Prop-Folio is a real estate underwriting tool for iPhone. We collect only what we need to run the app: your account email, the property details and assumptions you enter, your purchase status, and basic device and diagnostic data.
We do not sell your personal information, we do not show third-party ads, and we do not track your precise location. You can delete your account and data anytime from the in-app Account screen, or by emailing us.
We do use the anonymized, aggregated form of your inputs (with a k≥5 cohort floor that mathematically prevents re-identification) to power Prop-Folio for Business, our paid market-intelligence products. See section 8 for details.
1. Who we are
This Privacy Policy describes how Winchester Realty & Holdings LLC, an Illinois limited liability company doing business as Prop-Folio ("Prop-Folio," "Prop-Folio," "we," "us," or "our"), collects, uses, and discloses information when you use the Prop-Folio mobile application (the "App") and any related websites and services (collectively, the "Service").
By creating an account or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Service.
2. Information we collect
2.1 Information you provide
- Account information — the email address and password you use to register. Passwords are never stored in plain text; they are hashed and managed by our authentication provider.
- Property and deal data — the property addresses you import or enter, the unit mix, financing assumptions, renovation inputs, deal notes, and checklist items you create. This data is used to generate your analysis and is associated with your account.
- Support correspondence — the contents of any message you send to privacy@prop-folio.app, including your email address and any details you choose to share.
2.2 Information collected automatically
- Device and app information — device model, operating system version, app version, language, and time zone.
- Usage and diagnostic data — basic, aggregated information about how the App is used (such as which features are opened and whether errors occur), and crash and performance diagnostics used to keep the App stable.
We do not collect your device's precise geolocation, your contacts, your photos, or your browsing activity outside the App.
2.3 Information from third parties
- Property data providers — when you import or analyze a property, we send the property address to our data providers to retrieve property records, rent comparables, and value estimates. We do not send your account credentials with these requests.
- Apple & our subscription manager — we receive your subscription and purchase status (for example, whether you have an active Standard or Pro plan) so we can unlock the right features. We never receive your full payment-card number; all payments are processed by Apple.
- Address & mapping services — we use mapping and geocoding services to convert addresses into standardized locations for analysis.
- Bot-protection service (Cloudflare Turnstile) — when you sign up or request a sign-in link, our infrastructure sends limited technical signals (such as IP address, browser or device fingerprint metadata, and interaction data) to Cloudflare's Turnstile service so we can confirm the request is coming from a real person rather than an automated script. This data is processed by Cloudflare under its Turnstile Privacy Policy, is not linked to your Prop-Folio account by us, and is not used for advertising.
3. How we collect it
We collect information directly from you (when you register, enter property data, or contact support), automatically from your device as you use the App, and from the third-party data and infrastructure providers described in Section 2.3 and Section 6.
4. How we use information
- To provide, operate, maintain, and improve the Service.
- To create and secure your account and authenticate you.
- To compute and display property analysis based on the assumptions you enter.
- To process subscriptions and credit-pack purchases and unlock paid features.
- To respond to your support requests and communicate with you about the Service.
- To monitor, detect, prevent, and address technical issues, fraud, and abuse.
- To comply with applicable legal obligations and enforce our Terms of Use.
5. Categories of personal information
In the twelve months preceding the effective date of this Policy, we collect the following categories of personal information, as defined under California law:
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Identifiers | Email address, account ID, device identifiers, IP address | You; your device | Account creation, authentication, security |
| Commercial information | Subscription tier and purchase status (no card numbers) | Apple / subscription manager | Unlock paid features; billing support |
| Internet / network activity | App usage, feature interactions, crash and error diagnostics | Your device | Maintain stability, improve the Service |
| Other information you provide | Property addresses, deal assumptions, notes, support messages | You | Generate your analysis; provide support |
We do not collect sensitive personal information as defined by the California Privacy Rights Act (CPRA) — such as government IDs, precise geolocation, racial or ethnic origin, health data, or financial account login credentials.
6. How we share information
We share personal information only in the limited circumstances below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Service providers (subprocessors) — we work with vendors who process data on our behalf to run the Service, including providers of cloud hosting and authentication, subscription management, property and rent data, address/mapping, and bot-protection (Cloudflare Turnstile — see its Turnstile Privacy Policy). These vendors are permitted to use your information only to provide services to us.
- Legal and safety — we may disclose information if required by law, subpoena, court order, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Prop-Folio, our users, or the public.
- Business transfers — if Prop-Folio is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
7. What we don't do
- We do not sell or rent your personal information.
- We do not use your data to serve third-party advertising, and we do not embed third-party ad trackers in the App.
- We do not collect your device's precise location, contacts, or photo library.
- We do not receive or store your payment-card details.
8. Anonymized data products
Prop-Folio offers paid market intelligence products to businesses — see Prop-Folio for Business. These products use only aggregated, anonymized information derived from app usage. We never share rows that identify you or your specific properties.
8.1 What we aggregate
- The financial assumptions you enter into the App (rehab cost categories, rent values, scenario inputs).
- Property archetype information (ZIP code, property type, bed count, square footage band).
- Your in-app corrections to third-party estimates (for example, when you override an external rent estimate with your own).
8.2 What we strip before aggregation
- Street addresses, unit numbers, and any free-text notes.
- Photos and any images you upload.
- Account identifiers, device identifiers, and IP addresses.
- Your specific dollar inputs (we use only percentile bands at the cohort level).
8.3 The k-anonymity floor
No cell of aggregate data is ever surfaced in our B2B products unless the underlying cohort contains at least five distinct properties contributed by at least three different users. Cohorts that fall below this floor return "insufficient_cohort" instead of any value, mathematically preventing re-identification.
8.4 Your choice
By using the App, you grant Prop-Folio a non-exclusive license to use the anonymized, aggregated form of your inputs to power these B2B products. You may revoke this license at any time by deleting your account from the in-app Account screen, after which we will exclude your contributions from any future aggregation refresh. Aggregates already published in third-party reports cannot be retroactively recalled, but contain no information that could identify you.
9. Data retention
We retain your account and property data for as long as your account remains active. When you delete your account, we permanently delete or de-identify your associated personal data within 30 days, except where a longer retention period is required or permitted by law (for example, records needed for tax, accounting, fraud-prevention, or dispute-resolution purposes).
10. Security
We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and at rest, access controls that limit each user to their own data, and secure management of third-party credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your account by using a strong, unique password and keeping it confidential.
11. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate information.
- Deletion — request that we delete your personal information.
- Portability — request a portable copy of certain information.
- Opt out — opt out of any "sale" or "sharing" of personal information (note: we do not sell or share your information).
- Non-discrimination — we will not discriminate against you for exercising any of these rights.
To exercise any of these rights, email privacy@prop-folio.app from the address associated with your account. We may need to verify your identity before fulfilling your request. You may also use an authorized agent where the law permits.
12. California privacy rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights described in Section 10 above, including the right to know the categories and specific pieces of personal information we collect (see Section 5), the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We do not knowingly collect or sell the personal information of consumers under 16 years of age.
13. Other U.S. state rights
Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, and others) may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising, sale, or certain profiling. Because we do not engage in any of those activities, the primary rights available to you are access, correction, and deletion. To exercise them, contact privacy@prop-folio.app.
14. Children's privacy
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18, and the App is rated accordingly on the App Store. If you believe a minor has provided us with personal information, contact privacy@prop-folio.app and we will delete it.
15. Deleting your account
You can delete your account and all associated personal data at any time from Account → Delete account inside the App, or by emailing privacy@prop-folio.app. Deletion removes your profile, saved properties, assumptions, and notes within 30 days, subject to the limited exceptions in Section 8. Note that subscriptions are managed by Apple — deleting your account does not automatically cancel an active subscription, which you can cancel under Settings → Apple ID → Subscriptions.
16. Where we operate
The Service is intended for users located in the United States and is operated from the United States. We do not direct the Service to, or target users in, the European Economic Area or the United Kingdom. If you choose to access the Service from outside the United States, you do so on your own initiative and consent to the transfer and processing of your information in the United States, which may have data-protection laws that differ from those of your country of residence.
17. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you through the App or by email. Your continued use of the Service after an update takes effect means you accept the revised Policy.
18. Contact us
If you have questions about this Policy or how we handle your information, contact us at:
Winchester Realty & Holdings LLC
Email: privacy@prop-folio.app