Privacy Policy
Last updated: 3 October 2026
1. Who is responsible
REALFINDO s.r.o., company number 22627936, Nademlejnská 1069/22, Hloubětín, 198 00 Praha 9, Czech Republic, is the controller for RealFindo. For privacy requests, contact gdpr@realfindo.com. For support or reports, contact info@realfindo.com.
2. Data and purposes
You can browse the catalogue, map and Reels without an account. A request to our service includes technical connection information, such as the IP address.
| Feature | Data processed | Purpose |
|---|---|---|
| Account and sign-in | Email, display name, account ID, optional profile picture, Apple/Google sign-in identifiers, session/device information | Create and secure the account |
| Email/password access | Email, password hash, verification/reset codes and their security records | Verify access and recover the account. We store an Argon2id password hash, not a plaintext password |
| Saved properties and searches | Selected listings, search conditions, account ID | Keep and notify you about what you saved |
| Publishing and profiles | Listing text, address, contact details, selected photos/video, profile pictures and agency logos | Publish and manage content you submit |
| Messages and enquiries | Message text, sender/recipient identifiers, contact information, property reference and language | Deliver messages and let an advertiser respond |
| Map and location | Search viewport and location used to centre the map | Find properties in the selected area |
| Notifications | Push token, device/account identifiers, notification choices and content | Deliver requested alerts and messages; optional property offers require a separate opt-in |
| Reports and safety | Reported content, complaint, account/contact information and moderation decisions | Investigate abuse and protect the service |
| Technical diagnostics | Connection, device and error information | Reliability, security and troubleshooting |
Published listings and public profile information are visible to other users. Property offers, investment-property announcements and new-development updates are an optional notification category, off by default. You can enable or disable it in the app's notification settings for this installation. These offers do not require advertising identifiers or disclosure of your private Findo chats to an advertiser.
Messages and enquiries are sent to the recipient you choose. That recipient, including an agency, may process the information independently under its own privacy policy. Do not put passwords, identity documents or unnecessary sensitive information into listings, messages or Findo requests.
Photos, video and location permissions
The app uses the system picker for media you choose to upload; selecting a file does not give us your whole photo library. Uploaded content is associated with your account and can be public when you publish it.
The map can request your current location when you ask it to centre near you. The visible search area is sent to our API; it may therefore reveal an area around your location. You can decline or revoke location permission in iOS Settings and search the map manually. We do not continuously track background location. Reels may contain video; uploading or viewing it is part of the property service.
Optional first-party usage analytics
We count listing impressions, openings and contact actions. With your separate permission, events may also carry an installation identifier and, while signed in, an account identifier. These are first-party analytics, not advertising tracking across other companies' apps or websites. Declining analytics does not prevent browsing or using Findo. Change this choice in Profile → Settings → Privacy. We do not use IDFA or advertising networks in the native app.
3. Findo and third-party AI
Findo is optional. In this version, our server sends AI requests through OpenRouter to Google Gemini. To interpret a search, compare properties, answer questions or prepare listing text, the request can include your message, relevant conversation context, search conditions and relevant listing details. If you put personal information in that text or listing, it may be shared too. We do not intentionally include your password, sign-in tokens or push token in AI prompts.
Before sending this information from the updated iOS app, we ask for your explicit permission. Permission for AI sharing is separate from analytics and from accepting the account terms. You can refuse and continue with the catalogue, manual filters, map and ordinary property features. You can revoke AI sharing in the app's AI privacy controls, available from the Findo tab and from Profile; signed-in users also find them under Settings → Privacy. Revocation stops future AI requests, but cannot recall a request already transmitted.
OpenRouter routes the request to the model provider. Processing may take place outside the EEA, including in the United States. Provider retention and handling are governed by the applicable service arrangements and their published policies; we do not promise zero retention or EU-only AI processing. See OpenRouter privacy and Google Cloud privacy. Contact gdpr@realfindo.com for questions about recipients and international transfer arrangements. If the recipients or scope change materially, the AI-sharing disclosure and permission version must be updated first.
Findo can be wrong. Check listing information, contracts and financial decisions with the advertiser or a qualified professional.
4. Legal bases and service providers
We process account, saved-content, publishing and messaging data to provide the service you request (Article 6(1)(b) GDPR). Optional linked usage analytics and optional AI sharing use your consent (Article 6(1)(a)); you may withdraw it. Security, fraud prevention, moderation and necessary diagnostics rely on our legitimate interests in a safe, functioning service (Article 6(1)(f)), subject to your rights. Legal obligations apply where records must be retained by law (Article 6(1)(c)). System location permission is also required for the device's location function.
We use Amazon Web Services for server/database and media infrastructure; the API/database infrastructure is configured in Frankfurt, EU. Webglobe handles service email, and Sentry handles technical error diagnostics. Apple and Google handle their own sign-in services; Apple handles iOS push delivery. OpenRouter and Google Gemini process AI requests as described above. Technical service providers may process limited connection information for delivery and security. We do not sell personal data or send it to advertising networks. We do not claim that every processor or every processing operation is located in the EU.
5. Retention and deletion
| Data | Retention |
|---|---|
| Active account, saved content and account settings | Until account deletion or removal of the content, subject to necessary legal/security records |
| Sign-in sessions | Until expiry, revocation or sign-out; security records can remain for investigation |
| Personal information in viewing enquiries | Erased by the automatic 12-month retention process, or on account deletion where linked |
| Identifying usage events | Kept for the configured 90-day period and subject to automatic cleanup |
| Aggregate listing counts without person identifiers | Can remain as statistics about the listing |
| Cached AI interpretations | Reused for up to 24 hours and removed by the cache cleanup process; request/usage limits also use temporary account or address identifiers |
| Conversations and published content | While needed for the service; deletion depends on ownership and other participants' records |
Findo conversation context can also be saved on your device. Deleting or starting a new local conversation affects that local history; it does not recall previously transmitted requests from providers.
You can delete the account in Profile → Settings → Account → Delete account. This removes the active account and related records and erases linked personal information in enquiries. In conversations retained for another participant, the departing sender's identifiers/display name are removed; text the recipient already received may remain. Personal information written inside message text may still identify you: contact us about a specific erasure request.
Account deletion is not a promise of immediate removal from backups, previous media-storage versions or records required for security or legal claims. Nor does it delete copies already received by an agency, another user or an AI provider. Contact us to identify additional content or copies requiring review. We assess retention against necessity and applicable law rather than treating those copies as a new purpose for using your data.
6. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting processing carried out before withdrawal. Write to gdpr@realfindo.com; we respond within one month unless GDPR permits an extension, in which case we explain it.
You can complain to the Czech supervisory authority, Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, or the authority where you live.
7. Security and age
We use TLS for transport, the iOS system keychain for sign-in secrets, hashed passwords and access controls. No security measure eliminates every risk. Accounts are for people aged 18 or older under our Terms. The service is not directed at children; contact us if a child's personal data needs review or removal.
8. Changes and contact
The date above identifies this policy. We update it when data flows change; material changes requiring new permission are disclosed before that processing. REALFINDO s.r.o. · gdpr@realfindo.com · info@realfindo.com