Your data stays on your device.

What the apps store, and where

Everything you enter, such as open houses, visitor sign-ins, clients, visits, invoices and notes, is stored in the app's database on your device. If you turn on iCloud sync in a future version, Apple stores an encrypted copy in your own iCloud account under Apple's terms. GPH Digital LLC does not operate accounts and does not receive this data.

Open house visitors

When a visitor signs in on your iPad, their details are saved only on your iPad. You, the agent, decide how they are used and are responsible for them under applicable law. When a visitor signs in from their own phone by scanning the QR code, the form is encrypted on their phone using a key that exists only in the QR code and on your iPad. The encrypted message passes through a relay service we operate on Cloudflare. The relay cannot decrypt it, keeps it only until your iPad collects it or for at most 7 days, and keeps no copy afterward. The relay logs ordinary technical data, such as IP address and timestamps, for up to 7 days for abuse prevention.

RDesk

RDesk lets you control your own computer from your phone. It does not collect any personal data and has no accounts, analytics, advertising or third-party SDKs. The list of computers you connect to and any password you choose to remember are stored only on your phone; remembered passwords are encrypted with the phone's system keystore. Screen images, sound and your taps and keystrokes travel directly between your phone and your own computer, encrypted end to end with AES-256-GCM, usually over your own Tailscale network. GPH Digital LLC operates no server in that path and cannot see any of it. The app asks only for network access. RDesk Host, the companion app for your computer, runs on your own machine, sends nothing to us, and is open source at github.com/oncet886/rdesk; downloading it from GitHub is subject to GitHub's privacy statement. Tailscale is a separate service you install and sign in to under Tailscale's own terms.

What we do not do

The apps contain no analytics, advertising or tracking code and no third-party SDKs that collect data. We do not sell, share or use visitor or client information for any purpose. We do not receive your location. Permissions such as Contacts and Photos are requested only when you use the matching feature (adding a lead to Contacts, choosing a listing photo) and are used only for that action.

Purchases

Purchases and subscriptions are handled by Apple through the App Store. We receive only anonymous transaction records from Apple and never your payment details.

Feedback you send us

If you use the feedback form, we receive the message you write, the app version, your device model and your tester code, and your email address only if you add it. We keep it for up to 90 days to reply and improve the app.

Tester code, test reports and referrals

Each app makes a random tester code, such as PB-7F3K-92QD, the first time it opens and shows it in Settings. It is not derived from your device, your Apple Account or any system identifier. App Store versions never send it on their own. Test builds installed through TestFlight send it once a day when you open the app, together with the app version and whether the device is an iPhone or iPad, so we can count how many testers are using each build. We keep these check-ins for up to 365 days. Otherwise we receive the code only with something you choose to send. In test builds, Settings offers a test report: before anything is sent, the app shows you every value in it, which are counts such as how many open houses or active clients you have and on how many days you used the app, plus the app version. It never includes names, phone numbers, emails or addresses, and you cannot be identified from it unless you tell us your code. We keep test reports for up to 365 days to run the tester program. If someone referred you, you can enter their referral or tester code after buying. The app then sends that code, your own tester code and the purchase record Apple signs (the product, the purchase date and a transaction number, never payment details), so we can confirm the purchase and credit it once. We keep referral records until the referral program ends. Email us to have any of these deleted.

Referral codes for yearly subscribers

If you have the yearly plan and open Settings, the app sends the purchase record Apple signs for your subscription so our relay can give you a referral code and show your progress. We store your code with your subscription's transaction number, and for each purchase credited to you, its product, date, transaction number and whether Apple has refunded it. Apple tells us about refunds through its App Store server notifications, which contain the same kind of anonymous transaction record. We never learn your name, email or Apple Account from this. When you earn lifetime, we place a one-time App Store redemption code where only your app can fetch it. We keep these records until the referral program ends. Email us to have them deleted.

Android waitlist

If you leave your email on our website to hear about an Android version, we store that address, which app you asked about, and the date on the Cloudflare relay we operate. We use it only to send one email when that version is available, then delete the list. Email us at any time and we will remove your address right away.

Deleting your data

Delete an open house, client or lead in the app and it is gone from your device. Deleting the app removes its database. Settings › Data lets you delete everything at once. If iCloud sync is on, also remove the app's data in iOS Settings › Apple Account › iCloud.

Children, changes and contact

The apps are business tools for adults and are not directed at children under 13. If this policy changes, the new version is posted here with a new date, and material changes are noted in the app's release notes. Questions: [email protected].