The short version: We collect your location data only for trips you classify as work-related. Personal trip routes are never stored. We never sell your data. You can delete everything at any time.
Who We Are
REPSPilot is a tax documentation tool for real estate investors. We help users track hours, trips, and activities to document Real Estate Professional Status (REPS) under IRC §469(c)(7). We are not a tax advisor.
What Data We Collect
- Account information: Your email address and name when you create an account.
- Precise location data: GPS coordinates when you drive to rental properties. This is the core feature — it allows us to automatically detect property visits and log trips. Location is collected in the background when you enable Autopilot tracking.
- Activity logs: Time entries, trip records, and property visit sessions you create or that are auto-detected.
- Calendar events: If you connect Google Calendar or Outlook, we read events to create draft log entries. We never modify your calendar.
- Evidence files: Photos, invoices, and documents you attach to log entries.
- Device identifiers: For push notifications and crash reporting.
- Usage data: How you use the app, for improving the product.
What We Do NOT Collect or Store
- Personal trip routes — if you classify a trip as personal, the route is immediately deleted and never stored.
- Location data during non-driving periods.
- Your contacts, financial account information, or passwords.
Background location: REPSPilot uses background location to detect when you drive to rental properties. Location data is only stored for trips you classify as work-related. Personal trips are discarded immediately.
How We Use Your Data
- To provide the core tracking service — detecting trips, logging visits, calculating IRS compliance tests.
- To generate IRS-compliant documentation for your CPA.
- To send notifications you have opted into.
- To improve the app through aggregated, anonymized analytics.
We Never Sell Your Data
We do not sell, rent, or trade your personal information to any third party. Ever.
Data Sharing
- Supabase: Secure database and authentication hosting.
- Sentry: Crash reporting (no personal data, no location).
- RevenueCat / Stripe: Subscription billing.
- ElevenLabs: Voice alerts (Autopilot tier only — text strings only, no personal data).
Data Retention
We recommend retaining your REPS records for 7 years, consistent with the IRS audit window. Your data is retained as long as your account is active. You can delete individual records or your entire account at any time.
Your Rights (GDPR / CCPA)
- Access: Request a copy of all data we hold about you.
- Deletion: Delete your account from Settings → Data & Privacy.
- Export: Download all your data as JSON from Settings.
- Opt-out: Disable background location at any time from Settings → GPS Tracking.
Security
All data is encrypted at rest using AES-256 and in transit using TLS. Row Level Security ensures users can only access their own data. Biometric authentication is available to protect app access.
Children
REPSPilot is not directed at children under 18. We do not knowingly collect data from anyone under 18.
Contact
For privacy questions: privacy@repspilot.app