tax rate, profile photo — all optional except your account email |
| Property records | Addresses, ownership percentages, unit details, mortgage terms, utility arrangements |
| Tenant information | Names, phone numbers, email addresses, lease dates, rent amounts, deposits — entered by you about your own tenants |
| Financial records | Income and expense entries, categories, amounts, dates, and notes you log |
| Tax-support records | Capital asset and CCA (depreciation) schedules, mileage logs |
| Documents & photos | Leases, insurance policies, tax notices, and receipt photos you upload |
We do not collect precise geolocation, contacts-list access, advertising identifiers, or browsing history from other apps or websites.
02How we use your information
- To operate the core features of the app — tracking your properties, transactions, and generating your CRA T776 reports.
- To sync your data across your own devices when you're signed in.
- To provide customer support when you contact us.
- To maintain the security and integrity of the service (for example, detecting unauthorized access attempts).
We do not use your information for advertising, and we do not currently use any third-party analytics or advertising SDKs in the app.
03Where your data is stored
Your account and portfolio data are stored in a managed database and file storage service operated by our infrastructure provider, Supabase. Every table is protected by row-level security rules, so only your own signed-in account can ever read or write your records — this is enforced by the database itself, not just the app.
A copy of your portfolio is also cached on your device for fast, offline viewing. This local cache relies on your device's own operating-system protections (such as your device passcode or biometric lock); we recommend keeping one enabled.
04Sharing & sub-processors
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We share information only with the service providers below, solely to operate TrueFolio:
| Provider | Purpose |
|---|---|
| Supabase, Inc. | Authentication, database, and file storage hosting |
We may also disclose information if required by law, court order, or to protect the rights, safety, or property of TrueFolio, our users, or the public.
05Your choices & rights
- Export your data at any time from Profile → Export & Import Data, as a local backup file.
- Export your backup or delete your account entirely — including your login credential, properties, transactions, documents, and profile settings — at any time from within the app under Profile → Account → Delete Account. No support request is required.
- If you'd rather not use the in-app control, you can also request deletion by contacting [email protected].
- Correct or update your profile information at any time from within the app.
If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access the personal information we hold about you and to request correction of inaccuracies. Contact us to exercise these rights.
06Data retention
We retain your information for as long as your account is active, or as needed to provide the service. If you delete your data or close your account, we remove it from active systems promptly, except where we're required to retain limited records for legal, security, or fraud-prevention purposes.
07Security measures
- All data in transit between the app and our servers is encrypted (TLS).
- Your session credentials are stored using your device's secure hardware-backed storage (Keychain on iOS, Keystore on Android) — never in plain text.
- Database access is scoped per-account by row-level security, enforced independently of the app itself.
No method of transmission or storage is 100% secure. We work to protect your information but cannot guarantee absolute security.
08Children's privacy
TrueFolio is intended for adult landlords and property owners. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
09Not tax, legal, or accounting advice
10Changes to this policy
We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you within the app.
11Contact us
Questions about this policy or your data? Reach us at [email protected].