Privacy Policy

Last Updated: November 14, 2025

1. Introduction

HomeSure Property Management ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HomeSure Repairs mobile application ("App") and website ("Website"), collectively referred to as our "Services."

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

2.1 Personal Information

When you register for and use the App, we collect the following personal information:

  • Account Information: Full name, email address, phone number
  • Property Information: Unit number, property address, development/building name
  • Profile Information: User preferences and account settings

2.2 Service Data

When you use our Services, we collect:

  • Repair & Defect Reports (Snags): Descriptions of property issues, location within property, availability times, contact preferences, repair categories (e.g., plumbing, electrical, general)
  • Photos and Images: Photos of property defects or repairs that you upload through the App. These photos are:
    • Uploaded to and stored on Amazon Web Services (AWS) S3 secure cloud storage
    • Shared with your assigned property manager and contractors
    • Associated with snag reports and quotes for documentation purposes
    • May include metadata such as capture date and time (EXIF data is processed but not stored)
    • Retained for property management records and legal compliance purposes even after account deletion
  • Communications: Messages, comments, and notes exchanged through the App between residents, contractors, and property managers
  • Push Notification Data:
    • Device push notification tokens stored for sending updates
    • Notification preferences and settings
    • Notifications sent include: snag assignment updates, contractor status changes, quote submissions and approvals, comment replies, and appointment confirmations
    • Push notifications can be disabled through your device settings at any time
  • Location Data: For contractor users only, precise location is collected when:
    • Contractors manually click the "Arrived" button to confirm on-site presence at a property
    • Used solely to verify contractor arrival for scheduled appointments
    • Location is captured at a single point in time (not continuous tracking)
    • We do not collect location data in the background
    • Residents/tenants are not required to share location data
  • Quote Information: Contractor-submitted quotes, pricing details, work descriptions, supporting documents, approval status

2.3 Technical Information

We automatically collect certain technical information when you use our Services:

  • Device Information: Device type, operating system, device identifiers
  • Usage Data: App features used, time spent in the App, error logs
  • Network Information: IP address, mobile network information
  • Authentication Data: AWS Cognito authentication credentials, session tokens, email verification status, password change history (passwords are encrypted and not stored in plain text)

2.4 User Roles and Data Access

Our App serves different user types with varying data access levels:

  • Residents/Tenants: Can create snag reports, upload photos, view assigned contractors, communicate with property managers and contractors, view quotes and approval status
  • Contractors: Can view assigned snag reports, access resident contact information for assigned jobs, submit quotes, upload completion photos, communicate with residents and property managers, confirm arrival at properties
  • Property Managers: Have access to all resident and contractor data within their managed properties for administrative and coordination purposes

Information is shared between these user types as necessary for service delivery. For example, when a snag is assigned to a contractor, they receive access to the resident's contact information and property details.

3. Mobile App Permissions

Our mobile application requires specific device permissions to provide full functionality:

3.1 Camera Access

We request camera access to enable you to:

  • Take photos of property defects and damage directly within the App
  • Capture before/after photos for repair documentation
  • Document work completion for quotes and approvals

You may deny camera access, but you will need to use your device's camera app separately and upload photos from your photo library instead.

3.2 Photo Library Access

We request photo library access to enable you to:

  • Select and upload existing photos of property issues
  • Attach supporting documentation to snag reports and quotes
  • Upload photos taken outside the App

You can deny photo library access, but you will need to use the camera directly within the App to take new photos.

3.3 Location Services (Contractors Only)

We request "When In Use" location permission for contractor users to:

  • Verify physical presence at the property when clicking "Arrived"
  • Provide accountability for scheduled appointments
  • Confirm service delivery for property managers and residents

Location is only collected when the contractor manually confirms arrival. We do not track location continuously or in the background. Contractors can deny location permission, but they must confirm arrival through alternative verification methods.

3.4 Push Notifications

We request push notification permission to send you important updates including:

  • New snag assignments (contractors)
  • Contractor assignment notifications (residents)
  • Quote submission and approval updates
  • Comment replies and status changes
  • Scheduled appointment reminders

You can disable push notifications at any time through your device settings (Settings > Notifications > HomeSure). Disabling notifications may delay your awareness of important updates but will not prevent you from using the App.

4. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve our property management services
  • Repair Management: To process and coordinate property repairs and maintenance requests
  • Communication: To send you notifications about repair status updates, appointments, and service-related messages
  • Customer Support: To respond to your inquiries and provide technical support
  • Security: To protect against unauthorized access and ensure the security of our Services
  • Legal Compliance: To comply with applicable laws and regulations
  • Service Improvement: To analyze usage patterns and improve our Services
  • Authentication: To verify user identity and maintain secure access through AWS Cognito
  • Quote Management: To facilitate contractor quote submissions and property manager approvals

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 With Service Providers

  • Property Managers: Your information is shared with the property management company responsible for your property
  • Contractors: Repair requests and related information are shared with contractors assigned to fix reported issues, including your contact information, property details, and uploaded photos
  • Cloud Service Providers: We use Amazon Web Services (AWS) for:
    • AWS Cognito for authentication and user management
    • AWS S3 for secure photo and document storage
    • AWS hosting infrastructure for our backend API and database

5.2 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5.3 For Legal Reasons

We may disclose your information if required by law or in response to valid legal requests by public authorities.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption: Data is encrypted in transit using SSL/TLS protocols (minimum TLS 1.2)
  • Access Controls: Access to personal data is restricted to authorized personnel only with role-based permissions
  • Cloud Storage: Data is stored securely on Amazon Web Services (AWS) servers located in authorized regions with industry-standard security controls
  • Authentication: User accounts are protected with secure authentication through AWS Cognito, including password encryption, email verification, and session management
  • Regular Security Audits: We conduct regular security assessments and updates to protect against vulnerabilities

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

  • Account Data: Retained while your account is active and for up to 30 days after account deletion
  • Snag Reports and Photos: Retained for property management records, warranty purposes, and legal compliance even after account deletion. Typically retained for 7 years or as required by local property laws
  • Communications: Comments and messages are anonymized upon account deletion but may be retained for record-keeping purposes
  • Authentication Logs: Retained for security and audit purposes for up to 1 year

When your personal information is no longer needed for active service delivery, we will securely delete or anonymize it in accordance with our data retention schedule.

8. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: You can request access to the personal information we hold about you by contacting us at privacy@homesure.co.zw
  • Correction: You can update or correct your personal information through the App settings or by contacting us
  • Account Deletion: You can delete your account directly within the App (see details below)
  • Opt-Out of Notifications: You can disable push notifications through your device settings (iOS: Settings > Notifications > HomeSure)
  • Data Portability: You can request a copy of your data in a structured, commonly used format (JSON or CSV)
  • Withdraw Consent: You can withdraw consent for optional data processing by contacting us
  • Object to Processing: You can object to certain processing activities where we rely on legitimate interests

8.1 Account Deletion Process

You may delete your account at any time directly within the mobile application by following these steps:

  1. Open the HomeSure mobile app
  2. Navigate to Settings or Profile section
  3. Select "Account Settings" or "Delete Account"
  4. Review the deletion information and confirm your decision
  5. Enter your password to verify your identity
  6. Confirm the deletion request

What Happens When You Delete Your Account:

  • Immediately Deleted: Your login credentials and authentication tokens are revoked immediately
  • Deleted Within 30 Days: Your personal information (name, email, phone number, profile settings) will be permanently deleted from active systems
  • Anonymized: Your comments and communications will have identifying information removed but may be retained for record-keeping
  • Retained for Legal/Business Purposes: Snag reports, uploaded photos, quotes, and property records may be retained for:
    • Property management and warranty records
    • Legal compliance and dispute resolution
    • Financial and tax record requirements
    • Typically retained for 7 years as required by property management regulations

You will receive a confirmation email at your registered email address once the deletion process is complete (within 30 days).

If you encounter any issues with account deletion or have questions, please contact us at privacy@homesure.co.zw.

9. Children's Privacy

Our Services are not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information immediately.

10. Third-Party Services

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

Third-Party Services We Use:

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country of residence, including servers in regions where Amazon Web Services operates. By using our Services, you consent to the transfer of your information to countries that may have different data protection laws than Zimbabwe.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page with an updated "Last Updated" date
  • Sending a notification through the App or email for significant changes
  • Requiring acceptance of the updated policy for continued use of the Services (for major changes)

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiries within 30 days of receipt.

14. Data Protection Compliance

We are committed to complying with applicable data protection laws in Zimbabwe and internationally, including the General Data Protection Regulation (GDPR) where applicable. You have the right to:

  • Request confirmation of whether we hold your personal information
  • Request access to your personal information (data subject access request)
  • Object to the processing of your personal information for certain purposes
  • Request correction or deletion of your personal information
  • Request restriction of processing in certain circumstances
  • Data portability (receive your data in a machine-readable format)
  • Lodge a complaint with relevant regulatory authorities if you believe your rights have been violated

If you are located in the European Economic Area (EEA) or United Kingdom (UK), you have additional rights under GDPR. Please contact us for more information.

15. Apple App Store & Mobile Platform Compliance

This Privacy Policy complies with Apple App Store and Google Play Store requirements. Our mobile application:

  • Does not target children: Our Services are not intended for users under 18, and we do not knowingly collect children's data
  • Requires explicit permission: Push notifications, camera access, photo library access, and location services (contractors only) are requested with clear explanations
  • Secure data storage: All photos, documents, and personal data are stored securely using industry-standard encryption on AWS infrastructure
  • Transparent data practices: This Privacy Policy provides clear, accessible information about all data collection and usage
  • In-app account deletion: Users can delete their accounts directly within the App as required by Apple guidelines (see Section 8.1)
  • No hidden tracking: We do not use tracking technologies for advertising or cross-app tracking purposes
  • Privacy Labels: Our App Store listing includes accurate privacy labels declaring all data collection practices
  • Minimal data collection: We only collect data necessary for service functionality and property management

Camera and Photo Library Usage:

As declared in our App Store privacy labels and iOS permission prompts:

  • Camera access is used exclusively for capturing photos of property defects, repairs, and documentation
  • Photo library access is used only for selecting and uploading photos related to property management
  • Photos are not used for facial recognition, biometric identification, or any purpose beyond property management documentation
  • You can deny these permissions and still use the App with limited photo upload functionality

Location Services Usage:

  • Location permission is requested only for contractor users, not residents/tenants
  • "When In Use" permission is used (not "Always" or background location)
  • Location is collected only when the contractor manually confirms arrival at a property
  • Precise location is captured once per arrival confirmation, not continuously tracked
  • Location data is not shared with third parties for advertising or analytics