Privacy Policy

Last updated 4 August 2026

Kestrel is a tool for property managers to record the condition of rental units. This policy describes what the app and website collect, why each item is collected, and who it reaches.

What we collect

Account details. Your name and email address, so colleagues can see who recorded an inspection and so we can send invitations and password resets.

Inspection content. The units you set up, the answers and notes you record, the photos you take, and the punch-list items, vendors, and pricing you enter.

Photo location. If you allow it, the coordinates where a photo was taken are stored with that photo, so a disputed finding can be tied to a place. This is optional — declining leaves photo capture fully working, and no location is recorded.

Dictated notes. When you dictate a note, speech is transcribed using Apple’s speech recognition. We store the resulting text as part of the inspection, not the audio.

Diagnostics. If the app crashes we receive a technical report — device model, OS version, and where in the code the failure happened — so it can be fixed.

What we do not collect

We do not use advertising identifiers, we do not track you across other apps or websites, and we do not sell personal information.

Face ID is used only to unlock the app on your own device. The check is performed by iOS; your biometric data is never sent to us and never leaves your device.

Who can see your inspections

Inspections belong to an organization. Only members of that organization can read them, enforced by per-row database rules rather than by the app alone.

Vendors are the exception you control. When you dispatch punch-list work, the vendor receives a link that shows only the items assigned to them and the photos attached to those items. They need no account. The link can be revoked and can be set to expire.

Where the data lives

Inspection data and photos are stored in our Supabase (PostgreSQL and object storage) instance. Transactional email — invitations, password resets, vendor notifications — is delivered by Resend. Crash reports go to Sentry.

These providers process data on our behalf in order to run the service. They are not permitted to use it for their own purposes.

How long it is kept

Inspections are kept while your organization is active, because their value is largely evidentiary — a deposit dispute can arrive months after a tenant moves out. Delete an inspection and its photos are deleted with it. Ask us to close your organization and we will delete its contents.

Your choices

Camera, photo library, microphone, and location access are each requested separately and can be changed at any time in iOS Settings. Declining location or the microphone leaves every other part of the app working.

You can request a copy of your data, or its deletion, by writing to us at the address below.

Children

This is a tool for property professionals. It is not directed at children and we do not knowingly collect information from them.

Changes

If this policy changes in a way that affects how your information is used, we will update the date at the top and notify organization owners.

Contact

Questions about this policy, or requests about your data, can be sent to support@krkn.app.