Privacy Policy

ApartMan is a community app that connects residents of the same building. We collect only what the app needs to work, and we never sell your data. This policy explains what we collect, why, how long we keep it, and the rights you have — including the rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The data controller is ADENIKO LLP (ТОО «ADENIKO»), Severnaya Industrial Zone, Proezd 4, Building 16, Kokshetau 020000, Akmola Region, Republic of Kazakhstan. For any privacy question or request, write to hello@adeniko.com.

Data we collect

• Account details — email address or phone number used to sign in. A phone number is verified by SMS and is never shown to your neighbours.
• Name — shown to other residents of your building so they can recognise you.
• Building and apartment — the building you join and the entrance, floor and unit number you enter, used to organise building chats, dues and projects.
• Location — only while you are choosing your building, and only if you allow it, to show buildings near you. We never track your location in the background.
• Optional profile details — photo, gender and date of birth, shown only if you choose to provide them.
• Messages and content — what you write in building chats, direct messages, announcements, polls, problem reports and projects.
• Service marketplace data — job requests you post, offers you make as a service provider, your business profile, and credit purchases.
• Device push token — to deliver notifications, if you allow them.
• Address searches — the text you type when looking for your building, so we can tell when the search fails people and fix it.
• Product usage events — a small number of in-app events (for example, that an invite prompt was shown or tapped) to understand which features help.
• Technical data — app version, platform, and how you reached us (an advertisement, a QR sticker, an invitation link).

Why we use it, and our legal basis

• To run the service — matching you to your building, delivering chats, dues, projects and service requests. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• To keep the service safe — preventing abuse, spam and fraud, and enforcing our rules. Legal basis: our legitimate interest in a safe service (Art. 6(1)(f)).
• To improve the app — address-search and usage measurement, always at the level of "did this feature work", never to profile you. Legal basis: legitimate interest (Art. 6(1)(f)).
• Location and notifications — used only after you grant the permission, and you can withdraw it at any time in your device settings. Legal basis: consent (Art. 6(1)(a)).
• Payments — where credit purchases are offered, to process your order and meet accounting and tax obligations. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).

Where your data is stored

Your data is hosted in the European Union (Frankfurt, Germany) on Supabase infrastructure running on Amazon Web Services, encrypted in transit (TLS) and at rest. Access is restricted by row-level security rules, so only members of your building can read building content.

Who else processes your data

• Supabase / Amazon Web Services — database, authentication and file storage, in the EU.
• Expo — delivery of push notifications; receives your device push token and the notification text. This provider is located outside the EEA, and transfers rely on the European Commission's Standard Contractual Clauses.
• Mapbox — address lookup while you search for your building; receives the search text and, if you allowed it, approximate coordinates.
• Apple and Google — only if you choose to sign in with their accounts; they confirm your identity to us.
• Payment providers — where credit purchases are available, the payment provider processes the transaction; we never receive or store your card details.

These are processors acting on our instructions under written agreements. We do not share your data with advertisers or data brokers.

How long we keep it

• Account and profile — while your account exists. When you delete your account, your profile and personal data are removed.
• Messages — kept while the building chat exists, so neighbours who join later can read the history. When you delete your account, your messages are anonymised.
• Address searches and usage events — kept for up to 12 months, then deleted.
• Payment and accounting records — kept for the period required by tax law, regardless of account deletion.

Your rights

If you are in the European Union, the GDPR gives you the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given. You can exercise most of these rights directly in the app, and all of them by writing to hello@adeniko.com. We answer within one month.

• Edit your profile, language and privacy settings (direct messages, read receipts, online status) at any time in the Profile tab.
• Leave a building to end that membership and its notifications.
• Delete your account from Account Settings, or at apartman.live/delete-account.

You also have the right to complain to your national supervisory authority — for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), the Latvian Data State Inspectorate (Datu valsts inspekcija), or the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

Children

ApartMan is not directed to children under 16. If you believe a child has provided us with personal information, contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. When we do, we revise the “Last updated” date above and, for significant changes, notify you inside the app.

Contact

Privacy questions and requests: hello@adeniko.com. General support: support@apartman.live.