This Privacy Policy explains how P and A LLC (“we”, “us”), a company registered in the Republic of Kazakhstan and trading as Panda LLC, handles your information when you use the RentStamp mobile application (the “App”) and the pages of this website about it.
It is written to describe what the App actually does, and it is kept in step with it. Where a claim here could be checked against the App’s behaviour, it is meant to survive the check.
Contact for privacy matters: privacy@pandallc.dev.
Nothing leaves your phone until you send a report
The walkthrough, the photographs, the checklists, the hashes and the PDF are all produced on your device. Until you tap Send to landlord or export the report, RentStamp makes no network request carrying your data at all, and there is no account.
The one exception is purchasing: the App asks our payments provider for current prices when it launches. That request carries store and product state only — no inspection data of any kind.
The account
Sending creates an anonymous account, so that the link belongs to you and you can see what happens to it. It holds no email address, no name and no password. We do not ask for them and we have no way to contact you through it.
What is uploaded when you send
- The report PDF. Note what the PDF itself contains, because uploading it uploads all of it: the property address, both parties’ names, the landlord’s email address and phone number if you typed them, the deposit amount if you entered one, every preview-resolution photograph, meter readings, key counts, appliance serial numbers, the furniture inventory, and the hash manifest.
- The report summary shown to the landlord: property name, address line, your name and your landlord’s name, the dates, the room, photo and defect counts, and the defect rows.
- For each photograph: its position in the report, its capture time, its SHA-256 hash, its size in bytes, whether it came from the camera or was imported, and its coordinates if you allowed location.
- A verification record holding only the Report ID, the manifest hash, the algorithm, the photo count and the dates — no address, no names, no photographs.
- Full-resolution originals, with their EXIF GPS embedded — only if you subscribe to the Evidence vault. Without that subscription the originals never leave the device.
What is never uploaded
- Voice notes. They are recorded to the App’s own storage; the report prints only that a note exists and how long it is. No upload path touches them.
- Documents you keep in the vault — your tenancy agreement, anything else you import — stay in the App’s private storage on the device.
- Full-resolution originals, unless you subscribe to the Evidence vault.
- Anything at all, if you never send a report.
Who can read what
| What | Who can read it |
|---|---|
| The report PDF and the summary | Anyone holding the share link. That is the point of it: possession of the link is the whole authorisation, so your landlord needs no account. Treat the link as you would the report itself. |
| The verification record | Public, by Report ID. It deliberately contains nothing personal, so the Report ID can be printed on the report and read aloud without exposing anything. |
| Your own copy of the report, and your originals | You alone, through your anonymous account. |
The Report ID never opens a report. Only the link does.
Location
Location is optional and off until you allow it. When you do, coordinates are written into each photograph’s EXIF block at the moment of capture, uploaded with that frame’s metadata when you send, and printed in the report’s photo index. The App requests accuracy to the nearest ten metres, which is still “precise” location. Everything in RentStamp works with location denied.
The landlord’s page on this site
When your landlord opens the link, the page records that the report was first opened, and — if they choose — that they confirmed it or left a comment. It records no IP address, no fingerprint and no identity for the visitor. Those events appear in your delivery status and in the report’s final block.
Analytics and advertising
There are none. No advertising identifier, no third-party analytics, no attribution SDK, no crash reporting SDK, no data broker. Nothing about you is shared with anyone for advertising or measurement, and RentStamp does not ask for tracking permission because it has nothing to track you with.
Who processes your data
| Processor | What it does | What it receives |
|---|---|---|
| Google Firebase | Anonymous authentication, database and file storage for sent reports | Everything listed under “What is uploaded when you send” |
| RevenueCat | Purchase and subscription management | Store and product state, purchase receipts, and its own identifiers. No inspection data. |
| Apple App Store | Payment processing | Handled under Apple’s own privacy policy; we never see card data. |
Some providers are located outside the European Economic Area and Kazakhstan. Where required, those transfers are protected by recognised safeguards such as the EU Standard Contractual Clauses.
How long we keep it
A sent report stays reachable by its link, on purpose: a report your landlord can no longer open is worthless to you in a dispute months later. Deleting an inspection in the App removes its local files. To have a sent report and its account deleted from our systems, use the data deletion page — you will need the Report ID, which is printed on the report.
Your rights
Depending on where you live — including under the GDPR and the law of Kazakhstan — you have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict certain processing. Because the account is anonymous, we identify a request by the Report ID and the share link; we cannot act on a request we cannot tie to a report. Write to privacy@pandallc.dev. If you are in the EU or EEA you may also complain to your local data protection authority.
Children
RentStamp is for adults entering into a tenancy and is not intended for children under 16.
This website
This site is static. It sets no cookies and runs no analytics or tracking, including on the page your landlord opens. Fonts and every other asset are served from our own hosting. Our hosting provider may briefly log IP addresses as part of normal operation.
Changes
We may update this policy as the App changes. The date at the top reflects the latest revision.