Privacy Policy

Effective date: 8 July 2026

Chirie ("the platform", "we", "us") is a rental marketplace platform operated by WizMedia. This policy explains what personal data we collect through the Chirie mobile app and chirie.eu, why we collect it, and the rights you have over it. It is written to comply with the UK GDPR and the EU GDPR.

1. Who is responsible for your data

WizMedia is the data controller for personal data processed on Chirie. For anything in this policy, contact us at catanitoiu22@gmail.com or through the Contact Us section in the app.

2. What we collect

• Account data — name, email address, phone number, profile photo, preferred language, and sign-in identifiers (including Google or Apple sign-in tokens and one-time phone verification codes).
• Listings — property details, photos, prices, addresses and descriptions you publish.
• Messages — chats between renters, landlords and agents, including photos and voice notes you send.
• Documents and signatures — tenancy agreements, welcome packs, compliance certificates and other documents shared through the platform; when a document is signed electronically we record the signature image, the date and time, the IP address and device details, and a cryptographic fingerprint of the file, to make the signature verifiable.
• Deposit records — amounts, dates and protection-scheme references that agents choose to track.
• Verification data — information you submit when applying for a verified badge.
• Location — only when you grant permission, to show properties near you and to place your listing on the map.
• Technical data — device push-notification tokens, app version, and basic diagnostics needed to run the service.
• Payment data — subscriptions and boosts are processed by Stripe and by Apple. We never see or store your card details. We keep records of which plan you hold and your transaction history.

3. Why we process it (lawful bases)

• To provide the service (contract) — accounts, listings, search, chat, viewings, documents, e-signing, subscriptions.
• Safety and fraud prevention (legitimate interests) — verification badges, listing moderation, anti-scam warnings, report and block tools, audit trails on signed documents.
• With your consent — location access and push notifications; you can withdraw either at any time in your device settings.
• Legal obligations — keeping records we are required to keep, and responding to lawful requests.

4. Who we share data with

• Other users, by design — your listings, public profile, verified badge and messages are visible to the people you interact with. Signed documents are visible only to the parties of that document.
• Service providers (processors) — Stripe (payments), Apple (in-app purchases), Google Firebase (sign-in and push notifications), our hosting provider (Hetzner, data centres in the European Union) and our email delivery provider. Each processes data only on our instructions.
• We do not sell personal data, and the app contains no third-party advertising or tracking.

5. Where your data lives

Chirie's servers are located in the European Union. Where a provider processes data outside the UK or EEA, transfers are protected by adequacy decisions or standard contractual clauses.

6. How long we keep it

• Account data — for as long as your account exists, then deleted or anonymised within a reasonable period.
• Signed documents and their audit trails — up to 6 years after signing, because they may be needed as evidence of a tenancy contract.
• Chats — while your account is active or until deleted.
• Payment records — as required by tax and accounting law.

7. Your rights

Under the UK and EU GDPR you can ask us for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interests. You can delete your account directly in the app (Profile → Delete Account). To exercise any other right, email us — we respond within one month.

You also have the right to complain to a supervisory authority: the Information Commissioner's Office (ico.org.uk) in the UK, or your local data protection authority in the EU.

8. Security

All traffic is encrypted in transit. Signed documents are stored on private storage and are only reachable through authenticated, token-guarded access. Access to accounts uses per-device revocable tokens, and plan entitlements are enforced on our servers.

9. Children

Chirie is for adults. You must be at least 18 to create an account.

10. Changes

If we make material changes to this policy we will notify you in the app. The effective date at the top always tells you when it was last revised.