Privacy Policy
Version 2026-10-02 · Applies to kirayaok.in, the KirayaOK app and tenant pages.
1. Who we are
KirayaOK ("we", "us") provides this service. For anything about your data, write to [email protected]. Our Grievance Officer is Rahul Kumar, reachable at the same address. We reply within 7 days and resolve complaints within 30 days.
2. Two kinds of data, two roles
- Your account data (you as an owner or manager): we decide how it is used, as described here.
- Data about your tenants that you enter (names, phone numbers, ID details, photos, rent and payments): you decide what to keep and why; we store and process it only to run KirayaOK for you. You are responsible for having your tenants' permission to keep these details and for telling them you use KirayaOK. You can point them to this page.
3. What we collect
| What | Why |
|---|---|
| Your mobile number, name, optional email, language | Sign-in, your account, support replies |
| Properties, units, rent, bills, payments, expenses, meter readings, cash hand-overs, notes | The rent register itself |
| Tenant names, mobile numbers, move-in/out dates, deposit; optionally the last 4 digits of an ID number and photos of ID or agreement | Your tenant records. We never ask for or store full Aadhaar numbers; 12-digit numbers are blanked out of logs automatically. |
| Payment screenshots and meter photos (from you or sent by a tenant through their link) | Proof of payment and readings. Stored in a private folder only your account can open. |
| UTR / reference numbers of payments to KirayaOK for a plan | Confirming your plan payment |
| Technical data: a random device ID, app version, screen names, timings, error reports, approximate number of devices | Keeping the app working and fast. Phone numbers and 12-digit numbers are removed before error reports are stored. |
We do not collect your location, contacts, SMS, or browsing history, and we do not use advertising or third-party tracking cookies. The app keeps a copy of your data in your browser's storage on your phone so it opens and works without internet; logging out removes it.
4. Tenant pages
Each tenant can get a private link (kirayaok.in/t/…) to see their own bills and balance and to send a payment or meter reading with a photo. Anyone with the link can open that page, so it shows only that tenant's own rent details. The owner can turn tenant pages off or make a new link at any time.
5. Who else handles the data
We use these service providers, under contract, only to run KirayaOK:
- Supabase (database, sign-in and file storage), hosted in the Mumbai, India region.
- Cloudflare (website hosting and delivery). Pages pass through its network; your records are not stored there.
- Google Drive (daily encrypted backup copies, readable only with our backup key).
- GitHub (our code and automated checks; error summaries with personal numbers removed).
- An SMS or WhatsApp provider in India, once we start sending sign-in codes by message (only your mobile number and the code).
Managers you add can see the properties you assign to them. We share data with authorities only when Indian law requires it. We never sell personal data.
6. How long we keep it
- Your records: for as long as your account is open. If your plan ends, your data stays readable and downloadable.
- After you ask us to delete your account: removed within 30 days, including from the daily backups (each backup is kept for 30 days).
- Error reports and logs: 30 days. Performance timings: 14 days. Anonymous usage counts: up to 1 year.
7. Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask to see, correct, download or delete your data, withdraw consent, and nominate someone to act for you. Many of these are built in: edit anything in the app, use Export to download your data, or write to [email protected] from your registered number or email. Tenants can ask their owner, or write to us and we will pass it on and help. If you are not satisfied with our answer you can complain to the Data Protection Board of India.
8. Security
Data travels over HTTPS. Each account can read only its own rows (enforced in the database), photos are in a private store and shown through short-lived links, and backups are encrypted. No system is perfect: if a breach affects your data we will tell you and the Data Protection Board as the law requires.
9. Children
KirayaOK is for adults running a rental business. If you are under 18, please do not create an account.
10. Changes
If we change this policy in a way that matters, we will show a notice in the app before it applies. The version date is at the top.