Privacy Policy
Last updated: 26 August 2026
This policy describes how Bryce Cox, trading as Deedchest ("we", "us"), collects, uses, and protects your information when you use the Deedchest app and the deedchest.app website.
The short version: your property information is yours. We collect only what we need to run the service, we don't sell your data, and we don't show ads. You can export everything or delete your account at any time, from inside the app.
What we collect
Account information. Your email address and, if you sign in with Apple or Google, the name and email your provider shares with us. We never see your password when you use those providers.
Property information you add. Addresses, purchase details, loan and insurance details, valuations, key dates, notes, and any other data you record against a property.
Email sent to your property addresses. Each property you create gets a unique email address ending in @mail.deedchest.app. Any email sent to that address — including its content and attachments — is received, processed, and stored so we can organise it against your property. This includes information about the people who write to those addresses (for example, your property manager or insurer): their name, email address, and whatever they include in their message.
Documents. Attachments from those emails, and any files you upload, are stored so they can be filed against your properties.
Subscription status. When you subscribe, Apple processes the payment. We receive confirmation of your subscription tier and status — never your card details.
Device and usage basics. A push notification token so we can notify you of new mail, and standard technical logs (IP address, device type, timestamps) needed to run and secure the service.
Support correspondence. If you email us, we keep the thread so we can help you.
Notify-me list. Deedchest is out on the App Store; the Android version is not built yet. If you give us your email address on the deedchest.app website to be told when a version you can use is ready, we store that address, the date you gave it to us, the country your request came from, which platform you asked about, and — if you arrived from an ad — which ad it was. We use it to tell you when that version is available, and to measure which ads brought people in (see the advertising exception below). We don't add you to a newsletter and we don't sell the list. Ask us at any time and we'll remove you.
How you use the website. On deedchest.app we record which pages you look at, how far down you read, and which buttons you press, along with the usual technical basics — rough location from your IP address, your browser, and whether you arrived from an ad. We use it to work out which parts of the site are doing their job. We do not record your screen or what you type, we do not use it to build an advertising profile of you, and none of this happens inside the Deedchest app — the app itself carries no analytics at all.
What we use it for
To run the service: receiving and organising your property mail, filing documents, showing your property data, sending you notifications about activity on your properties, and transactional emails about your account and trial. To secure the service, fix problems, and understand aggregate usage. That's it.
What we don't do
We don't sell your data. We don't show ads inside Deedchest. We never share your property information, your documents, or your correspondence with advertisers — that stays between you and the people you invite, full stop.
One exception, and it applies only to the website. If you arrive from an ad and join the notify-me list, we tell the advertising platform that referred you (currently Meta) that a signup happened, and we send your email address as a one-way scrambled value — a hash — which they can match against their own records but cannot read or turn back into your address. We also send the IP address and browser the request came from, because that is what makes the match work. We do this for one reason: it is how a solo developer learns which ads are worth the money, and being able to reach anyone at all depends on it. It covers signups on deedchest.app only, never anything inside the app, and you can email us to have it switched off for you.
Otherwise we only disclose your information if the law genuinely requires it, and we'll tell you when we're allowed to.
Services we rely on
Like almost every modern app, Deedchest runs on established infrastructure providers who process data on our behalf:
- Cloud hosting — our database and file storage, located in Sydney, Australia.
- Email infrastructure — receives email sent to your property addresses and delivers the email we send you.
- Apple — sign-in (if you use Sign in with Apple), subscription billing, and push notification delivery.
- Google — sign-in (if you use Google), address search, the map and Street View imagery shown for your properties (when imagery is loaded, the property address is sent to Google to fetch it), and push notification delivery via Firebase. The deedchest.app website also loads its typeface from Google, which means your browser contacts Google to fetch it and Google sees your IP address in the process.
- Website and network infrastructure — serves deedchest.app and protects our network.
- Website analytics — measures how the deedchest.app website is used, so we can see which pages work and where people give up. Used on the website only, never inside the app.
Each provider only receives what it needs to perform its function, under agreements that protect your data. You can ask us for the current list of providers at any time.
People who email your properties
When a third party (like your property manager) emails one of your property addresses, we process their message and contact details as part of delivering the service to you. We use that information solely to display and organise the correspondence for you and anyone you've invited to the property — never to contact them for our own purposes.
Sharing and invitations
If you invite someone to a property, they can see that property's emails, documents, and data — that's the point of inviting them. They can't see your other properties. Think before you invite; you control the list.
Where your data lives
Your database and documents are stored in Sydney, Australia. Some providers process data overseas as part of delivering the service — for example email infrastructure in the United States, and Apple and Google under their own policies. Email addresses given to the website's notify-me list are held separately from your account data, on our website and network provider's distributed storage, which is not confined to Australia. By using Deedchest you consent to that handling. Our providers maintain industry-standard security and compliance certifications.
Retention, export, and deletion
We keep your data while your account exists. Archiving a property keeps its data but frees a subscription slot. Export gives you a portable copy of everything, any time, from inside the app. Deleting your account permanently removes your data from our production systems; residual copies in encrypted backups expire on our providers' rolling backup schedules.
Security
All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and credentialed. No internet service can promise perfect security, but we treat your property correspondence with the care we'd want for our own.
Your rights
You can access, correct, export, or delete your information at any time in the app, or by emailing us. If you're in Australia, you can complain to us first and then to the OAIC if we don't sort it out. If you're in the UK or EU, you have equivalent rights under the UK/EU GDPR, including complaint to the ICO or your local authority.
Age
Deedchest is for property investors and is not directed at anyone under 18.
Changes
If we change this policy in a meaningful way, we'll notify you in the app or by email before the change takes effect.
Contact
Privacy questions: hello@deedchest.app
Adapted from the Basecamp open-source policies, CC BY 4.0.