Privacy & transparency

Privacy policy

Published: 12 September 2026. Provider: Kardos Blue Limited.

1. Who is responsible for what?

Kardos Blue Limited provides Landlord companion and is responsible for personal information it processes for website operation and support. Contact [email protected].

If you decide why and how tenant or other personal information is recorded for your rental business, you will generally be its data controller. Your exact obligations depend on your circumstances. The app does not replace your tenant privacy notice, lawful-basis assessment or retention policy. We do not become the custodian of local records merely because you use the app.

2. Information in the app

You can store property addresses, landlord and tenant contact details, tenancy and rent records, agreements, certificates, reminders, inspections, room photographs, meter readings, keys, signatures, repairs, notes, tasks and audit history. Records are held in the app’s private iOS storage. App-lock security uses Apple device security and Keychain services.

Document text recognition is performed on-device. Recognition may be incomplete or inaccurate; review extracted details and dates before relying on them. Importing or photographing a document does not send it to Kardos Blue Limited.

3. Permissions

• Camera and selected photos: for evidence and document capture/import you initiate.
• Files: for documents, report exports and backup import/export you choose.
• Notifications: local reminders, subject to your iOS settings. They are not an emergency or guaranteed deadline service.
• Device authentication: app lock on supported devices. We do not receive biometric templates.

You can manage applicable permissions in iOS Settings. Restricting permission can prevent the related feature from working.

4. Exports, backups and other services

You choose when a report, document or backup leaves the app. A redacted PDF may still contain addresses, images and contextual information. Review the actual output; redaction is not a promise of anonymity.

Use Export encrypted backup to protect a workspace archive with a password. Keep the password separately: the app cannot recover it. Legacy archives, PDFs and other exports may be unencrypted. Checksums detect integrity problems; they do not make a file confidential.

iOS/device backups may contain app data depending on your device settings. iCloud Drive, third-party Files providers, email, messaging and other destinations may store or transfer copies under their own policies. They are not developer-hosted sync. We cannot remotely retrieve, restore or delete your local records or those external copies.

5. Website and support data

This static website is hosted on GitHub Pages and uses Cloudflare for domain/DNS and email routing. We have not added advertising, visitor analytics, a contact form, tracking pixels or non-essential cookies. Infrastructure providers may process IP addresses, request metadata and security logs to operate and protect their services.

Support messages sent to [email protected] are forwarded by Cloudflare to our Google-hosted support inbox. We receive your email address, message, any attachments you send and related correspondence. Do not send tenant documents, passwords or full backups. Start with a description and a carefully redacted screenshot.

Where applicable, we process support correspondence to provide a service you request, pursue legitimate interests in resolving faults and securing our services, and comply with legal obligations. We do not sell support information or use it for advertising. Provider processing may involve countries outside the UK; applicable provider terms and legally required transfer safeguards govern that processing.

We retain support correspondence only as long as reasonably needed to resolve the enquiry, address follow-up issues or disputes and meet applicable legal requirements, then delete or anonymise it. The appropriate period depends on the enquiry. We do not set the retention period for the records you store locally.

6. Security and your choices

Use a strong device passcode, keep iOS current, enable appropriate app lock, restrict device access and safeguard backups and export destinations. No software or storage system is completely secure. See the safeguarding guide for practical steps.

7. Access, deletion and privacy rights

Use the app’s local controls to review, export, delete or reset your workspace. Deletion in the app does not recall shared PDFs, images, device backups or copies held elsewhere.

For personal information Kardos Blue Limited actually holds, contact support to exercise applicable rights of access, correction, erasure, restriction, objection or portability. These rights are subject to legal conditions and identity checks. We cannot supply local tenant records we do not possess. Tenants should ordinarily contact the landlord or organisation that collected their records.

You may complain to the UK Information Commissioner’s Office at ico.org.uk, or your applicable supervisory authority.

8. Children and sensitive content

The app is a landlord administration tool, not a service directed at children. Avoid collecting children’s images, health information, identity documents or other particularly sensitive information unless necessary and lawful, with appropriate additional safeguards.

9. Changes and provider policies

We will update this policy if our processing changes materially. Review the published date and any notices provided in the app.

• GitHub privacy statement
• Cloudflare privacy policy
• Google privacy policy
• Apple privacy policy