Privacy notice

Last updated 15 September 2026. This notice covers the LeaseLore mobile app, website, administration area and beta access request form.

Who operates LeaseLore

Buhane Information Technologies operates LeaseLore. For questions about personal information, access, correction or deletion, contact [email protected].

What this notice covers

The app lets people search homes, read and submit resident reviews, save homes, report content, and follow the moderation of their own submissions. The website provides product information, support, access requests and the administrator console. The public review experience is pseudonymous: a public review does not show your Firebase identity or sign-in email, but we keep an account link internally to operate moderation and prevent abuse.

Account and profile information

When you use Google, Apple or a guest account in the app, Firebase Authentication creates and manages the sign-in identity. LeaseLore receives a Firebase user identifier, the identity-provider type, and information necessary to manage the account. An email address may be handled by Firebase and, when made available by the provider, is represented in our service only as a one-way hash for account and abuse controls. The service stores a public alias, selected country and language preference, account status and account timestamps.

Guest accounts are still accounts for service security. They may be difficult to recover after you clear app data or change device. You can link a guest account to Google or Apple where the app offers that option.

Reviews, reports and private evidence

When you submit a review, we process the selected address and map coordinates, relationship and occupancy context, ratings, flags, optional review text, language, submission time and the associated account. Approved reviews, their score and permitted public review content may appear in the app. New addresses and reviews are checked before publication.

You can report a public review. We process the report reason, optional details, the reported review and the reporting account so that moderators can investigate it. Moderator decisions and controlled audit records are retained to protect the service and handle appeals.

Optional evidence files are private. The app accepts PDF, PNG and JPEG files for verification. Files are encrypted in storage, screened for malware, and available only to authorised moderators after the screening rules allow it. They are not published with a review. Evidence is configured for limited retention, currently 90 days unless it is removed sooner, rejected, or a lawful retention need applies.

Maps, search and location

We process the address, search terms, map viewport and coordinates you provide or choose in order to show maps, search locations and attach a review to a home. Device location is requested only when you choose the current-location control and grant operating-system permission. The app may use your connection country or device region to choose an initial language and map capital; this does not replace an address you actively select.

The configured map, tile and geocoding providers process requests needed to render maps and resolve locations. Those providers may receive technical request data, such as IP address, coordinates or search terms, under their own notices. The active provider is configured by the service and map attribution remains visible in the app.

Notifications and service operation

If you allow notifications, Firebase Cloud Messaging and the app process a device messaging token, platform and locale to send review-status updates. The token is not public. We also process technical request, security, rate-limit, audit and delivery records to operate, secure, troubleshoot and improve the service. We do not use review content or private evidence for advertising.

How we use and share information

We use information to provide the app, authenticate accounts, show and moderate reviews, maintain scores, process reports, protect against fraud and abuse, deliver requested notifications, respond to support requests and meet legal obligations. Access is restricted to people and service providers who need it for these purposes. We may disclose information where required to comply with law, enforce rights or protect people and the service.

Firebase services support authentication, remote configuration and optional messaging. Mapping and geocoding providers support location features. Hosting, email and security providers support the website and service. These providers process information on our behalf or under their own terms as applicable. We do not sell personal information or use it for cross-app behavioural advertising.

Optional analytics and cookies

If you choose Accept analytics, this website loads Google Analytics with measurement ID G-WBDNYSD6J0 to understand visits and improve the website. Rejecting analytics does not prevent you from using the website or signing in as an administrator. No Google Analytics tag is loaded until you opt in.

Analytics may process a cookie identifier, page visits, visit timing, approximate location and browser or device information. Google processes network information when receiving requests. Our page-view events use a fixed page name and omit URL query strings, fragments and referrers. We do not add account identifiers, email addresses, review text or form answers to these events. Advertising consent stays denied, and our tag configuration disables Google signals and advertising personalisation.

Google Analytics cookies named _ga and _ga_* are configured to expire after 180 days without automatic extension. The browser stores your analytics choice locally for up to 180 days; this preference storage is needed to remember the choice you make. Browser settings may shorten storage or prevent it entirely.

Use Cookie settings at the bottom of any page to change or withdraw your analytics consent. Withdrawal disables further analytics measurement and removes accessible Google Analytics cookies for this site. It does not delete data already received by Google. You can also clear your browser storage; we will ask again on your next visit.

Google provides the analytics service and may process data outside your country. See Google's privacy policy and how Google uses information from sites that use its services. Contact us for questions about processing arrangements, applicable transfer safeguards or retained analytics data.

Website delivery and administrator sign-in

Hosting and security services process technical request information to deliver and protect the website. Some pages request fonts from Google Fonts. These services are separate from optional analytics. Administrator sign-in uses Google and Firebase Authentication; sign-in storage is necessary for authenticated access and is not controlled by the analytics choice. Administrative actions are recorded by the service to protect the integrity of moderation.

Beta access requests

When you ask for beta access, we process the email address, selected launch country, consent timestamp and request source to manage beta access, assess market interest and send beta-related updates. The form includes a hidden anti-abuse field that is ignored unless it is completed by an automated submission. This information is not displayed publicly or sold. You can withdraw from the beta mailing list by contacting us. Form consent is separate from optional analytics consent.

Retention, deletion and security

You can delete an app account from Profile. The deletion flow removes the Firebase identity, withdraws your reviews from public display, removes saved homes and purges private evidence. The service marks the application account as deleted rather than promising to erase every protected operational record immediately. Limited records may remain in backups, audit, security, dispute or legal systems for as long as needed for those purposes. You can also request account or data deletion through support; we may verify ownership without asking for a password.

Beta access information is retained for beta operations and applicable recordkeeping requirements. Cookie expiry does not determine retention of records already held by us or Google Analytics. We use access controls, encryption for private evidence and appropriate technical measures designed to protect the service. No system can guarantee absolute security. Do not submit government identifiers, financial details, access codes or other unnecessary sensitive information in public text, support forms or review evidence.

Your privacy choices

Depending on your location and the processing involved, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to processing, and complain to your local data protection authority. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. Use Profile to manage review and account controls, Cookie settings to change website analytics consent, or email [email protected] to make a request.

International processing and changes

LeaseLore and its providers may process information in countries other than where you live. We use appropriate safeguards where required by applicable law. We will update this page when our processing changes and show the revision date above. Material changes to optional analytics purposes will require a new choice before those purposes are used.

Terms and contact

Using LeaseLore is also subject to the Terms of Use, including rules for reviews, moderation and reports. Questions, complaints, rights requests and moderation appeals can be sent to [email protected], for Buhane Information Technologies.