Effective date: May 6, 2026
Amavera is a mobile application that helps tenants and property managers document the condition of a rental property through AI-guided photo capture and automated report generation. This policy explains what data we collect, why we collect it, and how we protect it.
Account information. When you create an account, we collect your email address and a password. Your password is hashed before storage and is never stored in plain text.
Property address. You provide a street address when starting an inspection. This appears on your report and is stored alongside your inspection data.
Inspection type and tenant name. When starting an inspection, you select an inspection type (move-in, move-out, or routine) and may optionally provide a tenant name. The tenant name is metadata that appears on the report and in your inspection history. It is limited to 60 characters and is entirely optional.
Photos. During an inspection, you capture photos of the property using your phone's camera. These photos are uploaded to our servers for AI analysis and are stored as part of your inspection record.
Inspection data. Our AI analyzes your photos to identify rooms, detect fixtures, assess conditions, and generate a written report. The analysis results, the generated report, and associated metadata (timestamps, coverage state, confidence signals) are stored in your account.
Report sharing and acknowledgement data. When you share a report via Amavera's acknowledgement portal, we generate a unique share link. When someone acknowledges a shared report, we collect their name, their role (landlord/property manager or tenant), a timestamp, their IP address, and browser user agent. This information is attached to the report as part of the acknowledgement record.
Inspection invitations. If a landlord or property manager invites a tenant to inspect a property, we collect the tenant's email address and the property address. Both parties receive email notifications related to the invitation.
Payment information. Payments made through the mobile app are processed through Google Play's billing system. Payments made through our website (such as credit bundle purchases by landlords) are processed through Stripe. In both cases, we do not collect, store, or have access to your credit card number, billing address, or other payment details. We receive a purchase confirmation from Google Play (verified through RevenueCat) or a checkout session confirmation from Stripe, which we store as proof of purchase.
Email communications. If you have a paid report, we may send you occasional emails related to your inspection (for example, a reminder that your lease end date may be approaching, or a notification that your shared report has been acknowledged). These emails are sent through Resend, our email delivery provider.
We use your data to operate Amavera and deliver the service you signed up for:
We do not use your data to train AI models. We do not sell your data to third parties. We do not serve advertising.
Amavera relies on the following third-party services to operate. Each processes some of your data as described:
Your data is stored in Supabase's managed PostgreSQL database and S3-compatible object storage, hosted on AWS infrastructure. All data is encrypted in transit (TLS/HTTPS) and at rest. Access to your inspection data is restricted by row-level security - you can only access your own inspections.
Photos are stored in a private storage bucket and accessed through time-limited signed URLs. They are not publicly accessible.
Your password is hashed using Supabase Auth's built-in hashing before storage. We cannot read your password.
Shared report links use unique, randomly generated tokens. Only people with the link can view the report. Share links do not expire by default but can be revoked by the report owner.
Your account, inspections, photos, and reports are retained as long as your account exists. Inspection reports are designed to be long-term records - both tenants and landlords may need them months or years after the inspection - so we do not automatically delete them.
If you delete an unpaid, unfinalized inspection through the app, the inspection record and its associated photos are permanently deleted.
If you want your account and all associated data deleted, contact us at the email address below and we will process your request within 30 days.
You can request access to, correction of, or deletion of your personal data by contacting us. If you are located in a jurisdiction with specific data protection rights (such as the EU under GDPR or California under CCPA), those rights apply to you and we will honor them.
Amavera is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this privacy policy from time to time. If we make material changes, we will notify you through the app or by email. The effective date at the top of this page indicates when this policy was last revised.
If you have questions about this privacy policy or your data, contact us at:
© 2026 Amavera. All rights reserved.