Privacy Policy

Who is responsible for your data

PropFolio is built and published by CIAS. Questions about this policy or requests relating to your data should be sent to support@ at cias.io.

What data PropFolio stores

PropFolio stores information that you enter or import for managing a property portfolio. This can include:

• Property, ownership, valuation, rent and regional currency details
• Tenant and owner names, contact details, tenancy dates and notes
• Rooms, rent records, expenses, recurring expenses and tax/export records
• Maintenance, compliance, mileage, contractor and communication records
• Photos, receipts and documents that you choose to attach
• App preferences, backup settings and optional integration settings

Core portfolio data is stored on your device using iOS data protection. PropFolio does not require a CIAS account, and CIAS does not operate a server that receives a copy of your portfolio in normal use.

If you create a backup, PropFolio encrypts the portable records and included attachments on-device with AES-256-GCM before the file is saved to Files, iCloud Drive, AirDrop or another destination you choose. Device-bound bank connections and Keychain credentials are deliberately excluded. You are responsible for keeping the original passphrase or recovery key.

Data PropFolio does not collect

PropFolio does not include:

• Advertising networks or ad tracking
• Analytics SDKs that report your usage behaviour to CIAS or third parties
• No background or server-side location tracking. Live mileage mode uses foreground location only after you start a journey; raw coordinates are not persisted or transmitted.
• Crash reporting services that transmit identifiable data to third parties

If this changes in a future version, this policy will be updated and the change will be described in the release notes.

Optional external features

Core use is local-first. Data leaves the app only when you deliberately use one of these optional features:

• Anthropic Rent Advisor: requires your own Anthropic API key and explicit approval. PropFolio sends a structured summary containing property region/type, bedrooms, furnished status, rounded rent, yield, expenses and valuation, plus lease-end month. Addresses, tenant identity/contact details, notes, messages, documents and exact values are excluded. You can withdraw approval in Settings. Anthropic processes the request under its own terms and privacy policy.
• TrueLayer bank connection: uses an optional OAuth flow. Access credentials remain in the iOS Keychain, and bank/transaction data is fetched only while the connection is enabled. TrueLayer processes this flow under its own terms and privacy policy.

CIAS does not use either flow for advertising or tracking.

Crash and diagnostics data

If you have opted in to sharing diagnostics and usage data with app developers in your iOS system settings (Settings → Privacy & Security → Analytics & Improvements), Apple may share anonymised crash logs with CIAS via App Store Connect. This is controlled entirely by your iOS settings. CIAS uses this data only to identify and fix software bugs.

App Store purchases

If PropFolio includes in-app purchases or a paid download, those transactions are handled by Apple. CIAS does not receive your payment card details. Apple's App Store privacy policy governs purchase data.

Data retention

Your portfolio remains on your device until you delete individual records or remove the app. Encrypted backup files remain wherever you saved them until you delete them there. Optional Anthropic and TrueLayer requests are subject to those providers' retention policies.

CIAS does not hold a server-side copy of your portfolio in normal use. Support messages that you send to CIAS are retained only as needed to respond, maintain security and meet legal obligations.

Your rights and data requests

Because PropFolio stores data on your device rather than on CIAS servers, most data actions are within your control directly:

• Access or export: View records in the app and use the available CSV, tax and encrypted-backup exports.
• Deletion: Delete individual records, use personal-data erasure controls where available, or delete the app to remove local data. Delete encrypted backup files separately from Files or iCloud Drive.
• Questions or unusual circumstances: If you believe CIAS holds data relating to you (for example via a support enquiry you sent), email support@ at cias.io with subject line Data request — PropFolio and describe what you are looking for.

Children

PropFolio is not directed at children under 13. CIAS does not knowingly collect personal information from children.

Changes to this policy

If this policy changes materially, the updated version will be published at this URL and the "last updated" date above will change. CIAS recommends checking this page when you update the app.

Contact

For any questions about this policy or to make a data request, contact support@ at cias.io.