Privacy & Data Policy

Last updated: May 2026  ·  Version 1.1

The short version

1. Who we are

BeTenant ("BeTenant", "we", "us", "our") is a mobile application and web service helping residential tenants in the United Kingdom document housing issues, understand their legal rights, and communicate with landlords and letting agents.

BeTenant is operated by [YOUR COMPANY NAME], registered in England and Wales, company number [YOUR COMPANY NUMBER], registered office at [YOUR REGISTERED ADDRESS].

We are the data controller of your personal data under UK GDPR and the Data Protection Act 2018. We are registered with the UK Information Commissioner's Office under registration number [YOUR ICO NUMBER].

Privacy contact: privacy@betenant.com — we respond within one calendar month.

2. What personal data we collect and why

2.1 Account and identity data

Full name, email address, password (stored as a secure hash — we never store your actual password), account creation date, subscription status.

Legal basis: Performance of a contract — Article 6(1)(b) UK GDPR.

2.2 Property and tenancy data

Full address of your rental property, tenancy start date, jurisdiction. We also derive and store an anonymised outward postcode (e.g. "M14") for use in our Aggregated Insights Programme (Section 8A).

Legal basis: Contract performance for your full address; Legitimate interests for anonymised area data.

2.3 Issue and evidence data

Issue titles, descriptions, severity, dates, photographs, and system-generated timestamps you create within the app. This is the core function of BeTenant. Your specific descriptions, notes, and photos are never shared.

2.4 Generated documents

Copies of formal letters and PDF reports generated through the app, stored so you can re-access and download them.

2.5 AI chat data (Ren)

Messages you send to Ren are sent to Anthropic's API for processing. Ren conversations are not retained after your session ends. We do not use your Ren conversations to train AI models, and Anthropic does not use them under our agreement.

2.6 Marketing data (with consent only)

If you opt in, your email address and engagement data (opens, clicks) for product updates and the Renter's Brief newsletter. You can unsubscribe at any time.

3. What we do NOT collect

4. Who we share your data with

We share data only with trusted service providers who process it on our behalf under UK GDPR-compliant Data Processing Agreements:

We may disclose data to law enforcement if legally required. We will notify you where permitted.

5. Data retention

Data typeRetention period
Account dataUntil account deletion, plus 30-day recovery window
Issue and evidence dataUntil deleted or account closed, plus 30 days
Ren chat conversationsCurrent session only — not retained
Customer support correspondence2 years from last contact
Payment transaction records7 years (legal obligation)
Technical logs90 days
Anonymised aggregated dataUp to 5 years (cannot identify you)

6. Cookies

The mobile app uses local storage for session management and preferences — strictly necessary for the app to function.

On our website, we ask for your consent before setting non-essential cookies. You can change cookie preferences at any time via "Cookie settings" in the footer. Full details are in our Cookie Policy.

7. Aggregated Insights Programme

BeTenant uses anonymised and aggregated data to help improve conditions in the private rented sector. Only category-level statistics are shared (e.g. "damp issues, M14 area, average resolution 28 days"). Your specific information, photos, descriptions, or full address are never included.

We apply a minimum cohort size of 50 users before generating any data point. You can opt out at any time in Settings → Privacy → Aggregated Insights Programme.

8. Your rights under UK GDPR

To exercise any right, email privacy@betenant.com. We respond within one calendar month.

9. Security

We use TLS 1.2+ for data in transit, AES-256 encryption at rest, bcrypt password hashing, Supabase Row Level Security (users can only access their own data), and two-factor authentication. We conduct annual security reviews.

In the event of a breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay.

To report a security concern: security@betenant.com

10. Children

BeTenant is not directed at children under 13. If you believe a child under 13 has provided data, please contact privacy@betenant.com and we will delete it. Users aged 13–17 may use BeTenant with parental involvement.

11. Changes to this policy

Material changes will be notified by email and via an in-app banner at least 14 days before taking effect. The "last updated" date at the top always reflects the current version.

12. Contact

Ready to protect your tenancy?

Join the BeTenant beta — free, no card needed.

Join the Beta →