Kestrel ← kestrelautomation.ca
Landlo app icon Landlo for iOS

Privacy Policy

Landlo is a property-management app for landlords. It has no servers, no accounts, and no analytics — so there is very little to say here, and all of it is good.

Effective 1 September 2026 · Last updated 1 September 2026

The short version. Everything you type into Landlo stays on your iPhone and, if you're signed in to iCloud, syncs privately through your own Apple account. It is never sent to us. We have no way to read it. There is no advertising, no tracking, no analytics, and no third-party code in the app at all.

Who this is from

Landlo is built and published by Nima Beheshti, operating as Kestrel Automation, based in Canada. If anything here is unclear, write to nima@kestrelautomation.ca — it reaches the person who wrote the app.

What Landlo stores

Landlo only holds what you deliberately enter about your own properties. Nothing is gathered in the background. That typically includes:

Landlo never asks for a Social Insurance Number, Social Security Number, or EIN. The 1099 worksheets it generates leave every tax-identification field deliberately blank for you to complete by hand. It also never processes payments — rent records are bookkeeping entries, not transactions.

Where it lives

Landlo stores your records on your device. If you're signed in to iCloud, they also sync through your own private iCloud database, which is what lets the same records appear on your other Apple devices and survive a lost phone.

That iCloud copy belongs to your Apple account, not to us. We hold no key to it, cannot query it, and receive no copy or notification of it. If iCloud is unavailable — you're signed out, offline, or have iCloud Drive turned off — Landlo simply runs entirely on-device and keeps working.

Apple's handling of iCloud data is governed by Apple's Privacy Policy.

What Landlo never does

The one thing that leaves your device

When you use the address-lookup field to find a property address, the text you type is sent to Apple Maps to return matching suggestions. This is the standard iOS address-search service, it is subject to Apple's Privacy Policy, and it happens only while you are actively typing in that field. You can skip it entirely by filling the address fields in by hand.

Aside from that lookup and your own iCloud sync, Landlo makes no network requests whatsoever.

Permissions Landlo asks for

PermissionWhy, and what the app actually receives
Face ID / Touch ID Optional App Lock. iOS performs the check; Landlo is told only whether it succeeded. Your biometric data never leaves your device and is never available to the app.
Contacts Only when you tap "Choose from Contacts". iOS presents its own picker and hands back the single contact you select. Landlo cannot read, browse, or copy your address book.
Photos Only when you attach an image. iOS presents its own picker and hands back the specific photos you choose. Landlo has no access to your photo library.
Notifications Optional reminders for rent due dates, lease expiries and scheduled maintenance. These are scheduled locally on your device — there is no push server, so no reminder content is ever transmitted.

Files you export

Landlo can generate backups, CSV exports, lease agreements, notices, owner statements and tax worksheets. These are created on your device and handed to the iOS share sheet, where you decide what happens next.

Once you email, print, or save an export somewhere, it's governed by whatever service you sent it to, and it's outside Landlo's control. Exports can contain tenant names and contact details, so it's worth a glance at the recipient before sending.

A note about your tenants' information

Much of what you enter is personal information belonging to other people. Landlo is a tool you use to keep those records; you remain the one responsible for them. Depending on where you operate, that may carry obligations under privacy legislation — PIPEDA or its provincial equivalents in Canada, and various state laws in the United States — around how you collect, secure, and dispose of tenant information. Landlo doesn't change those obligations, and this policy isn't legal advice about them.

Keeping and deleting your data

Your records stay until you remove them. You're in control of all of it:

Because we never receive your information, there is nothing for us to delete on your behalf, and no request you need to send us to make deletion happen.

Children

Landlo is a tool for managing rental property and isn't directed at children. It doesn't knowingly collect information from anyone under 13.

Changes to this policy

If Landlo ever changes in a way that affects this policy, the updated version will be posted here with a new date at the top. Material changes — anything that alters where your data goes or who can reach it — will also be described in the app's release notes rather than quietly amended here.

Contact

Questions, concerns, or something that reads wrong to you: nima@kestrelautomation.ca.