Bali Villa Checker — App Privacy Policy
This policy covers the Bali Villa Checker application on the web, Android and iOS. It is separate from the policy for tldapps.com, which covers our website only. Bali Villa Checker is published by TLD Apps.
The app works without an account. Your villas, defects, photos, inventory and bookings are stored on your device. Signing in and connecting Google Drive are both optional, and only needed if you want to work as a team.
01Data stored on your device
By default everything you record stays on the device: villa details, defects and their photos, inventory counts, spot checks, bookings, and any documents you generate. We cannot see it. Removing the app, or clearing its storage, deletes it — so export anything you want to keep.
02Camera, photos and location
- Camera and photo library. Used only to attach photographs to a defect, inventory item or inspection. Photos are not uploaded anywhere unless you sign in and enable Drive sync, or you share a report yourself.
- Location. If you allow it, the app reads your location while you are using it to stamp a photo with the coordinates and time it was taken, so an inspection record can be verified later. The coordinates are written onto the photo and stored with it. Location is never tracked in the background.
03Optional sign-in
You only need an account to create or join a workgroup — the feature that lets a team share villas and send reports to an owner. Sign-in uses Google. We store your Google account identifier, the email address on that account, your name as Google provides it, and any nickname you choose. Your email address is never shown to other members, in either direction — members see only a nickname or a short sharing ID.
04Google Drive
An owner may connect Google Drive so full-quality photos and generated documents are kept in their own Drive rather than only on a phone. When connected:
- Photos and documents are uploaded into a folder the app creates, organised per villa. The app
uses the
drive.filepermission, which grants access only to files the app itself creates — it cannot see anything else in your Drive. - Staff in a workgroup upload through our server, so files land in the owner's Drive and count against the owner's storage. Staff never receive the owner's Drive credentials.
- We store an encrypted access token so uploads can continue. Disconnecting Drive in the app revokes it. You can also revoke access at any time at your Google account permissions.
05Workgroups and sharing
If you join a workgroup, what you deliberately share reaches the other members: villa records, completed inspection reports, and messages you send in the app's chat. Managers and owners can see the team's reports; a staff member sees only their own. Direct messages are delivered only to the person addressed and the sender — no one else, including owners, can read them.
Completed spot-check reports are removed from a staff member's device four days after they have been delivered. The owner's copy remains until the owner deletes it.
06Anonymous usage and crash data
To understand whether the app works in the field we collect a small amount of anonymous information: a random identifier generated on the device, the app version, language, platform, operating system, device model and screen size, and the names of actions taken (for example "report generated"). Crash reports additionally include the error message and technical stack.
This contains no names, no email addresses, no photographs and no villa data. The identifier is random and is not linked to your account. You can switch this off in Settings → Share anonymous usage statistics.
07Feedback you send
If you use the in-app feedback form we receive your message and, if you choose to provide them, your name and email so we can reply. Both fields are optional.
08Who processes data for us
- Cloudflare — hosting for our API and database. Privacy policy.
- Google — sign-in and Drive storage, where you have chosen to use them. Privacy policy.
- Firebase Hosting (Google) — serves the web version of the app.
We do not sell personal information, and we do not use advertising or third-party tracking.
09Your choices
- Use the app without an account at all.
- Refuse or withdraw camera, photo and location permissions in your device settings — the app keeps working, with those features unavailable.
- Turn off anonymous statistics in Settings.
- Disconnect Google Drive, or leave a workgroup, at any time.
- Delete your account from within the app, which removes your account record from our systems. Files already in an owner's Drive belong to that Drive and are removed by its owner.
10Children
The app is intended for people managing property and is not directed at children under 13.
11Contact
Questions, or a request to access or delete your data: contact@tldapps.com.