Domivio is a property app for Portugal: people buy, rent, sell, let and invest in homes and other property through it. The company responsible for your data (the "controller") is [company name], NIPC [number], registered office [address], Portugal.
For anything about your data, write to privacidade@domivio.pt.
This policy covers the Domivio app (iPhone, Android and web) and this website.
We only collect what a feature needs. The legal basis shown is our draft reading and will be confirmed by our lawyer. "Contract" means we need it to give you the service you signed up for; "legitimate interest" means a reasonable purpose of ours that you can object to; "consent" means only if you say yes, and you can withdraw it at any time.
| What | Why | Legal basis |
|---|---|---|
| Account: name, email, password, your role(s) and language | To create and run your account and sign you in. Your password is stored only in scrambled (hashed) form by our login provider. | Contract |
| Profile details you choose to add: phone, NIF, profile photo; for sellers, an AMI licence number | To complete deals and, for professionals, to show who is behind a listing. | Contract |
| What you are looking for: budget, areas, household, buying or renting intent, investor criteria, and the "from abroad" answers (where you live, whether you have a NIF) | To show matching homes, send the alerts you ask for and point you to the right guides. | Contract |
| What you do: saved homes and searches, offers, viewing requests, rental applications, deals and their steps, messages with the other person | To make offers, viewings, applications and deals work, and to show them to the other side. | Contract |
| Rental applications: move-in month, number of people, pets, length of stay, whether you can show income (yes or no), whether you can provide a fiador (yes or no) and your note | So the landlord can answer your application. We do not ask for your income figure. | Contract |
| Listings (sellers and landlords): property facts, photos, video, description, price and its history, rental terms, investment figures, and the exact address | To publish and manage your listing. The exact address is kept apart and shown only as described in section 4. | Contract |
| Documents you upload: for a listing (caderneta predial, certidão permanente, licence, energy certificate) or for yourself (for example passport, NIF, mortgage pre-approval) | So Domivio staff can check a listing's documents, and so you have them ready for a deal. | Contract |
| Homes you open | To show sellers how many people viewed a listing (they never see who), and, if "Suggest from homes I open" is on, to suggest an area or budget on your Home screen. | Legitimate interest; you can switch the suggestions off |
| Notifications, phone push token and email-alert records | To tell you about offers, viewings, messages and deals in the app, on your phone and by email, as you choose in Settings. | Contract |
| Searches you type | To improve search. Kept anonymously: no account is linked, only your role and language; emails, web links and long numbers (phone, NIF, IBAN) are removed before saving. | Legitimate interest |
| Messages you send us ("Help us improve", "Report this listing"), with the app version, phone type, role and screen | To fix problems and handle reports. The seller is never told who reported a listing. | Legitimate interest |
| Automatic listing checks | We check new and changed listings for signs of a scam (price far from the area's level, copied photos, risky wording). A check can only ask a person at Domivio to look; it never hides a listing or decides anything on its own. | Legitimate interest |
| Seller subscription (when paid plans start) | To charge for a subscription. Card details go to our payment provider and never reach us; we keep your plan, its status and the provider's customer reference. | Contract |
| Error reports from the app: what went wrong, app version, phone model and system | To find and fix crashes. | Legitimate interest |
| Your consent record: which version of these pages you agreed to and when, and your marketing yes or no with its date | To show what you agreed to. | Legal obligation |
| Marketing emails | Domivio news, only if you switch "News and offers by email" on. Off unless you say yes. None are sent at the moment. | Consent |
We do not sell your data, we do not show advertising, and the app has no advertising or analytics trackers.
Some Domivio features use artificial intelligence (AI): for example the Domivio chat, reading a search sentence, writing or translating a listing description, explaining figures, and the wording check on listings. When you use one, the text or information it needs is sent to Anthropic, PBC, an AI company in the United States, which processes it for us and returns the result. Anthropic acts only on our instructions under a data processing agreement and may not sell your data or use it for its own purposes. [Confirm in writing: Anthropic does not use this data to train its models; and how long Anthropic keeps it.]
What is sent. Only what the feature needs: for example the sentence you type, the facts and photos of a listing when a seller asks for a description, or figures already on your screen. We remove email addresses, phone numbers and long numbers from what you type before it is sent. We do not send your name, email address or phone number.
What we keep. We do not store what you typed to the AI or its answer, unless you save the result (for example a description you publish). We record that a call was made, for which feature, and its cost.
Your choice. AI features are optional. AI answers can be wrong; they are labelled, they are not advice, and nothing is sent, published or saved without your tap. AI never decides anything about you: it does not score tenants or remove listings.
During the test, AI features are switched on only for a short list of the founders' own accounts.
These companies process data only on our instructions, under data processing agreements. Where they are outside the European Economic Area, transfers are covered by the European Commission's standard contractual clauses or an adequacy decision [lawyer to confirm for each].
| Company | What for | Where |
|---|---|---|
| Supabase | Database, login, file storage and server functions: where your account and everything above is kept | Servers in London, United Kingdom (EU adequacy decision); Supabase Inc. is a US company |
| Resend | Sending emails (password reset, alert emails) | United States |
| Expo (650 Industries) | Delivering push notifications to your phone | United States |
| Sentry (Functional Software) | Error reports from the app | United States [confirm region] |
| Stripe | Seller subscription payments, when paid plans start | Ireland and United States |
| Anthropic | AI features (section 3) | United States |
| Cloudflare | Hosting this website | Worldwide network; Cloudflare Inc. is a US company |
| Geoapify, OpenStreetMap (Nominatim) | Turning a listing's area into a map position and counting nearby schools, health and transport. They receive the area name, not your personal data | Germany; United Kingdom |
Under the GDPR (RGPD) you can ask to see your data, correct it, delete it, receive it in a reusable format, restrict or object to its use, and withdraw consent at any time. Many of these work straight from the app:
For anything else, or a request on someone else's behalf, write to privacidade@domivio.pt. We answer within one month. You can also complain to the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados, www.cnpd.pt).
Updates about your own offers, viewings and applications always appear inside the app and cannot be switched off there, because they are part of the service.
Data travels encrypted (HTTPS). Every database table has rules that let each person read only what they are allowed to, and these rules are tested. Documents are kept in private storage. Staff access is limited to a separate staff login. If a breach puts your data at risk, we will tell the CNPD within 72 hours and tell you without undue delay where the law requires it.
This website sets no cookies, loads nothing from other websites and has no analytics. Our host, Cloudflare, processes your IP address and browser details to deliver the pages and protect them from attacks. The app does not use cookies; it keeps your sign-in on your phone.
Domivio is for people aged 18 or over. We do not knowingly collect data from children.
When this policy changes we update the version and date at the top and tell you in the app before the change applies to you.