Privacy Policy

1. Information you give us

Account details: your name, email address, phone number and password (stored only in encrypted, hashed form).

Profile and identity details: date of birth, gender, National ID card number or passport number, occupation, a short bio, a profile photo, and an emergency contact's name, phone number and relationship to you.

Rental applications: the details you enter (such as your current address, employment status and employer), references, answers to the landlord's questions, and the documents you upload, such as ID card scans and employment letters.

Leases and payments: lease terms, the signed agreement you upload, rent charges, payment records, transfer slips and receipts.

Landlord details: organisation name, registration and tax numbers, billing address, bank or payout account details (bank, account name, account number, branch and SWIFT code), and the details of managers you invite.

Property information: addresses, map location, descriptions, photos, videos, floor plans, rent and fees for properties you list.

Communications: messages, maintenance requests and their photos and videos, notices, replies, reviews and the information you give when you invite someone.

2. Information collected automatically

Device information: a push notification token, your device name and platform, and your notification preferences, so we can send you notifications.

Technical information: IP address, browser or app details, sign-in times and server logs, used to keep your account secure and to troubleshoot problems.

Crash reports: if the app crashes, a technical error report is sent to our crash-reporting provider. We configure it not to include your personal details or sign-in credentials.

Location: if you allow it, the app uses your location only while it is open, to help you place a property's pin on the map. We save the property's location, not yours, and we never track your location in the background.

3. How we use your information

To create and manage your account and let you switch between tenant and landlord modes.

To run the service: publishing listings, sending applications to landlords, preparing leases, generating rent charges and reminders, recording payments, and handling maintenance requests and notices.

To contact you: sign-in and password-reset codes, notifications about your applications, payments and tenancy, and replies to your support requests, by push notification, email or SMS.

To keep Hoadhaa safe: preventing fraud and misuse, securing accounts, and keeping a record of changes to key identity details.

To fix problems and improve the app.

To meet our legal obligations and respond to lawful requests from authorities.

4. Who can see your information

Landlords and their managers: when you apply for a property or rent one, the landlord and the managers they have authorised can see your application, identity details, documents, payments, messages and maintenance requests for that tenancy.

Tenants: when you rent out a property, your tenants can see the property details, the lease, the bank account you provide for payments and the notices and messages you send them.

Everyone: published listings — including their photos, location and contact phone number — are public within the app. Reviews you post may also be visible to other users.

Nobody else: other users cannot see your identity documents, payment records or private messages.

5. Service providers

We use trusted providers to run Hoadhaa. They process your information only on our instructions and only to provide their service:

• Cloud hosting and file storage (OVHcloud) — our servers, database, uploaded files and backups.
• Email delivery (Resend) — account and notification emails.
• SMS delivery (Twilio) — verification codes and text notifications.
• Push notifications (Expo, Apple and Google) — delivering notifications to your device.
• Crash reporting (Sentry) — technical error reports, without your personal details.
• Maps (OpenFreeMap) — map images shown in the app.

Some of these providers may process information outside the Maldives. We choose providers that protect information to a high standard.

6. What we do not do

We do not sell your personal information. We do not show advertising, and we do not use advertising or tracking tools that follow you across other apps or websites.

We may disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business (in which case this policy would continue to apply).

7. App permissions

Camera and photos: to take or choose pictures of properties, payment slips, application documents and maintenance issues.

Microphone (iPhone only): to record sound with maintenance videos.

Location (only while using the app): to place a property's pin on the map.

Notifications: to tell you about applications, payments, messages and notices.

Each permission is requested only when you first use the feature that needs it, and you can turn it off at any time in your device settings.

8. How we protect your information

Your information is sent over encrypted connections. Your sign-in token is stored in your device's secure storage. Identity documents, payment slips, agreements and other private files are kept in private storage and are only shared through links that expire after a few minutes.

No system is completely secure, so please keep your password private and tell us straight away if you notice anything suspicious.

9. How long we keep it

We keep your account information for as long as your account is open.

Leases, rent charges, payments and related records are kept as a history of the tenancy even after it ends or a listing is removed, because landlords and tenants rely on them and we may need them for legal, tax or dispute purposes.

When your account is permanently deleted, a lease you were party to keeps the name it was signed under, so the other party still has an accurate record of their own tenancy. Elsewhere, such as in their notifications and messages, you appear as "Deleted user".

One-time verification codes are deleted automatically. Database backups are kept for 14 days and then replaced, so deleted information rolls off our backups within 14 days.

10. Your choices and rights

You can view and update most of your profile information, notification preferences and uploaded documents in the app at any time.

You can delete your account yourself in the app, under Profile → Security → Delete account. It is deactivated and hidden straight away; signing in again within 30 days restores it, and after 30 days it is permanently deleted.

You can also ask us for a copy of your personal information, ask us to correct it, or ask us to delete your account by emailing support@hoadhaa.com from the email address on your account. We will respond within 30 days.

When we delete an account we remove or anonymise your personal information, except records we must keep for legal reasons or that form part of another user's tenancy history, such as signed leases and payment records.

11. Children

Hoadhaa is only for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has created an account, please contact us and we will remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes we will let you know in the app. The date at the top shows when it was last updated.

13. Contact us

For any question or request about your personal information, contact us at support@hoadhaa.com, or by post to Hoadhaa Estate, Malé, Republic of Maldives.