Privacy

This Privacy notice explains how FlatTurno processes personal data when you use our marketing website, Company Desk, the Flatmate Android app, the Telegram bot, and related APIs. It is a working beta notice aligned with how the product works today. It is not a substitute for a counsel-reviewed policy. Contact: hello@flatturno.com.

FlatTurno is software for co-living operations. We are not a landlord or housing provider. For how you may use the service, see our Terms of use.

1. Who we are

The service is operated under the FlatTurno brand. Until a registered company pack is published here, rights requests and privacy questions go to hello@flatturno.com. The primary market for this site is Spain (flatturno.com).

2. Whose data we process

• Visitors — people who browse the site or submit the Contact form.
• Company staff — people with Company Desk accounts (reception, managers, and similar roles).
• Flatmates — people with Flatmate app accounts and/or Telegram flatmate links to a flat.

When a co-living company uses FlatTurno to run its flats, that company typically decides how to manage flatmates and household operations (controller for those operational purposes). FlatTurno provides the platform and processes data to deliver the service. For Contact forms and FlatTurno Support tickets addressed to us, FlatTurno decides how to handle the request.

3. What we collect

3.1 Accounts and profile

• Flatmate accounts: email, password (stored hashed), display name, optional phone/country, preferred language, session and refresh tokens, security events (for example IP and app version on login).
• Company staff: email, password (hashed), name, role, language, and Desk session information.
• Company organisation and billing profile: company name and codes, plan and capacity, billing/contact details, VAT or registration fields where provided, and payment-provider customer/subscription identifiers (not full card numbers — checkout is handled by the payment partner).

3.2 Household and operations

• Sites, flats, rooms, and flatmates (including Telegram user id when the bot is used).
• Chore turns and related actions (done, remind, skip/reassign where applicable), Away dates, bookings (TV/kitchen), and household economy entries (purchases, balances, settlements, shopping list).
• Tickets and messages: to company reception or to FlatTurno Support, including titles, bodies, and optional attachments within product limits.
• Household chat: the flat group, the building Reception group, and chats you start with other flatmates, including the text and photos you send.

3.3 Devices and notifications

• Push notification device tokens (for example Expo) when you enable notifications in the app.
• App/session metadata needed for security and support (device or session identifiers, client version).

3.4 Website Contact

Name (optional), email, message, audience (company or flatmate), topic/category, and optional company name. We store these as a Support ticket so we can reply.

3.5 What we do not do on www

The marketing site does not use advertising or analytics cookies. Language is chosen via the URL. Desk and Admin use essential session cookies (and related tokens) to keep you signed in. We do not sell personal data.

4. Why we process data (purposes)

• Provide and secure the service (accounts, flats, chores, bookings, economy, household chat, tickets).
• Company billing and plan enforcement (including payment partners).
• Customer support and product Support tickets.
• Security, abuse prevention, and audit trails.
• Improve reliability and fix bugs (including beta / launch tenants such as Blink).

Legal bases (to be confirmed with counsel for your situation) typically include performance of a contract, legitimate interests in running and securing a SaaS platform, and legal obligations for billing/tax records where applicable. Consent is used only where the product truly asks for it.

5. Who we share data with

• Hosting and database — FlatTurno runs on infrastructure we operate (application and Postgres). Exact hosting region may change; ask us if you need the current location.
• Payment partners — for example Paddle or Stripe for company checkout (they process payment data as described in their notices).
• Telegram — if you use the bot, Telegram processes messages under its own terms and privacy policy.
• Email delivery — transactional email may be sent through the SMTP provider configured for the platform.
• Push delivery — Expo (and underlying mobile push networks) when notifications are enabled.
• Your company — company staff with Desk access can see flatmate and ticket data for flats they are allowed to manage.

We do not sell personal data to third parties for advertising.

6. International transfers

Some providers (for example Telegram, push networks, or a payment partner) may process data outside the EEA. Where required, we rely on appropriate safeguards (such as the provider’s contractual clauses or other lawful transfer tools). Contact us for details.

7. How long we keep data

• Account and household data are kept while you use the service and as needed to provide it to your company or flat.
• Leaving a room or company soft-deactivates flatmate links; the Flatmate account may remain until deleted through Support.
• Some security and support records are kept longer for safety and dispute handling.
• In-app notification feed items may be cleaned up automatically after a retention window (currently on the order of months for read/archived feed rows).
• Database backups are retained for a limited operational window.

We do not yet offer a fully self-serve “delete my account” button in every client. To request erasure or a copy of your data, email hello@flatturno.com and we will handle the request manually under applicable law.

8. Your rights

If EU/EEA (including Spanish) data protection law applies, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with the Spanish AEPD or your local supervisory authority.

To exercise rights: hello@flatturno.com. We may need to verify your identity before fulfilling a request.

9. Children

Flatmate accounts are intended for users aged 16 or older (or the higher age required where you live), consistent with our Terms. Company accounts must be opened by an authorised adult.

10. Security

We use access controls, hashed passwords, session controls, and related measures. No method of transmission or storage is perfectly secure; please use a strong password and protect your devices.

11. Updates

We may update this notice as the product evolves. The version on this page applies from its publication date. Material changes will be highlighted here or in-product when practical.