Privacy Policy

Effective date: March 13, 2026 | Version 2.0

Badige ("we", "our", "the app") is a mobile application developed by Bits of Tessellate for rental property management, connecting landlords and tenants. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

• Account Information: Phone number, full name, email address, and profile photo.
• Property Information: Property addresses, house numbers, and rental agreement details.
• Payment Records: Rent payment amounts, dates, and payment proof images.
• Service Requests: Maintenance request descriptions and attached photos.
• Device Information: Device tokens for push notifications.

2. How We Use Your Information

We use collected information exclusively to:

• Authenticate your identity and secure your account
• Facilitate communication between landlords and tenants
• Track and manage rent payments
• Process and display service/maintenance requests
• Send push notifications and SMS reminders
• Generate payment reports and analytics for your dashboard

3. Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. Data is only shared between landlords and tenants within an active tenancy agreement, as required for the service to function (e.g., landlords can see tenant payment proofs, tenants can see landlord contact information).

No personal data is sold to any party. We have not sold personal information in the preceding 12 months.

4. Third-Party Services

We use the following third-party services to operate the app:

• Supabase — Database, authentication, and file storage. Privacy Policy
• Expo / React Native — App framework and build infrastructure. Privacy Policy

5. Data Storage & Security

Your data is stored securely on Supabase infrastructure with:

• Encryption in transit (TLS/SSL)
• Row-level security policies ensuring users can only access their own data
• Secure authentication via phone OTP verification
• Biometric authentication support for additional device-level security

6. Data Retention

We retain your data for as long as your account is active. You may delete your account at any time through the app (Settings > Delete Account) or via our web deletion page. Upon deletion, all personal data and associated records will be permanently removed within 30 days.

7. Your Rights

You have the right to:

• Access your personal data through the app
• Update or correct your profile information
• Delete your account and all associated data
• Opt out of push notifications and SMS reminders
• Request a copy of your data in a machine-readable format

8. Additional Rights for EEA/UK Residents (GDPR)

If you are in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation:

• Legal basis: We process your account data based on contractual necessity (to provide the rental management service). Payment records are processed based on contractual necessity and legitimate interest. Device tokens are processed based on your consent (opt-in to notifications).
• Right to object: You may object to processing based on legitimate interest.
• Right to withdraw consent: You may withdraw consent for push notifications at any time via app settings or device settings.
• Right to data portability: You may request your data in a structured, machine-readable format.

Cross-border transfers: Your data may be transferred to and processed in the United States (where Supabase infrastructure operates). These transfers rely on Supabase's standard contractual clauses and data processing agreements.

To exercise these rights, contact privacy@tessellate.co.in. We will respond within 30 days.

9. California Residents (CCPA/CPRA)

If you are a California resident:

• Right to know: You may request the categories and specific pieces of personal information we have collected.
• Right to delete: You may request deletion of your personal information.
• Right to opt-out of sale: We do not sell your personal information to third parties.
• Right to non-discrimination: We will not discriminate against you for exercising your rights.

Categories of personal information collected:

• Identifiers (phone number, name, email) — for authentication and communication
• Financial information (rent amounts, payment dates, payment proofs) — for payment tracking
• Property information (addresses, agreement details) — for property management

10. Indian Residents (DPDP Act 2023)

Data Fiduciary: Bits of Tessellate, contactable at privacy@tessellate.co.in.

Consent: By creating an account and verifying your phone number, you consent to the collection and processing of data as described in this policy. You may withdraw consent at any time by deleting your account.

Purpose limitation: Data is collected solely for the purposes stated in this policy and will not be used for unrelated purposes without fresh consent.

Children's data: Badige is a rental property management service not intended for persons under the age of 18 in India. We do not knowingly collect data from persons under 18 without verifiable parental consent.

Grievance Officer:

Name: Saptami
Email: privacy@tessellate.co.in
Response time: Within 15 days of receiving a complaint.

11. Children's Privacy

Badige is not directed at children. We do not knowingly collect data from persons under 13 (as defined by COPPA in the United States) or under 18 (as defined by India's Digital Personal Data Protection Act 2023). If we become aware that we have collected data from a child below the applicable age, we will delete it promptly.

12. App Store Privacy Details

Tracking: Badige does not track you across other companies' apps or websites. We do not use the IDFA or any device advertising identifier.

Data linked to you: Phone number, name, email, property addresses, payment records.

Data not linked to you: Device push notification tokens.

Data used to track you: None.

13. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date and version number. Continued use of the app after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this privacy policy or your data, please contact us at:

Publisher: Bits of Tessellate

Email: privacy@tessellate.co.in