DCApps

RentalBook Privacy Policy

Last updated: October 24, 2026

This Privacy Policy explains how RentalBook handles apartment, booking, guest, payment, pricing, expense, calendar, contact, speech, export, iCloud, and AI-credit data.

The server-managed AI credit and cloud AI gateway features described below apply to RentalBook version 1.4.4 and later. Earlier releases may use the previous cloud connection and local/iCloud credit-accounting behavior. Existing credit balances are handled as review claims when moving to the server-managed system.

1. Who Provides the App

RentalBook is provided by Dario Caric / DCApps. For privacy questions, support, or data deletion questions, contact:

dario.caric@gmail.com
Email Support

2. Data Stored on Your Device

RentalBook stores the data you enter in the app on your device using Apple's local app storage technologies, including Core Data and UserDefaults. This can include:

• Apartment names, capacities, prices, pricing periods, and calendar links.
• Bookings, arrival and departure dates, guest names, guest contact details, notes, payment status, booking totals, deposits, balances, discounts, and extra costs.
• Expense categories and expense entries.
• Voucher settings, business details, payment details, notes, addresses, phone numbers, email addresses, IBAN/SWIFT, and GPS coordinates that you choose to enter.
• App settings such as language, currency, setup state, iCloud restore markers, Google Gemini AI consent, a displayed copy of your server credit balance, pending AI request identifiers, and recovered AI responses. Earlier releases may also have stored local credit balances and purchase-processing markers.

3. iCloud, CloudKit, and iCloud Key-Value Storage

If you are signed in to iCloud and iCloud is enabled for the app, RentalBook syncs app data through Apple's private CloudKit database and iCloud key-value storage. This lets you restore data after reinstalling the app and use the same data on another device signed in with the same Apple ID.

iCloud-synced data can include apartments, bookings, pricing periods, costs, backup manifest counts, voucher settings and app settings, including cloud AI consent. Earlier releases also synced credit balances and purchase-processing markers. In version 1.4.4 and later, these old credit values may be read and submitted to DCApps as migration review claims; they cannot authorize AI spending.

If you choose to share a portfolio through an iCloud invitation, the invited participants can access the portfolio data you share, such as apartments, bookings, pricing and expenses. Portfolio sharing is separate from personal AI credit accounting.

DCApps does not operate the private CloudKit account. iCloud data is handled by Apple under your Apple ID and Apple's iCloud terms and privacy policy.

4. Cloud AI and On-Device AI

Cloud AI features use Google Gemini through a DCApps-operated gateway hosted on Google Cloud. These features include Chat, AI-assisted booking renewal predictions, voucher-note translation and reservation-policy translation. Before sending content for cloud AI processing, RentalBook asks for your consent. You can decline or withdraw consent later using the cloud AI consent setting.

When you use a cloud AI feature after giving consent, RentalBook may send:

• The text you type or dictate and submit, or the note or policy you ask to translate.
• Recent chat context needed to answer your question.
• Relevant apartment, booking, guest, payment, pricing, expense, calendar and voucher information needed to answer the specific request or perform the requested app action.

The gateway forwards this content to Google Gemini, which returns an answer or a structured instruction for the app. The gateway temporarily stores prompts and responses to complete queued requests and recover interrupted work. Closing the app does not necessarily stop an accepted request. Token usage, including thinking tokens where applicable, is used to calculate credit consumption.

Raw AI prompts and responses are not written to the credit-accounting database or application logs. Temporary content storage and retention are explained in section 12. Google's own processing is governed by its applicable terms and privacy policies.

When an on-device Apple Foundation or downloaded Gemma provider is active, AI requests are processed on your device and do not consume cloud AI credits. Cloud AI consent is separate from local AI use. Withdrawing consent prevents new cloud AI content submissions; it does not cancel work already accepted or delete previously retained records.

5. AI Credits, Purchases and Refunds

Apple StoreKit handles AI credit purchases. In version 1.4.4 and later, DCApps verifies Apple's signed purchase information on the server before delivering credits. Purchase identifiers and delivery records prevent the same purchase from granting credits more than once. The app finishes a purchase only after the server confirms delivery; interrupted deliveries can be retried.

Spendable AI credits are held in a server-managed wallet associated with Apple's verified app transaction identity. Local storage and iCloud balances cannot authorize spending. The service reserves credits before cloud AI generation, settles the charge using actual token usage and the configured credit rates, and releases unused reservations. Failed or abandoned requests with unknown usage return the reserved credits. Requests with known billable usage may consume credits even when no usable answer is returned.

Server records can include a wallet identifier derived from Apple's app transaction identity, purchase references and metadata, credit grants, reservations, charges, refunds, request status, token usage, app version information and migration-review records. A purchase-account identifier associates new StoreKit purchases with the appropriate wallet. Apple handles payment details; DCApps does not receive your payment-card details through StoreKit.

Apple may send signed refund and purchase-status notifications to the DCApps service. Refunded credits can be revoked. If refunded credits have already been spent, or a legacy refund needs reconciliation, further cloud AI spending may be paused pending review. Eligible new accounts may receive a one-time starter credit; eligibility is decided by the server. Old client-editable balances are review claims, not automatically accepted credits.

Apartment-plan subscriptions are separate from consumable AI credits. Apple processes these purchases, and the app uses verified StoreKit entitlements to determine the active apartment plan.

6. Contacts

If you choose to use the contact lookup feature, RentalBook requests access to Contacts so it can help fill missing guest phone numbers or email addresses. Contact data is read on your device for this purpose. The selected or matched phone number or email may be saved into the relevant guest or booking record if you choose to use it.

7. Microphone and Speech Recognition

If you use dictation in Chat, RentalBook requests microphone access. Speech recognition converts your voice into text for the chat input. The resulting text is treated like typed chat text. If Google Gemini AI consent is enabled and you send the message, that text may be sent to Google Gemini.

8. Calendar Links and Hosted .ics Publishing

RentalBook can store calendar links that you paste from booking platforms such as Booking.com, Airbnb, Expedia, or similar services. The app may fetch those links to display or sync booking availability.

If you enable app-generated calendar publishing, RentalBook may upload apartment calendar data to a DCApps server so booking platforms can fetch a public .ics calendar URL. These .ics files do not contain any sensitive data or guest names; they only contain the dates for which an apartment is booked. A public .ics URL can be read by anyone who has the link, so only enable publishing if you understand that booking availability data may be accessible through that URL.

9. DCApps Cloud Services and Security

DCApps operates the cloud AI gateway and credit service using Google Cloud and Firebase infrastructure. The current app does not download a Gemini provider secret. The service uses Firebase App Check with Apple App Attest, Apple's signed app and purchase information, and server-managed accounting to authenticate requests and protect balances.

Attestation data, verified transaction information, app version/build information and technical request data, such as IP addresses, timestamps and error/status information, may be processed or logged for security, fraud prevention, service reliability and support. The app also checks a minimum supported version for cloud AI. Ordinary apartment-management features and local AI remain available independently of that cloud AI version requirement.

These operational records are distinct from general app-usage analytics. RentalBook does not currently use the Google Analytics or Firebase Analytics SDK to measure app usage. If that changes, this policy and the relevant app privacy disclosures will be updated.

10. CSV Exports and Voucher PDF Exports

RentalBook lets you export reservation data as CSV files and generate/share voucher PDFs. These files are created on your device. Once you share or save an export outside RentalBook, that copy is controlled by the destination you choose, such as Files, Mail, Messages, another app, or another person.

11. Third Parties

12. Retention

Local app data remains on your device until you delete it in the app, delete the app or erase the device. Data synced or shared through iCloud is handled according to Apple's iCloud behavior, sharing permissions and your account settings.

On the DCApps cloud AI service, input payloads are deleted after processing where possible. Completed responses are available for recovery for 24 hours after completion. Temporary storage has an automatic deletion policy scheduled after one day; physical cleanup is asynchronous and may take longer. These limits describe DCApps-operated temporary storage, not Google's separate Gemini retention policies.

Wallet, purchase/refund, migration-review and request-accounting records are retained separately and have no automatic expiry. They are used to maintain balances, reconcile purchases and refunds, prevent duplicate delivery and abuse, and support reviews. They do not contain the raw AI prompts or responses. Technical security and service logs are subject to the hosting services' configured retention.

Recovered AI responses saved on your device remain until you clear them in Settings or remove the local app data. Data handled by Google Gemini, Apple, booking platforms or other third parties is also subject to those providers' applicable policies.

Hosted .ics calendar data, if enabled, remains available while hosted publishing is active. Contact DCApps if you need help removing a hosted calendar URL.

13. Deleting Your Data and Managing Consent

• Delete individual apartments, bookings, pricing periods, costs or voucher details inside the app.
• To remove local app data from a device, delete the app from that device. This does not automatically remove iCloud data, server credit records or data already shared elsewhere.
• To remove iCloud-synced data, delete it in the app and allow iCloud sync to complete, or manage app data through Apple's iCloud storage settings where available. Shared portfolios are also subject to their sharing permissions.
• To withdraw cloud AI consent, open RentalBook Settings and turn off the cloud AI consent setting. Ordinary apartment-management features and local AI remain available.
• Use the recovered-messages controls in Settings to clear locally saved recovered AI responses.
• To request deletion of server-held data or a hosted .ics calendar, contact dario.caric@gmail.com. For server credit requests, include the credit support reference shown in Settings if available. Some purchase, refund or security records may need to be retained to reconcile transactions, prevent repeat claims or meet applicable obligations. We will explain any relevant retention when responding.

14. Children

RentalBook is intended for apartment owners and managers. It is not intended for children.

15. Changes to This Policy

We may update this Privacy Policy when the app changes or legal requirements change. The updated policy will be posted on this page with a new "Last updated" date.

16. Contact

For privacy, support, consent, or deletion questions, contact:

dario.caric@gmail.com
Contact DCApps