Privacy Policy

1. Introduction

Trinova ("we", "our", or "us") is a housing estate management platform. This Privacy Policy explains how the Trinova mobile application (Android and iOS) handles information, and clarifies that all personal data belonging to residents, tenants, and estate users is managed through the Trinova back-office dashboard by estate administrators — not through the mobile app itself.

2. No data collection by the app

All resident, tenant, and staff records — including names, contact details, house assignments, and role designations — are created, updated, and managed by estate administrators through the back-office dashboard. The mobile app simply displays information that already exists for your account and lets you interact with estate services you are entitled to use.

3. How accounts work

• An estate administrator creates your account in the back-office dashboard using information you have already provided to the estate (e.g. on a tenancy agreement or visitor registration form).
• You receive sign-in credentials and use them to log in to the mobile app. The app itself does not collect or generate new personal data about you.
• If any account detail is incorrect, please contact your estate administrator — changes are made through the back-office, not the app.

4. Information the app handles

Although the app does not collect personal data, it does handle a small amount of technical information needed to sign you in and deliver the service:

• Authentication token — after you log in, a secure token (JWT) is stored on your device to keep you signed in. It does not contain your password.
• Firebase Cloud Messaging (FCM) token — a device identifier used to deliver push notifications. It is sent to the Trinova backend and associated with your account.
• Basic request metadata — standard information sent with any internet request (such as IP address and app version) when the app communicates with the Trinova backend.

The app does not track your behaviour, does not include third-party advertising or analytics SDKs, and does not sell any information to anyone.

5. Mobile app permissions

The app may request the following device permissions. Each is used only for the purpose described and can be revoked at any time from your device's system settings.

• Notifications — to display push alerts for visitor arrivals, events, invoice reminders, and estate announcements.
• Internet & network state — required so the app can connect to the Trinova backend.
• Camera / photos (optional) — only used if you choose to attach a photo to a report or message. Images are sent directly to the Trinova backend and are not used for anything else.

The app does not access your contacts, call logs, SMS messages, or background location.

6. Sharing & disclosure

The app does not sell or disclose user information to third parties. The limited technical information the app sends (authentication token, FCM token, request metadata) is transmitted only to:

• The Trinova backend — operated by Trinova and the estate that contracted the service.
• Firebase Cloud Messaging (Google) — solely to deliver push notifications to your device.
• Legal authorities — only when required by law, court order, or to protect the rights, property, or safety of users.

Because personal data about you is held in the back-office dashboard (not the app), any sharing of that data is handled by your estate administrator under their own data handling arrangements.

7. Data storage & retention

The app stores only the items needed for it to function on your device:

• Your authentication token, so you stay signed in between sessions.
• A locally cached copy of information shown in the app (e.g. your recent notifications or invoices) for faster loading.

Signing out of the app, or uninstalling it, removes this locally stored data from your device. Records held on the Trinova backend are retained by your estate administrator for as long as required to operate the estate and meet legal obligations.

8. Security

We apply industry-standard safeguards to protect information exchanged between the app and the Trinova backend:

• All communication is encrypted in transit using HTTPS/TLS.
• The app authenticates using expiring JWT tokens — not your password.
• Role-based access control ensures you only see information your account is authorised to view.
• The app does not include third-party advertising or analytics SDKs.

9. Your rights

Because the app does not hold your personal data directly, requests relating to your personal information — such as access, correction, or deletion — should be directed to your estate administrator, who maintains the back-office records on your behalf. Depending on your jurisdiction you may have the right to:

• Access the personal information held about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and personal data, subject to legal retention requirements.
• Object to or restrict certain processing activities.
• Lodge a complaint with a data protection authority.

If you are unable to reach your estate administrator, you may also contact us using the details below.

10. Push notifications

The app uses push notifications to deliver timely information such as visitor arrivals, events, invoice reminders, and estate announcements. Delivery is handled through Firebase Cloud Messaging using a device token linked to your account by the backend.

You can disable push notifications at any time from your device's system settings. Disabling notifications will not affect your account but may mean you miss important estate communications.

11. Children's privacy

The app is intended for use by adult residents, tenants, and authorised estate users whose accounts have been created by an estate administrator. The app itself does not collect information from anyone directly, including children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date at the top of this page. Continued use of the app after changes become effective constitutes acceptance of the revised policy.

13. Contact us

If you have questions about this Privacy Policy, want to exercise your rights, or wish to report a privacy concern, please get in touch.