Privacy Policy

1. Scope

Villa Manager is a private mobile application for the operations of one villa. It is available only to villa owners, managers, staff and family members whose access is issued by an authorized administrator. This policy applies to the Villa Manager mobile application and its official informational website.

2. Who is responsible for the data

The operator of Villa Manager is Mykyta Tkachenko, Cyprus.

3. Data we process

Account and access data

• name;
• email address;
• phone number, if added by an administrator;
• user ID;
• role, villa membership and related permissions.

Operational data

• tasks, assignments, statuses and due dates;
• issue reports and their location within the villa structure;
• comments and discussions;
• photos attached to inspections, tasks or issues;
• activity and status history needed for operational and audit records.

Technical and notification data

• an app-installation device identifier linked to the account;
• device platform, app version and build number, and interface locale stored for an active push device;
• the villa locale and time zone needed to display dates and organize operations;
• device model and operating system version if a user includes them in a support request or they are available in limited service technical information;
• a Firebase Cloud Messaging (FCM) device token used to deliver push notifications;
• IP address and standard network-request information that Firebase and Google Cloud infrastructure may process during sign-in, data transfer and server-function invocations;
• limited Firebase service and diagnostic information, such as request time, errors and app or device state needed to operate, secure and maintain reliable infrastructure.

Villa Manager does not use advertising identifiers, advertising networks or cross-site tracking data. Limited Firebase diagnostic data is not used by the operator for advertising or user tracking.

4. How data is obtained

An authorized administrator provides profile and access data. Authorized users create operational records, comments and photos as they use the application. The app creates an installation identifier, Firebase creates an FCM token when notifications are enabled, and language and time-zone settings come from the app or villa configuration. A user may voluntarily provide a device model and OS version when contacting support. Standard network and limited diagnostic information is generated as the app and Firebase services operate. Not every technical field listed above is stored in the Villa Manager database.

5. How data is used

• to authenticate users and verify access;
• to assign, carry out and review tasks;
• to conduct daily inspections;
• to report, discuss and resolve issues;
• to maintain responsibility and activity history;
• to send relevant operational notifications;
• to provide security, support and comply with applicable obligations.

6. Firebase services

The application uses Google Firebase as a technical service provider:

• Firebase Authentication for email sign-in and session management;
• Cloud Firestore for profiles, memberships, tasks, issues, comments, activity history and the account-deletion request queue;
• Firebase Storage for photos that users attach to operational records;
• Firebase Cloud Messaging for push notifications and device FCM tokens;
• Cloud Functions for Firebase for trusted server operations, including recording an account-deletion request and delivering operational notifications;
• Firebase SDK and service infrastructure for limited technical information used to operate, protect and maintain reliable services.

When a server function is invoked, Firebase verifies the authenticated account context, while Firebase and Google Cloud infrastructure may process the IP address, request time and standard technical request information. The deletion-request record itself stores the user ID, request number and status, preferred language, request and update times, processing deadline and status history. It does not add a password, free-form reason, identity document, IP address or device model to that record.

Provider processing may take place in countries outside the user’s country under applicable contractual and other transfer safeguards.

7. Who can access data

Data is available only to authorized villa members according to their role and permissions, authorized administrators, and Firebase to the extent needed to provide infrastructure. We do not sell personal data or share it with advertising networks.

8. Retention

Profiles and access are generally retained while an account is active. After deactivation, a profile, access rights, installation identifier and FCM token may be removed. Operational and audit records may be kept longer in a minimal or de-identified form where needed for history integrity, security, dispute resolution or legal compliance. Photos are kept while needed for their related operational record or another lawful purpose. A limited record of the deletion request and its outcome may be retained as evidence that the request was handled. Service and diagnostic information is retained within the provider’s configured and applicable retention periods.

9. Security

We use authentication, role-based permissions and Firebase access rules to limit data handling. No storage or transmission method can guarantee absolute security.

10. Your rights and requests

Depending on applicable law, you may request access, correction, deletion, restriction or a copy of your data, and may object to certain processing. A signed-in user can create an account-deletion request directly in the app settings without contacting support. An authenticated server function records the request and deadline; retrying does not create a duplicate. Processing is completed within 30 days of the recorded request date, and access may be disabled sooner. If you cannot sign in, want to cancel a request that has not yet been completed, or your request concerns another right, contact support@autodrive.cy. We may need to verify the account email and villa membership, but we will not ask for your password.

11. Children

The application is not offered for open use by children and does not provide self-registration. Access is issued only by an authorized administrator for a private operational purpose.

12. Changes and contact

We may update this policy when the application or legal requirements change. The latest revision date appears above. For privacy questions, contact support@autodrive.cy.