Privacy & Data Policy

Last updated: August 2026  ·  Version 1.2

The short version

1. Who we are

BeTenant ("BeTenant", "we", "us", "our") is a mobile application and web service that helps residential tenants in the United Kingdom document housing issues, keep a tamper-evident record of evidence, track key deadlines, generate and send formal letters, and understand their rights as renters.

BeTenant is a product of, and operated by, Avanta Apps s.r.o., a company registered in the Czech Republic, company ID (IČO) 297 84 310, registered office at Sokolská 1883/8, Nové Město, 120 00 Praha 2.

We are the data controller of your personal data under the UK GDPR, the EU GDPR and the Data Protection Act 2018. We offer BeTenant to tenants in the United Kingdom and comply with the UK GDPR. We are registered with the UK Information Commissioner's Office under registration number [YOUR ICO NUMBER].

Privacy contact: privacy@betenant.com — we respond within one calendar month.

2. What personal data we collect and why

2.1 Account and identity data

Your name, email address, account creation date, and subscription status. Sign-in and passwords are handled securely by our authentication provider (Supabase) — we never see or store your password.

Legal basis: Performance of a contract — Article 6(1)(b) UK GDPR.

2.2 Property, tenancy and recipient data

The address of your rental property, tenancy dates, and jurisdiction. If you add your landlord's or letting agent's details (such as name, email or postal address) so that BeTenant can send letters at your instruction, we process those details to deliver your correspondence and log its status. We also derive and store an anonymised outward postcode (e.g. "M14") for use in our Aggregated Insights Programme (Section 8).

Legal basis: Contract performance for your address and recipient details; Legitimate interests for anonymised area data.

2.3 Issue, evidence and media data

Issue titles, descriptions, severity, categories and dates, together with the photographs and (where you use the relevant tools) audio / noise recordings you capture within the app. To make your evidence tamper-evident, we also process and store file metadata — for example capture date and time, image EXIF data, and, where your device provides it and you allow it, approximate location — and we generate a cryptographic hash of each file so that any later change can be detected. This is the core function of BeTenant. Your specific descriptions, notes, photos and recordings are private to you and are never shared except as you direct (Section 4).

Legal basis: Performance of a contract. Any location data is processed on the basis of your consent, which you can withdraw at any time.

2.4 Correspondence and generated documents

Copies of the formal letters and PDF reports you generate, the content you send, the recipient you choose, and delivery / open receipts where available, stored so you can re-access, download and rely on them.

2.5 Payment and subscription data

If you upgrade to a paid plan, our payment processor handles your card details directly — we never see or store your full card number. We store your plan, subscription status, and transaction references. The core of BeTenant is free and does not require payment details.

Legal basis: Performance of a contract; legal obligation for financial records.

2.6 AI guidance data (Ren)

Ren is an AI guidance tool that answers questions in plain English and points you to the right BeTenant tool; it does not provide legal advice and does not send anything on your behalf. Messages you send to Ren are processed by xAI (the provider of Grok) to generate a response. We do not use your Ren conversations to train AI models.

2.7 Usage and technical data

Basic device and technical information (such as app version, error logs and, on our website, privacy-friendly usage statistics) needed to keep BeTenant secure, reliable and working.

2.8 Communications and notifications

Service messages. We may send you important emails about things you need to know — for example price changes, changes to this policy or our terms, and significant new features. These are not marketing; they are part of providing the service.

Push notifications. If you allow notifications in your mobile settings, the app sends the notifications you need to use it — for example deadline countdowns and when a landlord response is logged. You can turn these off in your device settings at any time.

Marketing. Marketing emails and marketing notifications are optional. We only send them if you opt in, and you can opt out at any time.

Legal basis: legitimate interests and contract performance for service messages and necessary notifications; consent for marketing.

3. What we do NOT collect

4. Who we share your data with

Recipients you choose. When you instruct BeTenant to send a letter or report, we transmit it to the recipient you specify (for example, your landlord or letting agent) by email on your behalf. This only ever happens on your instruction.

Our service providers (processors). We share data with trusted providers who process it on our behalf under UK GDPR-compliant Data Processing Agreements. Our current providers include:

We keep this list current; the definitive, up-to-date list of sub-processors is available on request from privacy@betenant.com. We may disclose data to law enforcement or other authorities where we are legally required to do so, and will notify you where we are permitted.

5. International data transfers

BeTenant is operated by Avanta Apps s.r.o. in the Czech Republic, within the European Economic Area. Your data is primarily processed within the UK and the EEA. Where a provider is located outside the UK/EEA (for example, providers based in the United States), that transfer is protected by appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, and — where relevant — the UK Extension to the EU–US Data Privacy Framework.

6. Data retention

Data typeRetention period
Account dataUntil account deletion, plus 30-day recovery window
Issue, evidence, photos and audio recordingsUntil deleted or account closed, plus 30 days
Letters, reports and delivery receiptsUntil deleted or account closed, plus 30 days
Ren chat conversationsNot stored by BeTenant after your session
Customer support correspondence2 years from last contact
Payment transaction records7 years (legal obligation)
Technical logs90 days
Anonymised aggregated dataRetained indefinitely in a form that cannot identify you

7. Cookies and on-device storage

The mobile app uses on-device storage for sign-in, session management and your preferences — strictly necessary for the app to function. Because this is strictly necessary storage, the app does not show a cookie banner. If we ever add non-essential analytics or tracking to the app, we will ask for your consent first (and follow the relevant platform rules, such as Apple's App Tracking Transparency).

On our website, we ask for your consent before setting any non-essential cookies. You can change your cookie preferences at any time via "Cookie settings" in the footer.

8. Aggregated Insights Programme — our bigger-picture mission

Renting is broken partly because nobody can see the pattern. One tenant reporting damp is a private problem that is easy to ignore. Thousands of tenants logging the same problems in the same postcodes is evidence. A core part of BeTenant's mission is to turn what renters record into anonymised, aggregated, area-level insight that councils, researchers, journalists, charities, unions, NGOs and campaigners working to fix the rented sector can act on.

How it works. We take the issues you log and strip out everything that could identify you or your home. We keep only category-level facts — for example, "damp and mould issues, outward postcode M14, average response time 28 days." Individual records, photos, audio, descriptions, names and full addresses are never included and never shared.

Safeguards we apply:

Your control. Participation relies on our legitimate interest in improving the rented sector, and you have an absolute right to opt out with no effect on your use of BeTenant. Opt out at any time in the app under Account → Privacy (scroll to the bottom), or email privacy@betenant.com. Opting out stops your data contributing to any future aggregation; insight already published in irreversibly anonymised form cannot be individually withdrawn because it no longer identifies you.

9. Your rights under UK GDPR

Deleting your account yourself. You can delete your account at any time in the app under Account → Plans, then scroll to the bottom and press Delete account — you do not need to contact us. We then immediately log you out and lock the account, and schedule permanent deletion of your account and data after a 30-day grace period. If you sign back in during those 30 days, you'll see a lock screen with a Cancel Deletion button that stops the countdown and restores access. After 30 days, deletion is permanent and cannot be reversed. Deletion covers:

If you delete your account while you hold an active Pro subscription, you forfeit it and we do not issue refunds (see our Terms of Service). Note that Google Play subscriptions are billed by Google and are separate from us — deleting your BeTenant account does not stop Google Play billing, so cancel any Google Play subscription first (in your Google Play Store account, or in the app under Account → My Subscription → Plans). Subscriptions paid through our web / PWA app (Stripe) stop when your account is deleted.

Exercising your rights is free. To make any other request, email privacy@betenant.com. We respond within one calendar month; for complex or numerous requests we may extend this by up to two further months and will tell you if we do. In line with the UK GDPR, we may only charge a reasonable fee based on our administrative costs, or decline to act, where a request is manifestly unfounded or excessive (for example, repetitive), or where you ask for additional copies of data we have already provided.

10. Security

We use TLS 1.2+ for data in transit and encryption at rest. Sign-in and passwords are handled by our authentication provider (Supabase), and row-level access controls mean users can only access their own data. We review our security regularly.

In the event of a breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay.

To report a security concern: privacy@betenant.com

11. Children

BeTenant is intended for adult tenants and is not directed at anyone under 18. We do not knowingly collect personal data from under-18s. If you believe someone under 18 has created an account, please contact privacy@betenant.com and we will remove it.

12. Changes to this policy

Material changes will be notified by email and via an in-app banner at least 14 days before taking effect. The "last updated" date at the top always reflects the current version.

13. Contact

For all enquiries including privacy, data requests, and security concerns: privacy@betenant.com

BeTenant is a product of Avanta Apps s.r.o. · Registered office: Sokolská 1883/8, Nové Město, 120 00 Praha 2, Czech Republic · IČO 297 84 310 · avanta-apps.com

Ready to protect your tenancy?

Join the BeTenant beta — free, no card needed.

Join the Beta →