Privacy Policy

1. What information do we collect?

In short: We collect personal information that you provide to us, information from your building or agent, and limited technical information collected automatically.

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register, use the Services, or contact us. This may include:

• Name, email address and phone number;
• Date of birth;
• Password (stored only in hashed form) and account authentication data;
• Tenancy and building details such as your property, building, unit and role;
• Details of household members you add, such as their name, relationship to you, date of birth and contact details;
• Emergency contact details you choose to provide, such as that person's name and phone number (make sure you have their permission before sharing them with us);
• Content you submit, including maintenance and service requests and any photos you attach, visitor invitations, parcel records, event and giveaway participation, emergency reports, move-out requests, and messages.

Sensitive information

We do not intentionally collect or process special-category (sensitive) personal information such as racial or ethnic origin, health, or biometric data used to identify you. If you enable the optional biometric app lock, your face or fingerprint is processed entirely on your device and is never transmitted to or stored by us (see Section 6).

Payment information

If you are an account holder who subscribes to Reqzi (for example, a landlord or letting agent), payments are processed by Stripe. Card details you enter are transmitted directly to Stripe. We do not store full card numbers or bank details on our servers; we retain only limited payment metadata such as the card brand, the last four digits and transaction records needed for receipts and accounting. The Reqzi Resident app does not collect payments from residents.

Information automatically collected

In short: Some information, such as your IP address and device characteristics, is collected automatically when you use our Services.

This includes your device model and operating system, app version, IP address, a push-notification token, and log, diagnostic and crash-report data. This information is used to keep the Services secure, stable and working correctly, and for our internal analytics and reporting. It does not reveal your specific identity on its own. We do not use third-party advertising or cross-site tracking, and we do not use analytics that track you across other apps or websites.

Information collected from other sources

Residents are usually invited to Reqzi by their landlord, letting agent or building management, who may provide your name, contact details and unit so your account can be set up. We also receive limited payment confirmations from our payment processor when a subscription payment is made. Where information about you is provided this way, this Privacy Notice applies to our handling of it.

2. How do we process your information?

In short: We process your information to provide, improve and administer the Services, communicate with you, for security and fraud prevention, and to comply with law.

• To create and manage your account and keep it working;
• To deliver the Services and manage tenancies, maintenance and service requests, visitors, parcels and community features;
• To respond to your enquiries and provide support;
• To send administrative, service and security notifications;
• To enable communication between residents and their building management;
• To protect the Services, including fraud monitoring and prevention;
• To understand how the Services are used so we can improve them;
• To protect an individual’s vital interests, such as in an emergency;
• To comply with our legal obligations.

3. What legal bases do we rely on?

In short: We only process your personal information when we have a valid legal reason to do so under the UK GDPR and EU GDPR.

• Performance of a contract: to provide the Services to you or your organisation;
• Legitimate interests: to operate, secure and improve the Services, and to prevent fraud, where these interests are not overridden by your rights;
• Legal obligations: to comply with the law, respond to lawful requests, and keep required records;
• Vital interests:to protect someone’s safety in an emergency;
• Consent: where you have given it; you can withdraw consent at any time.

4. When and with whom do we share information?

In short: We share information only with the providers that help us run the Services, and with other users of your building where you choose to share. We do not sell your data.

We share personal data with the following categories of third-party service providers, who are contractually required to protect it and to process it only on our instructions:

Other users of your building. Content you submit is visible only to the people you share a tenancy, building or community with. For example, a maintenance request and its photos are visible to the relevant management team, messages are visible to the participants in the conversation, and community posts are visible within your community. We never make content you share within the Services publicly available.

Community giveaways.If you post an item on the community giveaways board, your name and unit number are visible to other residents of your community, and your email address may be shared with residents so they can contact you about the item. If you express interest in another resident’s item, your name, unit number and email address are shared with the resident who posted it so they can respond.

Business transfers and legal disclosures. We may share or transfer your information in connection with a merger, acquisition or sale of assets, or where required by law or to protect the rights, safety or security of users or the platform.

5. Do we use cookies and tracking technologies?

In short: We use only essential cookies to operate and secure the Services. We do not use advertising or cross-site tracking cookies.

On our website we use only the cookies necessary to operate and secure the Services, such as keeping you signed in and protecting your account. Our marketing website uses Vercel Web Analytics, a cookieless service that gives us aggregated page statistics without identifying you or tracking you across other sites. We do not use advertising or cross-site tracking cookies, and we do not permit third parties to place them on our Services.

6. Device permissions and on-device features

In short: The Reqzi Resident app requests only the device permissions it needs, and its biometric lock runs entirely on your device.

The app requests the following permissions. Each is optional and can be changed at any time in your device settings:

• Camera: to take photos you attach to maintenance requests and community giveaway listings;
• Photo library: to let you choose existing images to attach to requests and other content;
• Notifications: to send push notifications about your account, requests, visitors, parcels and building updates.

Biometric app lock. If you enable the optional app lock, your face or fingerprint is verified on your device by Apple Face ID / Touch ID or Android biometric services. Your biometric data never leaves your device and is never received, stored or accessible by us; we only receive confirmation from your device that the unlock succeeded.

7. Is your information transferred internationally?

In short: We may transfer, store and process your information in countries other than your own, with appropriate safeguards.

Our servers and some of our providers are located in the United Kingdom and the United States. Where personal data leaves the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and the European Commission’s Standard Contractual Clauses. Copies can be provided on request.

8. How long do we keep your information?

In short: We keep your information only as long as necessary, and generally no longer than three months after your account is terminated.

We keep personal data only for as long as necessary to provide the Services, meet legal, tax or accounting obligations, or resolve disputes. In general we do not retain personal data for longer than three months after your account is terminated, unless a longer period is required or permitted by law. When data is no longer needed it is securely deleted or anonymised; where it remains in secure backups, it is isolated from further processing until those backups expire.

9. How do we keep your information safe?

In short: We use appropriate technical and organisational security measures.

These include encryption in transit, hashed passwords, access controls, and tenant isolation so that each building’s data is kept separate. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. You should access the Services within a secure environment.

10. Do we collect information from minors?

In short: The Services are not directed to children, and children do not create their own accounts.

The Services are intended for use by residents, landlords and property staff, and are not directed to children. Children do not create or hold their own accounts. A resident may add household members to their account, who may include children; that information is provided by the adult account holder, not collected from the child directly. We do not knowingly let children register for the Services or collect personal data directly from a child. If you believe a child has provided us with personal data, please contact us at hello@reqzi.com and we will take reasonable steps to delete it.

11. What are your privacy rights (UK, EU, Switzerland)?

In short: In the UK, EEA and Switzerland you have rights that give you greater access to and control over your personal information.

These rights may include the right to: request access to and obtain a copy of your personal information; request correction or erasure; restrict the processing of your personal information; request data portability; and object to the processing of your personal information. Where we rely on your consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal.

To exercise these rights, contact hello@reqzi.com. We may need to verify your identity before responding. If you are in the UK or EEA and believe we have processed your personal information unlawfully, you have the right to complain to your local data protection authority. In the UK this is the Information Commissioner’s Office (ICO). In Switzerland you may contact the Federal Data Protection and Information Commissioner (FDPIC).

12. United States state privacy rights

In short: If you are a resident of California or another US state with a comprehensive privacy law, you have specific rights regarding your personal information.

Depending on your state (for example California, Virginia, Colorado, Connecticut, Utah and others), you may have the right to: confirm whether we process your personal information and access it; request correction or deletion; obtain a portable copy; and opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not use it for targeted advertising, so there is nothing to opt out of on that basis. We also do not use or disclose sensitive personal information for purposes that would require a right to limit.

The categories of personal information we collect and their sources and purposes are described in Sections 1, 2 and 4. In summary, over the past 12 months we have collected the following categories:

You also have the right not to be discriminated against for exercising your rights, and, in some states, the right to appeal our decision. You may use an authorised agent to make a request on your behalf. We do not offer financial incentives in exchange for personal information. To exercise any US state right, contact hello@reqzi.com; we will verify your request and respond within the timeframe required by your state’s law.

13. Controls for do-not-track features

Most browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. No uniform technology standard for recognising and implementing DNT signals has been finalised, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this notice. As stated above, we do not track you across other apps or websites.

14. How can you delete your account and data?

In short: You can delete your account and data at any time, directly in the app.

Once your identity is confirmed, we will delete or anonymise your personal data within 30 days, except where we are required to keep certain records to meet legal, tax or accounting obligations or to resolve disputes. Any remaining copies in secure backups are isolated from further use and removed when those backups expire. You may also review or update the information in your account at any time from the app or by contacting us.

15. Do we make updates to this notice?

In short: Yes, we update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top. If we make material changes, we may notify you by prominently posting a notice or by sending a direct notification. We encourage you to review this notice regularly.

16. How can you contact us?

If you have questions or comments about this notice, you may email us at hello@reqzi.com or contact us by post at: