Privacy Policy
Last updated: June 2026
check4u collects only what is needed to run move-in records and response addendums. We do not sell personal data or use it for cross-context behavioral advertising. This policy describes what we store, why we use it, how long we keep it, and your choices.
1. Who we are
check4u is operated by CHOI CHANG KYU, doing business as check4u. For report workflow data, check4u is the service operator and data controller unless a specific law uses a different term. Paddle is the merchant of record for checkout and may act as an independent controller for payment data it processes.
Contact for privacy requests: alex@check4u.app.
2. Data we collect
Landlord accounts: email address, display name you provide, billing status via Paddle (customer and subscription identifiers, not full card numbers).
Tenant invite flow: tenant email (for the invite), display name at submit, room photos, optional issue photos and comments, extra photos, typed acknowledgment name and timestamp, and optional drawn acknowledgment image when you use that step.
Reports: report title, optional property label and move-in date, room structure, optional existing report reference/date/PDF, landlord, agent, or property manager review notes, final acknowledgment names and timestamps, and optional drawn acknowledgment image.
Technical: security tokens (hashed), upload timestamps, IP-derived security signals, device/browser information in operational logs, and other records needed to run and protect the service.
3. What we do not collect
Tenants do not create accounts. We do not require tenant phone numbers or home addresses for check4u reports. We do not offer SMS, chat, or long-term property archives.
4. Photos and location metadata
Before upload, tenant photos are resized in the browser (about 1600px max, 5 MB cap). The resize step re-encodes images and removes GPS and other EXIF location metadata. We store photos in private object storage with no public URLs.
5. How we use data
We use data to send invite and report emails, generate PDF and ZIP files, show status on the landlord or agent dashboard, process credits and subscriptions, and enforce expiry and deletion schedules below.
Where privacy laws require a legal basis, we rely on contract performance to provide the service, legitimate interests to secure and improve it, legal obligations for tax, accounting, payment, and compliance records, and consent or your direction where a feature clearly asks for optional information.
6. Sharing and processors
We use service providers for hosting, database and authentication, private file storage, email delivery, payments, fraud prevention, and support. They may process data only for the service functions they provide to us or to Paddle. We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer.
7. International processing
check4u is offered globally. Your data may be processed in countries other than where you live, depending on our infrastructure and payment providers. When required, we use reasonable safeguards such as provider data processing terms and transfer mechanisms recognized by applicable law.
8. Retention and deletion
Tenant invite link: expires when the selected submission window ends. You can choose from 48 hours up to 7 days (168 hours maximum).
Reviewer window: if the tenant submits and you do not finalize within 14 days, the report expires and reserved credits are released.
After the final report is sent: tenant submission and review flows lock. The same PDF is emailed to both parties and stays available in the owner account for 1 year.
Original photos ZIP: email links to /d/… are available for 14 days after the final PDF is sent.
Server files: original photo files and attached existing report PDFs are removed about 14 days after the final PDF is sent. The final PDF is retained for 365 days so it can stay available in the owner account for 1 year. Report metadata (status, titles, event history, billing records, and audit events) may remain where needed for account history, security, tax, accounting, compliance, and support.
9. Payments
Checkout and subscriptions are handled by Paddle as merchant of record. We do not store full payment card numbers. See Paddle's privacy notice for payment data they process.
10. Security
Access tokens are stored hashed. Account routes require login. Tenant and download routes use high-entropy tokens with expiry. Files are served from private storage through controlled access. No online service can be perfectly secure, but we use practical safeguards designed for a small, privacy-minimal product.
11. Your rights and choices
Depending on where you live, you may have rights to request access, correction, deletion, export, restriction, objection, or withdrawal of consent. You may also have the right to complain to a local data protection authority. We will respond to privacy requests as required by applicable law.
Landlords can contact us to ask about account data. Tenants can contact us about data they submitted through an invite link. Some records may need to be kept where required for billing, security, compliance, or to preserve the same final PDF sent to both parties. After file deletion, photos cannot be restored from our servers.
12. Children
check4u is not intended for children. Do not use the service if you are not old enough to form a binding agreement or use the service with the required permission in your location.