Bali Villa Checker — App Privacy Policy

This policy covers the Bali Villa Checker application on the web, Android and iOS. It is separate from the policy for tldapps.com, which covers our website only. Bali Villa Checker is published by TLD Apps.

01Data stored on your device

By default everything you record stays on the device: villa details, defects and their photos, inventory counts, spot checks, bookings, and any documents you generate. We cannot see it. Removing the app, or clearing its storage, deletes it — so export anything you want to keep.

02Camera, photos and location

• Camera and photo library. Used only to attach photographs to a defect, inventory item or inspection. Photos are not uploaded anywhere unless you sign in and enable Drive sync, or you share a report yourself.
• Location. If you allow it, the app reads your location while you are using it to stamp a photo with the coordinates and time it was taken, so an inspection record can be verified later. The coordinates are written onto the photo and stored with it. Location is never tracked in the background.

03Optional sign-in

You only need an account to create or join a workgroup — the feature that lets a team share villas and send reports to an owner. Sign-in uses Google. We store your Google account identifier, the email address on that account, your name as Google provides it, and any nickname you choose. Your email address is never shown to other members, in either direction — members see only a nickname or a short sharing ID.

04Google Drive

An owner may connect Google Drive so full-quality photos and generated documents are kept in their own Drive rather than only on a phone. When connected:

• Photos and documents are uploaded into a folder the app creates, organised per villa. The app uses the drive.file permission, which grants access only to files the app itself creates — it cannot see anything else in your Drive.
• Staff in a workgroup upload through our server, so files land in the owner's Drive and count against the owner's storage. Staff never receive the owner's Drive credentials.
• We store an encrypted access token so uploads can continue. Disconnecting Drive in the app revokes it. You can also revoke access at any time at your Google account permissions.

05Booking emails and payouts

Money never appears in a calendar feed, so payouts are read from the booking confirmation emails a platform already sends you. This is optional, and there are two ways to do it. Both are off until you turn one on.

• Forwarding. The app gives you a private address of your own. Anything you forward there is checked — the platform's signature must verify — then read for the figures and discarded.
• Connecting Gmail. Instead of forwarding each one, you can authorise a small Google Apps Script, published by us, to look for those emails on your behalf. It runs inside your own Google account, as you, on an hourly schedule your account owns. It may be any Gmail account — it does not have to be the one you signed into the app with.

If you connect Gmail, this is exactly what it can and cannot do:

• It asks for gmail.readonly — read only. It can never send, reply, label, archive or delete anything, and it never looks in Spam or Trash.
• It only opens messages that pass every one of four checks: the sender's address is on a booking platform's own domain, Google's own sender verification (DKIM/DMARC) passed on delivery, the subject reads like a booking confirmation, and the body carries a reservation code. Everything else in your mailbox is left alone.
• Of those messages, only the subject and plain text are sent to us — no attachments, no message thread, no mail headers.
• We keep only the reservation code, the platform, the payout amount and currency, and the guest's first name. The message itself is never stored.
• Turn it off with Disconnect in the app, which stops it immediately. You can also revoke it yourself at your Google account permissions, without asking us.

Bali Villa Checker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

06Workgroups and sharing

If you join a workgroup, what you deliberately share reaches the other members: villa records, completed inspection reports, and messages you send in the app's chat. Managers and owners can see the team's reports; a staff member sees only their own. Direct messages are delivered only to the person addressed and the sender — no one else, including owners, can read them.

Completed spot-check reports are removed from a staff member's device four days after they have been delivered. The owner's copy remains until the owner deletes it.

07Anonymous usage and crash data

To understand whether the app works in the field we collect a small amount of anonymous information: a random identifier generated on the device, the app version, language, platform, operating system, device model and screen size, and the names of actions taken (for example "report generated"). Crash reports additionally include the error message and technical stack.

08Feedback you send

If you use the in-app feedback form we receive your message and, if you choose to provide them, your name and email so we can reply. Both fields are optional.

09Who processes data for us

• Cloudflare — hosting for our API and database. Privacy policy.
• Google — sign-in and Drive storage, where you have chosen to use them. Privacy policy.
• Firebase Hosting (Google) — serves the web version of the app.

We do not sell personal information, and we do not use advertising or third-party tracking.

10Your choices

• Use the app without an account at all.
• Refuse or withdraw camera, photo and location permissions in your device settings — the app keeps working, with those features unavailable.
• Turn off anonymous statistics in Settings.
• Disconnect Gmail or Google Drive, or leave a workgroup, at any time.
• Delete your account from within the app, which removes your account record from our systems. Files already in an owner's Drive belong to that Drive and are removed by its owner.

11Children

The app is intended for people managing property and is not directed at children under 13.

12Contact

Questions, or a request to access or delete your data: [email protected].