Privacy Policy

Effective October 23, 2026 · Renter app policy version 1.2

This policy covers the renter app and public website, now named TourPad (previously KeyProof). For legacy property-management Tenancies and Bookings, see the preserved September 14, 2026 policy.

1 Scope and responsibility

Cedarline Technologies LLC operates the TourPad renter iOS app and associated public website. This policy covers saving rental properties, personal walkthrough documentation, reports, moving tasks, account services and optional provider links. Separately preserved privacy coverage for legacy property-management Tenancies and Bookings is linked below. Privacy questions and requests: [email protected].

2 Information and purposes

App records can include saved searches, areas, budgets, dates and preferences; property addresses, listing links, screenshots and facts; notes, questions, comparisons and selections; walkthrough and moving records. We use these records to provide the features you select. We do not describe all these records as automatically synchronized or cloud-backed.

Capture records can include photos, video, voice transcripts, room and condition notes, measurements and report contents. Depending on the capture path, media is processed and stored on the device and may be included in records you choose to share. Apple speech recognition processes recordings for transcription and is not guaranteed to remain entirely on the device. Recordings and temporary media can remain in app storage until removed through the applicable cleanup or deletion process.

Sign in with Apple requests your name and email and uses Apple identity information and a TourPad account identifier. Authentication sessions are stored securely on the device. An Apple authorization code can be exchanged by the backend for an encrypted token used to revoke Apple authorization during account deletion. That token is restricted to the account/deletion services and removed when deletion completes. We do not receive your Apple password.

We use support messages and attachments to answer requests and resolve account, safety and privacy issues. Hosting and account services process connection and diagnostic information needed to operate, troubleshoot and protect the service.

Optional AI extraction uses your configured Anthropic API key. When you request extraction, the app can send a selected listing screenshot or retrieved listing-page text to Anthropic to suggest property details. Review results before saving. Do not submit content you are not authorized to send. Anthropic’s terms and privacy practices apply to processing through your configured account.

3 Device processing and permissions

Records stored only on your device are not promised to be recoverable on another device. Signing in does not guarantee that all local records are uploaded. Cloud or sharing features send the information needed for those operations. Device backups may be controlled by your operating-system settings. Camera, photo library, microphone, speech recognition and other permissions apply to the features that request them; changing permissions can limit those features.

4 Sharing within TourPad

Exporting or sending a report discloses its selected contents to the recipients you choose. Features that share property records through TourPad use cloud services. Exported files, recipients’ screenshots and independently retained copies cannot be recalled by account deletion.

5 Partner referrals

Get settled links can lead to Lemonade, HireAHelper or other configured destinations. USPS change of address is a government service link, not an affiliate endorsement. Provider availability is checked against configured eligibility; country, region and postal eligibility checks in the offer catalog run locally. Providers collect information you choose to give them under their own policies. TourPad may earn a commission from affiliate links.

The app does not append names, email addresses, phone numbers, exact property addresses, internal account identifiers, walkthroughs, notes, photos or reports to offer URLs. It uses configured partner tracking URLs. Opening a provider site exposes connection information, such as IP address and browser information, to that site and redirect intermediaries. Providers may use cookies or other attribution technology under their own privacy notices. A referral code does not establish that all associated tracking is anonymous.

Checklist completion is independent of clicking an offer or making a purchase. Provider-site privacy choices are separate from device permissions and TourPad settings.

6 Service providers and other disclosures

We use Apple for authentication and speech services, Supabase for account and backend services, Cloudflare for the public website, and Anthropic for user-initiated AI extraction with a configured API key. These providers receive information needed for their functions. Independent offer providers and referral intermediaries receive traffic when you open their links. Information sent to service providers can be processed outside your state or country, subject to those providers’ infrastructure and applicable safeguards.

We may disclose necessary information to comply with law, protect rights and safety, investigate abuse or support a business transaction subject to applicable safeguards and notice. These purposes do not authorize unrelated advertising. We do not provide renter contact lists, walkthroughs or reports to affiliate partners as part of opening an offer.

7 Choices and retention

You can manage device permissions, edit records and choose whether to use optional extraction or open provider links. You can export records you want to keep before deletion.

Local records remain until you delete them, remove app data or use account deletion, subject to separately controlled device backups. We retain cloud records while needed to provide the services you use. Support and operational records are retained only as needed for their purpose, security, applicable legal obligations or resolving requests and disputes; this policy does not set a fixed backup-erasure deadline.

In Settings, choose Delete account and all data, type DELETE and confirm. Deletion removes your account, user-owned cloud records and uploaded media, and revokes the app’s Apple authorization. Your own shared comments and supplied shared content are deleted or cleared, rather than retained under a Former member label. Other users’ independently supplied content is preserved. On the requesting device, your account records, guest records and old unlabeled local data are removed; records identified as belonging to another account are preserved.

The app confirms completion after its backend and local cleanup checks succeed. If interrupted, it keeps a recovery mechanism to resume. A minimal operation receipt has account identity and user content removed and a configured 30-day expiry. Offline copies on other devices and separately controlled backups are not erased instantly. Exported copies and information supplied directly to providers remain outside our deletion controls. Contact us about information in separately governed legacy records or another person’s independent contributions.

8 Rights and requests

Depending on applicable law, you may have rights to access, correction, deletion, portability, withdrawal of consent, certain opt-outs or an appeal. Send requests or appeals to [email protected] with the subject Privacy. You do not need to create a new account. We verify requests proportionately, explain applicable exceptions and respond within applicable deadlines. We do not unlawfully discriminate for exercising privacy rights. You may complain to the relevant privacy regulator.

9 International processing security and age

We use safeguards appropriate to the information, including protected device authentication storage and encryption for backend Apple revocation tokens. No system is completely secure. TourPad is intended for adults who can agree to its Terms. Do not supply unnecessary information about children; contact us if you believe it has been provided.

10 Changes

We identify the policy version and effective date and notify you of material changes. Where a new purpose or disclosure requires consent, we obtain it before that processing. Continued use alone does not turn on an optional choice or authorize retroactive reuse of previously collected information.