Fairlet privacy policy
- Everything you put in Fairlet stays on your phone, encrypted. We have no servers and no accounts, and the app has no internet permission.
- No ads, no analytics, no tracking. We never see, sell or share your data or your tenants' data.
- Your tenants' details are entered by you, for your tenancies, and you decide what to keep and when to delete it.
What the app stores, and where
Fairlet keeps the following only in the app's private storage on your device:
- Your profile: your name, phone, address, PAN, UPI ID and UPI / GPay number (they go on your reminders, receipts and agreements).
- Your properties, units, rooms and beds, with asking rents, electricity rates and the electricity board's consumer numbers.
- Tenants you add: name, phone numbers, email, permanent address, the type of ID you saw and only its last four digits (never the full Aadhaar or other ID number), an emergency contact, the people living with them, and the date they agreed to their details being kept.
- Your books: tenancies, rents and rent changes, deposits, bills, payments and their UPI or cheque references, meter readings, move-out settlements, expenses, receipt numbers, agreement options, the announcements you sent, and an edit history of changes.
- Photos you add of ID proofs, agreements and police verification forms.
- Your settings: billing rules, reminder times, SMS reminder options, and the optional app PIN (as a salted hash only).
The database is encrypted with SQLCipher (AES-256), and its key is protected by the Android Keystore on your phone. Each document photo is encrypted separately (AES-256-GCM) under another Keystore key; photos are re-saved on the way in, which removes location and other metadata, and the viewer blocks screenshots. Android's own cloud backup is turned off for Fairlet, so the app's data is not copied to your Google account. None of this is sent to us or to anyone else by the app.
Permissions
| Permission | Why |
|---|---|
| Notifications | Rent due and overdue, agreements ending, tenants moving in or out, meter readings due, empty rooms, ID photos about to be deleted, and backup reminders. On the lock screen they show counts only, never names or amounts. |
| Run at startup | Re-arms your reminders after the phone restarts. |
| Fingerprint (biometrics) | Only if you turn on fingerprint unlock for the app lock. Android checks the fingerprint; the app only learns whether it matched. |
Fairlet does not ask for internet, contacts, location, SMS, call log, camera or storage permissions. Taking a photo opens your phone's camera app, and choosing one opens Android's photo picker; the app receives only the picture you take or pick.
Your tenants' data
The personal details of tenants, flatmates and emergency contacts are entered by you, the landlord or PG owner, and stay on your phone. We never receive them. Under India's Digital Personal Data Protection Act 2023, that makes you the data fiduciary for your tenants' data, with a few duties of your own: tell each tenant what you keep and why, keep only what the tenancy needs, use it only for the tenancy, keep it safe, and delete it when it is no longer needed or when they ask. Fairlet helps: it records each tenant's consent, keeps only the last four digits of an ID, deletes ID photos 180 days after a tenant moves out (you can change the period, and you get a notice 7 days before), and Erase personal details removes a former tenant's name, phones, address and ID while keeping the amounts so your books still add up. This is a summary, not legal advice.
Sharing you choose
Nothing leaves the app unless you send it. When you do, the app hands it to the app you pick, and what happens next is covered by that app's privacy policy:
- Rent reminders open WhatsApp in the tenant's chat with the message and your payment QR attached, or your messaging app with an SMS typed in. You press send; the app never sends messages by itself.
- Receipts, yearly HRA receipts, tenant statements, move-out settlements, agreement drafts, reports and Excel or CSV exports are made on your phone and shared through Android's share sheet (WhatsApp, email, Drive and so on), or printed through Android's print service. ID photos can't be shared out of the app.
- The payment QR holds your UPI ID, your name and the amount, so the tenant can pay you in any UPI app. Fairlet doesn't take, process or see payments; you mark them paid yourself.
- Call buttons open your phone's dialer, and the privacy policy link opens your browser.
Home-screen widgets show tenants' names and amounts due on your home screen; with the app lock on they show totals only.
Backups
A backup file is made only when you tap Export a backup. It is encrypted with a password you choose (AES-256-GCM, with the key derived by PBKDF2 at 600,000 rounds) and saved where you pick, such as Drive or your phone's storage. A switch lets you leave the ID photos out. We can't open a backup or recover its password, so keep the password safe. Your app PIN is never put in a backup.
Deleting your data
Delete records in the app, erase a former tenant's details, or uninstall the app to delete everything it stored, including the encryption keys. Backup files you made, and files you shared to other apps, are yours to delete.
Children
Fairlet is a business tool for landlords and PG owners aged 18 and over. It is not directed at children and doesn't knowingly collect anything from anyone.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions: singhdharmvir81@gmail.com