Baantlo helps the residents of an apartment building record shared bills and work out who owes what. This policy explains exactly what the app stores, why, and how to get rid of it.
What we collect
We only collect what the app needs to do its job.
Your account
- Your name — shown to the other residents of your building.
- Your mobile number and/or email address — one of them is how you sign in, and a mobile number is how a building admin can add you to their building before you have signed up.
- Your password, stored only as a bcrypt hash. We cannot read it.
What you record in a building
- Building names, flat/unit labels and the names of residents you add.
- Bills: title, category, amount, date, and who each bill is split between.
- Payments: amount, date and an optional note.
Automatically
How we use it
Only to run the service: to sign you in, to show your buildings and their residents, and to calculate dues and monthly reports.
We do not sell your data, share it with advertisers, or use it to build a profile of you.
Who can see your data
- Other residents of a building you belong to can see your name, your unit label, the bills you are part of and what you owe. That is the point of a shared expense book.
- Nobody else. Your data is scoped to your buildings; residents of other buildings cannot see it.
Service providers
- MongoDB Atlas — hosts the database.
- Brevo — sends the password-reset email containing your one-time code. Brevo receives your email address for that purpose only.
We do not use any other third-party processor.
Security
- Passwords are hashed with bcrypt and never stored in readable form.
- Sign-in tokens are held in the device keychain (iOS Keychain / Android Keystore), not in ordinary app storage.
- All traffic between the app and our servers uses HTTPS.
- Password-reset codes are six digits, expire after 5 minutes, allow at most 5 attempts, and are invalidated once used.
Keeping and deleting your data
Your data stays until you delete it.
Deleting your account — open the app, tap your profile picture, and use Delete my account in the Danger zone. This immediately:
- deletes every building you created, along with its bills, payments, categories and member records;
- removes you from buildings run by other people, leaving their books intact;
- signs out every device you are signed in on.
You will be asked to settle any outstanding dues in someone else's building first, so that the other residents are not left covering your share.
Account deletion cannot be undone.
To delete your data without using the app, email hello@baantlo.com from the address on your account.
Children
Baantlo is not directed at children and we do not knowingly collect data from anyone under 13.
Changes
If this policy changes we will update the date at the top and, for anything material, tell you in the app.
Contact
Questions about your data: hello@baantlo.com.
Back to Baantlo