Privacy Policy
CalcRealty - Real Estate Calculator
Effective date: October 23, 2026 (applies to the CalcRealty app from version 1.5.0)
The short version
- CalcRealty is run by RebixRise. This policy explains what the app and this website collect, why, who helps us process it, how long we keep it, and what you can do about it.
- Your calculations stay on your phone. We do not upload them to our servers.
- We do not sell your personal data, and the ads in the app are requested as non-personalized ads.
- You can edit your profile, turn off notifications, and delete your account from inside the app at any time.
- When you delete your account, a copy of your profile (never your password or sign-in tokens) is kept in a restricted archive for 5 years for legal and security reasons, then deleted.
Contents
- Who we are and what this policy covers
- Information we collect
- How we use your information
- Who we share it with
- Service providers we use
- Ads, analytics and crash reports
- Notifications
- How we protect your data
- How long we keep data
- Deleting your account
- Your rights and choices
- Minimum age
- Where your data is processed
- This website
- Changes to this policy
- Contact us
1. Who we are and what this policy covers
CalcRealty is a real estate calculator app operated by RebixRise ("we", "us"). This policy covers:
- the CalcRealty mobile app;
- the website calcrealty.com, including its short links (calcrealty.com/s/...);
- messages you send to our support channels.
Websites and apps you open from links in CalcRealty, and Google's own services (such as your Google account and Google ads), follow their own privacy policies.
2. Information we collect
2.1 When you create an account
- Name, email address, phone number and password
- Gender and account type (personal or professional)
- Job title, if you open a professional account
- Your app language
Your password is stored only as a one-way hash, which nobody, including us, can read or turn back into your password. We send a verification code to your email through our authentication provider to confirm the address.
2.2 Profile and work details you choose to add
- Date of birth and current city or area of residence
- Years and type of experience, specialization, working areas, education, languages
- Job opportunity status and preferred contract type
- How you heard about CalcRealty
- A profile picture chosen from the app's built-in avatars, or your Google profile photo if you sign in with Google
Verification badges are based on how complete your professional profile is (standard) or are granted by our team (premium). We do not ask you to upload identity documents.
2.3 If you sign in with Google
With your permission, Google shares with us:
- your name, email address and Google account ID;
- your profile photo link and basic profile details Google provides (such as given name, family name and language).
We check the sign-in token with Google to confirm it is genuine. We do not get your Google password and we do not access your Gmail, contacts or files.
2.4 Device and app information
When you create an account, the app sends:
- device name and model, operating system and version;
- a device identifier provided by the operating system for apps;
- screen size and resolution, device language;
- app version and build, the date the app was first opened, and the store it came from.
Each time you sign in or open the app while signed in, we update the app version on your account so we can tell you about required updates.
2.5 Notification token
If you are signed in, the app registers a push notification token from Firebase Cloud Messaging, together with the device identifier, platform, device name and model, OS version, app version and language. We use it only to deliver notifications to your device. Signing out unlinks the token from your account, and deleting your account deletes it.
2.6 If you use the app without an account
Guests can use the calculators without signing up. To count how often banners and pop-up messages are seen and tapped, the app sends:
- a coded identifier made on your device from the app identifier your phone's system provides. The original identifier never leaves your phone, and the coded one cannot be turned back into it;
- your platform (Android or iOS), app version and device model;
- which banner or message was seen or tapped.
The coded identifier stays the same if you reinstall the app. It changes after a factory reset on Android, or on iOS after you remove all of our apps. If your phone does not provide an identifier, the app uses a random one instead. If you later sign in, these guest records are linked to your account.
2.7 Things you send us
- Suggestions and feedback: your message, plus a copy of your profile details and device information (including the device identifier and connection type) so we can follow up and reproduce issues.
- Job posting requests: contact name, company name and type, location, phone, email, expected number of jobs, notes, and device information.
- Account deletion: the reason you pick and any feedback you write.
- Support: whatever you include when you email, WhatsApp or Telegram us.
2.8 Security records
When a sign-in attempt fails, we record the time, the IP address and the device identifier to stop password guessing. To limit abuse of guest counters, we keep a coded version of the IP address for 2 days.
2.9 What stays on your phone
- Calculation history: saved on your device only, encrypted, up to 200 entries. It is not uploaded to our servers. It is removed from the phone when you sign out or delete your account, and you can delete single entries at any time.
- Sign-in session: kept in your phone's secure storage. Your password is never saved on the device.
- A copy of your profile and settings: kept so the app works offline, and removed from the phone when you sign out or delete your account.
- Shared results: PDFs and images you share are created on your phone and go only where you send them.
2.10 What we do not collect
The app does not request access to your location, camera, microphone or contacts, and it does not read your photos.
3. How we use your information
- To run your account: sign-up, sign-in, email verification, password reset, profile and account type changes.
- To provide features: verification badges, job related features for professional accounts, notifications and in-app messages.
- To keep the service safe: detect password guessing and abuse, confirm requests come from the real app, and enforce our Terms (including blocking banned accounts from signing up again).
- To improve the app: usage statistics, crash reports, banner and message counts, and your suggestions.
- To keep the app free: showing ads.
- To contact you: about your account, required updates, support requests and, if notifications are on, news and offers.
- To meet legal duties: when the law or a valid order requires it.
5. Service providers we use
| Service | What it does for us | Privacy Policy |
|---|---|---|
| Supabase | Database, sign-in and email verification codes, server functions | supabase.com/privacy |
| Firebase Cloud Messaging (Google) | Delivers push notifications | firebase.google.com/support/privacy |
| Firebase Analytics (Google) | App usage statistics | firebase.google.com/support/privacy |
| Firebase Crashlytics (Google) | Crash and error reports | firebase.google.com/support/privacy |
| Firebase App Check (Google Play Integrity, Apple DeviceCheck) | Confirms requests come from a genuine copy of the app | firebase.google.com/support/privacy |
| Google AdMob and Google consent tools | Ads in the app and the ad consent form | policies.google.com/technologies/ads |
| Google Sign-In | Optional sign-in with your Google account | policies.google.com/privacy |
| Google Analytics | Website visit statistics | policies.google.com/privacy |
| Microsoft Clarity | Website session recordings and heatmaps (how visitors scroll and tap) | privacy.microsoft.com/privacystatement |
| Cloudflare | Hosts and protects this website and our admin tools | cloudflare.com/privacypolicy |
6. Ads, analytics and crash reports
6.1 Ads
The app shows full-screen and rewarded ads from Google AdMob. We request non-personalized ads, which are not based on your interests or past behavior. Google may still use your device's advertising ID and basic device information to limit how often an ad repeats, prevent fraud and measure ads.
Where the law requires consent (for example in the European Economic Area and the UK), the app shows Google's consent form first, and ads load only if they are allowed. You can reset or delete your advertising ID in your phone's settings (on Android: Settings, Google, Ads).
6.2 Usage statistics
Firebase Analytics records events such as app launches and the pages you open, with the app's device identifier, platform and account kind (guest, personal or professional). The consent choice from the ad consent form also applies to Analytics.
6.3 Crash reports
When the app crashes or hits an error, Firebase Crashlytics sends a technical report (device model, OS, app version and what the app was doing). We do not attach your name, email or account ID to these reports. Crash reporting starts when the app opens and does not depend on the ad consent choice.
7. Notifications
On Android, notifications are grouped into channels: General, Job opportunities (professional accounts only), Account and security, App updates, and News and offers.
- Turn all push notifications off with the "Enable notifications" switch in the app's Settings.
- Turn single channels off from your phone's notification settings (the app's Settings has a shortcut).
- Messages shown inside the app (the inbox and pop-up messages) are part of the app and are not affected by the push switch.
8. How we protect your data
- All traffic between the app and our servers is encrypted (HTTPS).
- Your sign-in session is kept in your phone's secure storage, and your calculation history is encrypted on the device.
- Database access rules limit each user to their own data, and sensitive records can only be read by authorized admins.
- App Check helps block requests that do not come from a genuine copy of the app.
- Passwords are stored only as one-way hashes that nobody, including us, can read. Passwords and sign-in tokens are never copied into archives.
No system is perfectly secure. If we learn of a breach that affects your data, we will act to contain it and tell you where the law requires it.
9. How long we keep data
| Data | How long |
|---|---|
| Account and profile | While your account exists |
| Sign-ups never confirmed by email | Deleted automatically after 7 days |
| Archive of a deleted account (see section 10) | 5 years after deletion, then deleted |
| Notification tokens and their device details | Deleted with your account, or after 270 days without activity |
| Notifications in your inbox | Deleted 180 days after the message is withdrawn |
| Push delivery records | 14 days |
| Failed sign-in records (with IP address) | 30 days |
| Guest banner and message records | Up to 365 days, or linked to your account if you sign in |
| Short link visit records (website) | 30 days |
| Suggestions and job posting requests | Until they are no longer needed, or until you ask us to delete them |
| Calculation history | On your phone only, until you delete it, sign out or delete your account |
10. Deleting your account
Open your profile in the app and choose Delete account. You confirm with your password, or by signing in with Google again. You can also ask us by email (see our account deletion page).
What happens next:
- Your account and sign-in are removed at once, together with your notification inbox and settings, banner and message records, job posting requests and account history.
- A copy of your profile (identity and contact details, profile and work details, device details, verification and ban status, and the reason you gave) is moved to a restricted archive that only senior admins can read. We keep it for 5 years for legal and security reasons, for example to handle disputes and to stop an account that broke our rules from coming back. It is then deleted.
- If the account was banned, its email and phone number stay blocked from creating a new account.
- Your password, sign-in tokens, notification token and Google access tokens are never archived.
- Your notification token records are deleted with your account. Suggestions you sent stay, unlinked from your account.
- Your calculation history and the account data cached in the app are removed from your phone.
11. Your rights and choices
- Access: ask us for a copy of the personal data we hold about you.
- Correction: edit most details yourself in Edit Profile, or ask us to fix them.
- Deletion: delete your account in the app, or ask us to.
- Objection and consent: turn off notifications, change ad consent where offered, or reset your advertising ID.
Send requests to support@calcrealty.com from the email on your account. We may ask you to confirm the account is yours before we act. Some data may be kept where the law requires it or as described in section 10.
12. Minimum age
CalcRealty is meant for people aged 18 or older.
We do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it.
13. Where your data is processed
Your data is stored and processed on servers operated by our providers (Supabase, Google and Cloudflare), which may be located outside your country. We use providers that apply recognized security standards, and this policy applies wherever your data is processed.
14. This website
- calcrealty.com has no sign-up and no forms, and it does not connect to our app database.
- We use Google Analytics 4 (measurement ID G-QMCMPY8SV7) to count page views and taps on the Google Play buttons. A tap is recorded with the button's place on the page and the campaign (UTM) values of your visit. Google Analytics uses cookies and receives your IP address and browser and device details, from which it reports an approximate location (such as country or city).
- Analytics is on by default. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics cookies are off and Google Analytics receives only cookieless signals. Advertising cookies, ad data sharing and ad personalisation are always off.
- We also use Microsoft Clarity (project s8b6hg4hla) to see how the site works for visitors. It records how you move, scroll and tap on our pages (session recordings) and combines visits into heatmaps and signals such as repeated taps on the same spot or a quick return to the previous page. Anything typed into a field is masked before it leaves your browser (the site has no form fields). Clarity receives your IP address and browser and device details, from which it reports an approximate location, and uses cookies to link the pages of one visit. It follows the same consent rules as Google Analytics: on by default, without cookies for visitors from the European Economic Area, the United Kingdom or Switzerland, and advertising storage always off. Recordings are kept for 30 days; recordings we mark as favourites, and a small random sample Clarity keeps, are kept for up to 9 months. Microsoft processes this data under its privacy statement.
- If you open the site from a link with campaign (UTM) values, your browser keeps them for that visit only (session storage, cleared when you close the tab) and adds them to the Google Play links, so we can see which campaign led to an app install.
- Apart from Google Analytics and Microsoft Clarity, fonts and all other files load from calcrealty.com itself.
- Cloudflare hosts the site and processes standard request data (such as IP address) to deliver and protect it.
- Short links (calcrealty.com/s/...) record the referring page, browser, device type and operating system of each visit for 30 days.
- You can block or delete cookies in your browser settings.
15. Changes to this policy
When we change this policy, we update the effective date at the top of this page. For important changes, we will also tell you in the app before they apply.
16. Contact us
Questions or requests about your privacy:
© 2026 RebixRise. All rights reserved.