Privacy Policy - All In Home

1. Data controller

Owner: Delfor Massimiliano Bonifacio
Address: Carrer Progrés 217, Esc. D, 4th floor, 1st door — 08912 Badalona, Barcelona, Spain
Contact email: legal@allinhome.app

2. Data we collect

Registration and profile data

First and last name
Email address
Password (stored encrypted, never in plain text)
Profile photo (optional)
Phone number (optional)
Floor and door of the property within the community

Data generated by using the platform

Posts on the Notice Board
Reported incidents and their status
Marketplace listings
Neighbourhood Help requests
Parking listings
Participation in events and chats
Notification preferences

Technical data

Device push notification token
Application language
Access date and time

3. Purpose of processing

Manage access to and use of the All In Home platform
Enable communication between neighbours within the same community
Manage community incidents and notices
Send push notifications about relevant activity in your community
Notify the property manager about new incidents
Handle user enquiries and requests
Improve the service and user experience
Comply with applicable legal obligations

4. Legal basis for processing

Performance of a contract: processing is necessary to provide you with the All In Home service, in accordance with the Terms and Conditions accepted at registration.
Explicit consent: for sending push notifications and using a profile photo.
Legitimate interest: for improving the service and platform security.

5. Data recipients

Supabase Inc. — database infrastructure and authentication provider (servers in the EU).
Expo (Expo Go / EAS) — mobile application distribution platform, for sending push notifications.
Resend Inc. — transactional email provider.
Your community's administrator — will receive email notifications about incidents reported in their community.

Data will not be shared with third parties for commercial or advertising purposes.

6. International transfers

Some of our technology providers are located outside the European Economic Area. In these cases, transfers are carried out with appropriate safeguards under the GDPR, including standard contractual clauses approved by the European Commission.

7. Data retention

We will retain your personal data for as long as you keep an active account on All In Home. If you request the deletion of your account:

Your account will be marked as deleted immediately.
You have a 30-day grace period to recover it.
After 30 days, your identifying personal data will be permanently deleted.
Posts and content generated may be retained anonymously.

8. User rights

Under the GDPR and LOPDGDD, you have the right to:

Access: find out what personal data we process about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request the deletion of your data ("right to be forgotten").
Restriction: request that we restrict the processing of your data.
Portability: receive your data in a structured, machine-readable format.
Objection: object to the processing of your data in certain circumstances.

To exercise any of these rights, contact us at: legal@allinhome.app

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Data security

All In Home implements appropriate technical and organisational measures to ensure an adequate level of security, including:

Password encryption using secure algorithms.
Encrypted communications via HTTPS/TLS.
Data access restricted by roles and permissions (RLS).
Session tokens with automatic expiry.
Data storage on infrastructure with security certifications.

10. Cookies

The website allinhome.app uses its own and third-party cookies. For more information, see our Cookies Policy.

11. Changes to this privacy policy

All In Home reserves the right to modify this privacy policy to adapt it to legislative or case-law developments, or changes to the service. When changes are significant, we may request new explicit acceptance from users.