Privacy Policy
Last updated: May 2026
check4u collects only what is needed to run move-in condition reports. We do not sell personal data. This policy describes what we store, how long we keep it, and your choices.
1. Who we are
check4u provides digital report generation for landlords and tenants. We are not a real estate brokerage, inspection company, or legal service.
2. Data we collect
Landlord accounts: email address, display name you provide, billing status via Paddle (customer and subscription identifiers, not full card numbers).
Tenant invite flow: tenant email (for the invite), display name at submit, room photos, optional issue photos and comments, extra photos, typed acknowledgment name and timestamp, and optional drawn signature image when you use that step.
Reports: report title, optional property label and move-in date, room structure, landlord review notes, final acknowledgment names and timestamps, and optional owner signature image.
Technical: security tokens (hashed), upload timestamps, and operational logs needed to run the service.
3. What we do not collect
Tenants do not create accounts. We do not require tenant phone numbers or home addresses for MVP reports. We do not offer SMS, chat, or long-term property archives.
4. Photos and location metadata
Before upload, tenant photos are resized in the browser (about 1600px max, 5 MB cap). The resize step re-encodes images and removes GPS and other EXIF location metadata. We store photos in private object storage with no public URLs.
5. How we use data
We use data to send invite and report emails, generate PDF and ZIP files, show status on the landlord dashboard, process credits and subscriptions, and enforce expiry and deletion schedules below.
6. Retention and deletion
Tenant invite link: expires when the landlord-selected window ends. You can choose from 48 hours up to 7 days (168 hours maximum).
Owner review: if the tenant submits and you do not finalize within 14 days, the report expires and reserved credits are released.
After final send: tenant and owner edit flows lock. The same PDF is emailed to both parties.
Photo ZIP download link: email links to /d/… expire 14 days after final send.
Server files: original photos and generated PDF/ZIP files are removed about 30 days after final send. Report metadata (status, titles, event history) may remain on your dashboard with a retention notice.
7. Payments
Checkout and subscriptions are handled by Paddle as merchant of record. We do not store full payment card numbers. See Paddle's privacy notice for payment data they process.
8. Sharing
We use infrastructure providers (hosting, email, storage, payments) under contracts appropriate for their role. We do not sell personal information. We may disclose data if required by law.
9. Security
Access tokens are stored hashed. Owner routes require login. Tenant and download routes use single-use style tokens with expiry. Files are served via private storage and signed access.
10. Your choices
Landlords can contact us to ask about account data. After file deletion, photos cannot be restored from our servers.