Privacy notice

Last updated 10 November 2026.

Who is responsible

Appslinger Limited operates Brenira and is the data controller. Registered in Ireland, company number 828735. Registered office: 77 Camden Street Lower, Dublin 2, D02 XE80. To contact us, use our contact form or email hello@brenira.com.

While you build a record

Photos, notes and details stay in your browser on your device. They are not sent to us. Your draft is saved in this browser so you don’t lose it, and is removed when you clear it, after a paid report is confirmed, or after 30 days.

What this site keeps on your device

The site uses no cookies, no advertising trackers and no third-party analytics. It keeps nothing on your device for counting visits (see “How we count visits”). It keeps a few things in your browser so the service works as you asked: your draft photos and notes (for up to 30 days), your report or pass key after you buy, so you can return without typing it, your theme choice, whether you have seen the marking hint, and whether you joined the waitlist. They stay on your device until you clear them or your browser’s site data.

When you visit

Our host, Cloudflare, receives your IP address to deliver the pages and to slow down repeated attempts to upload, buy or contact us. We use it only for that, which is in our legitimate interest in keeping the service working and safe, and we don’t store it.

How we count visits

We count how many times the home page is opened and how many people reach each step: starting a record, adding photos, reaching the review, starting checkout and sharing the checklist. Each count is a daily total and nothing more. It uses no cookies, stores nothing on your device and holds nothing that identifies you: no IP address, no browser details and no identifier. If a link that brought you here carried a short source label, such as one for a video site, that label is added to the total. If your browser sends a Global Privacy Control or Do Not Track signal, we don’t count your visit at all.

If you buy a report

When you press Upload and continue, your browser first removes location data from your photo files. We then receive those files, a resized copy of each, your room labels, notes and marks, and any name, date or location you entered. We use them only to make and deliver your report, because that is the contract you asked for. We read only the date and time from a file’s camera details and never print the rest.

Home names, addresses and the landlord and tenant names on a report are stored encrypted with a key made from your report key. We keep only a hash of that key. Photos, notes and finished reports are in private storage but aren’t encrypted this way. We never sell or share addresses, and we don’t use them to build any property list or dataset. If you enter a tenant’s name, it’s deleted with the report.

We don’t ask for an account or your name. When you buy, we ask for one email address so we can send your order confirmation, which records what you bought and that you asked for immediate delivery. Consumer law requires that confirmation, so this is a legal obligation. The address is sealed with your report key, used once to send it, and then deleted. It is passed to Revolut with your order so their receipt reaches you, and to our email provider to deliver the confirmation. It never appears on your report. Revolut handles payment as a separate controller, and we never see your card details. We receive the order status from them.

Who processes the data

Cloudflare hosts the site and stores report files in private storage. Revolut processes payments. An email delivery provider sends the order confirmation. Some processing can happen outside the European Economic Area. Where it does, the provider relies on an EU adequacy decision or the EU’s standard contractual clauses; ask us for details. We don’t use advertising trackers or analytics on your photos and notes, and we don’t use them to train any system.

How long we keep it

Unpaid uploads are deleted within two days. Paid reports and their photos are deleted 90 days after payment. With a pass, they are deleted when it ends: 24 months after payment for a tenancy pass and 12 months for a landlord pass. You can delete yours sooner from Find my report. We keep a basic order record (order number, amount, date) for as long as accounting law requires. It contains none of your photos or notes.

If you contact us

When you use the contact form, we receive your email address, your message, the topic you choose and, if you give it, your report reference. We use them only to answer you, which is in our legitimate interest in replying to your question. The message goes straight to our support inbox, which our email provider hosts; it isn’t stored on Brenira’s servers or in our logs. We delete messages when they are no longer needed to answer you or to keep a record of an order or a request, and within 12 months at the latest. Never send your report key: we will never ask for it.

If you join the waitlist

If you ask to be emailed when downloads open, we keep your email address and which form you used, with your consent. We use it only for that email. It is deleted within 12 months of signing up, or sooner if you ask us. You can withdraw your consent at any time through the contact form.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, object to processing, and withdraw any consent you gave. Have your report reference ready, because we hold no other way to find your report. You can complain to the Data Protection Commission in Ireland.