Information collected
Account information includes your Firebase account identifier, verified phone number, email or Google sign-in details, name and optional profile information such as age, occupation, institution, bio, profile photo and banner. You provide listing descriptions, prices, locations, photos, messages, attachments, viewing requests, reports and optional identity-review documents. We process saved homes, searches and listing interactions to operate discovery and report activity totals. Payment references, amounts, provider and approval records support membership delivery and dispute handling. We do not request payment PINs, OTPs, banking passwords or card security codes.
Device information and purposes
Our services and SDKs may process IP addresses, device and app information, identifiers, access logs, diagnostics and delivery tokens to authenticate users, deliver content and notifications, prevent fraud, troubleshoot failures and protect the service. Essential processing is needed to provide the service you request; optional personalization, marketing notifications, location and advertising choices can be managed separately. We do not sell account contact details or identity-review documents.
Public content and private conversations
Published listings, selected photos and approved public questions can appear on the website and in search engines. Public name and profile imagery can appear with listings, questions and participant profiles. Bio photos and profile fields you choose to publish may be visible to conversation participants. Do not put identity numbers or confidential contact or payment information in public content. Saved homes, payment records and identity documents are not public. Authorized support and safety reviewers can access relevant conversations and submissions; chats are not end-to-end encrypted. Rental agreement requests involving another member require their approval before their protected details are released into the document. Manual details remain the submitter's responsibility and must be shared with permission.
Permissions, maps and notifications
Location permission is optional and used in the foreground for nearby search or placing a selected pin. Approximate location is sufficient for nearby discovery; you can choose an area manually. Selected search coordinates may be sent to our service, and map requests are handled by Mapbox. We do not access location continuously in the background or pass selected precise coordinates to AdMob. Photos and videos are accessed when you select them for upload. Notification permission enables replies, visit reminders and service updates; reminder and promotional preferences are separate. Essential inbox information remains available with notifications disabled.
Advertising and rewarded boosts
The Android app uses Google AdMob and Google's User Messaging Platform where enabled. Google and its partners may process advertising or app/device identifiers, IP-based approximate location, ad interactions and diagnostics to deliver, measure and protect ads, subject to applicable consent choices. Native ads are labelled. Rewarded ads are optional: a random verification token and a pseudonymous account code are sent to Google to validate completion, prevent replay and award an in-app boost. Identity documents, chat contents and payment credentials are not sent as ad targeting data. Use Ad privacy choices in Preferences when available, and Android's advertising privacy controls to manage your choices. Non-personalized ads can still use data for delivery, measurement and fraud prevention.
Service providers and international processing
Firebase/Google support account sessions, Google sign-in and notifications; when phone sign-in is enabled, OneCodeSoft receives the destination phone number and SMS content to deliver our verification code. Our backend generates and checks the code; Firebase does not deliver these SMS messages. Supabase, Backblaze and our hosting/cache providers support storage and delivery; Mapbox provides maps; Google AdMob provides advertising; payment providers handle payments in their own systems. Providers may process information outside Bangladesh. We limit access according to service and safety needs, use encrypted transport and access controls, and log administrative actions. No storage or transmission system is completely secure. Google's privacy information is available at policies.google.com/privacy, and Mapbox's at mapbox.com/legal/privacy.
Retention and account deletion
Account data is retained while your account is active and as necessary to provide requested services. A deletion request disables the account and hides associated public listings immediately. The current recovery window is 30 days, followed by scheduled erasure no later than the 90-day deletion process described in the app. Restricted removed-content history is retained for up to 90 days for safety and dispute review. Identity photos and selfies have a separate consent deadline, currently a maximum of 30 days, and can be removed sooner on request. Limited transaction, fraud, audit or dispute records may be retained where required for legitimate security or legal obligations, with restricted access; request the applicable reason and retention information from support. Provider backups and third-party search caches may take additional time to expire and are not public account access.
Your choices and requests
You can edit profile information, remove uploads or listings, manage personalization, marketing and privacy preferences, request your available data export, request identity-file removal and delete your account from Preferences. The public Delete account page provides a support route if you cannot sign in. We verify account control before disclosing or erasing protected information; never send identity photos or credentials by email. Where applicable, you may request access, correction, deletion, restriction or withdrawal of optional consent. Withdrawing consent does not undo processing already lawfully completed. Contact basha@overspill.net for help or to raise a privacy concern.
Age and policy changes
The service is intended for people aged 16 or above and is not directed at children under 13. A person under 18 should use it with a parent or guardian's permission and must not enter a binding rental arrangement without appropriate adult authority. Contact us if a child has supplied information contrary to these rules. We publish revisions with an effective date and provide additional notice for material changes where required.
Fatima Apu and voice processing
Fatima Apu is an optional home-search service for adults aged 18 or over. By starting or using Apu, you agree to the processing described here. We send submitted messages, relevant conversation context, search requirements and submitted voice clips to Google Gemini, Groq, Cerebras, Mistral, Cohere, Fireworks or OpenRouter’s selected model providers to interpret your request. When you explicitly ask Apu to organise your account, relevant property enquiry text, viewing details, your listing drafts and selected preferences may also be processed by these providers. Common contact identifiers are removed from text where possible. Apu can prepare account changes, but messages, viewing changes, draft edits, publishing, deletion and preference changes require you to review the exact proposal and confirm in the app. Proposals expire after 30 minutes and are removed after seven days. Apu cannot change verified identity, passwords, payments or administrator settings. Voice transcription uses Google Gemini. Updated apps explain additional-provider processing before enabling it; older consent keeps text on Gemini. We use the configured free or evaluation allowances without automatically enabling billing. Availability depends on each provider’s quota and account terms. Provider privacy information is available on Google, Groq, Cerebras, Mistral, Cohere, Fireworks and OpenRouter’s official websites. Google may use submitted content and responses to improve its products, including human review, under its applicable API terms. Do not submit sensitive, confidential or personal information, identity documents, payment secrets or another person's confidential information. We remove common contact identifiers from text on a best-effort basis; this is not a guarantee of anonymity, especially for voice. Voice recording starts only when you choose it, lasts up to 30 seconds and is submitted when you stop; you review the transcript before searching. Basha Khojo does not retain voice clips after processing. You can type instead or leave Apu and use ordinary search. We store account-separated messages, requirements, usage and matching history to provide your inbox and ongoing searches. Model-independent context snapshots are encrypted in private Backblaze B2 storage; encryption keys remain server-side. This storage encryption does not make the conversation end-to-end encrypted. Automatic monitoring is optional, can be paused or stopped and uses your stated criteria without repeatedly sending them to the model. Account deletion includes context objects and all stored versions after the recovery window. Private visits and saves remain anonymous totals. If you choose “Let property owners contact me,” owners of homes you visit can see your public name, profile photo and latest visit time, and eligible paid owners can start an in-app conversation with you. This is optional and off by default; older private visits are not revealed. Turning sharing off in Privacy removes your shared visit profiles and stops new sharing. Repeated visits are grouped by person. Shared visit profiles are shown for 30 days and pruned by scheduled maintenance; deleted or disabled accounts are excluded immediately. Your phone number, email, saves and private conversations are not disclosed by this feature. You can block messages from a participant’s profile and report inappropriate content. Enquiries remain separate from passive visits.