TenantDesk
Last updated: 2026-10-22
TenantDesk is a personal rental-records tool provided by the independent developer identified in its App Store listing. It has no account service or developer-operated tenancy database. Tenancy details, addresses, rent and deposit amounts, lease dates and currencies, condition photos, rooms, maintenance requests, communications, documents, rental expenses and receipts, move-out tasks, and deposit records are processed locally on your device. Bundled state-rights references and local calculations do not submit your tenancy to a landlord, government agency, or developer-operated service.
Working records use the app's local SwiftData store and app-managed files. TenantDesk does not provide automatic account-based cloud sync. Ordinary iCloud or computer-managed device backups may include app data according to your Apple settings; those backups are separate from the app's portable tenancy archives. A usable completed backup is needed for any recovery through Apple's services.
Use the app's record or tenancy deletion controls to remove the corresponding local information, or remove app data to stop using the local archive. Deletion does not erase exported files, recipient copies, older device backups, or photos you separately saved elsewhere. We cannot remotely access or recover your tenancy records. Treat deletion as irreversible and preserve any needed copies first.
Camera access supports condition and evidence photos. Photo import reads the items you choose through the available system picker or permission flow; selected copies are stored in app records. Capture-date and location metadata can be retained with evidence. Optional when-in-use location access supports GPS-tagging condition photos. The current app does not upload the coordinates or photos to a developer-operated service for analysis.
Reports and files you export can contain photos, timestamps, addresses, or coordinates. Review the contents before sharing. The system Photos or Files provider may retrieve a selected item from your iCloud account, and any copies saved through Apple Photos can be handled under your system iCloud settings. Declining a permission limits the affected feature; manage permissions in iOS Settings.
The optional App Lock uses Apple LocalAuthentication for Face ID, Touch ID, or device-passcode authentication supported by the current device. Enabling it requests authentication; declining leaves it off. The app receives the result, not your biometric template or passcode. App Lock does not protect exported files, screenshots, or separately displayed widgets.
When you choose a deposit-deadline or move-out task reminder, the app can ask for notification permission and schedule a local alert. Alert text can describe the deadline or task and can appear on the Lock Screen according to your settings. There is no developer-operated push service. Change notification permission or visibility in iOS Settings. Delivery depends on system conditions.
A portable .tenantdesk archive contains the selected tenancy's structured records, photos, documents, receipts, and other supported embedded attachments. The format uses a JSON envelope with a checksum for integrity. The checksum and Base64 representation of embedded files do not encrypt the contents or password-protect them. Treat the complete file as sensitive information.
You choose the file's save or share destination. Import validates a selected archive and creates a new tenancy with new record identifiers, leaving existing tenancies unchanged. It does not merge into an existing tenancy or transfer scheduled reminders or notification permission. Review imported information and reconfigure reminders on the destination device.
Expense CSV and generated evidence or notice PDFs are separate readable exports. They can include personal, financial, housing, photo, or correspondence information. They are not a complete tenancy-archive restore. A cloud folder, email recipient, or other destination you choose handles its copy under its own practices. Nothing is automatically sent to the developer.
The Home Screen widget reads a local App Group summary that can include the tenancy nickname, address, days until the confirmed lease end, and open maintenance-request count. People able to view the widget may see that information. Control widget placement and device visibility settings separately from App Lock. The shared local snapshot is not a developer-operated tenancy upload.
The current Pro catalog includes an annual auto-renewable subscription and a lifetime non-consumable purchase. StoreKit loads products and verifies purchases, restoration, and entitlement status on your device. Apple handles payment; TenantDesk does not receive payment-card details or your Apple Account password. Restoring a purchase restores eligible access, not a tenancy archive.
Apple may make transaction, sales, or system diagnostic information available through its services and your Apple settings. See Apple's privacy policy. The current app has no advertising, third-party behavioral-analytics, attribution, session-replay, or third-party crash-reporting SDK.
Deleting a tenancy explicitly removes its matching rooms, condition photos, maintenance requests, documents, payments, communications, checklist items, move-out tasks and deposit-tracking records. Reminders are cancelled after a successful database save. Deleting a room alone does not erase separately stored condition photos linked by room identifier. Portable import validates the file and creates a separate tenancy with new identifiers; it does not update or replace the existing tenancy or revive an unsaved deletion. Removing the App normally removes its local container, not independently kept original media, exported files, recipient copies or older backups. Manage those copies separately. Device-backup recovery requires a usable completed backup; the developer has no record archive to retrieve.
These static pages are hosted by Vercel. Visiting can provide IP address, requested URL, browser or device information, and access time for delivery and security under Vercel's privacy notice. We have not added analytics scripts, advertising pixels, forms, or optional tracking cookies.
If you email support, we receive your email address, message, and any attachment you deliberately send. We use that information to respond, troubleshoot, prevent abuse, and meet legal obligations. Send only what is needed and remove tenant names, addresses, financial details, and private content from screenshots where possible. Records are not automatically attached.
Gmail processes support correspondence under Google's privacy policy. Email and hosting information may be processed internationally through their services. Support correspondence is retained as long as reasonably needed for its purpose or applicable obligations; you can request deletion by email. Providers may retain limited technical or backup records under their policies.
Depending on your location, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of information we hold, and to complain to a data-protection authority. Contact us about support information; proportionate verification may be needed. Use the app's own controls for records that remain on your device and manage exported or backup copies separately.
TenantDesk is not directed to children under 13 and does not knowingly solicit children's information through support. Contact us if a child has sent personal information so we can address the request. We may update this policy when the app or applicable requirements change, revise the date above, and provide additional notice when required.
captainlongevity@gmail.com · TenantDesk Support · Terms of Use
New photo, document, communication and maintenance forms close only after their database save succeeds. Failed saves report the problem and retain the open form input for retry; those temporary fields and selected bytes are not a durable backup and can be lost if the App closes. Cancel discards a form-only draft rather than rolling back unrelated shared edits. Existing isolated tenancy, expense and archive-import writes remain separate from other pending work.
Room and photo details, document or photo removal, room ordering and tenancy deletion now use checked writes. A failed destructive write restores the affected records and original stored attachment bytes in memory; the operation does not deliberately roll back unrelated drafts. A tenancy delete first reads all matching record groups and stops on a read error before deleting them. A failed database open shows recovery help while leaving existing files in place; this is not a guarantee that damaged data can be recovered. Do not delete or reinstall the App before checking available backups or contacting support.
Inspection notes and some move-out or deposit controls retain their existing live-edit behavior. A failed flush leaves pending values in memory and offers Retry Save; they have not yet been durably saved. Changing or canceling a local reminder is a separate system operation, so the scheduled alert can already have changed even if saving its local status fails. Recheck reminders after a failure. Photo and PDF selections can be subject to the existing per-flow limits and loading failures; review accepted attachments before leaving the screen.
Condition-photo imports keep their supplied image bytes and available capture/GPS metadata; no evidence-authenticity guarantee is made. Removing a room alone retains condition photos and inspection rows linked by their raw room identifier, which may no longer be reachable from that room. A successful tenancy deletion removes all ten matching record groups described above. External originals, exported archives, reports, recipient copies and earlier backups remain separate.