Privacy policy

Controller and scope

The publisher and controller for developer-managed processing is Blacksunset OÜ, Estonian registry code 16513658. Contact: info@blacksunset.ee.

Hariduse põik 1, Kõrveküla alevik, Tartu vald, Tartu maakond, 60512, Estonia.

If you email support, the studio processes your email address and message only to answer the request and meet applicable legal obligations.

Data handled by the app

• You may enter property addresses, names and areas; purchase and loan information; income, expenses and deposits; tenant and other contact names, phone numbers and email addresses; lease dates; maintenance notes; photos and documents. Vara processes these records on your device to display your portfolio, calculate summaries and arrears, and create requested exports. These can contain other people’s personal information. Include only information you are entitled to manage.
• Selected files are copied into private app storage. Their original bytes and any metadata still present, including image date or location, may remain in attachments and backups. Vara does not remove all photo metadata or use it to track your location.
• Interface language, regional settings and the time of the last successful export are kept locally. If you contact info@blacksunset.ee, we and our email/IT providers receive the address, message and attachments you send to answer your request. Do not send a full rental backup when a short description is sufficient.

Permissions

• The app has no internet permission and does not request access to your complete contacts, photo library, location, microphone or phone-call history. You select files through Android’s document picker. Camera capture opens a camera app and receives the image you take. A cloud document provider may use its own internet connection.
• Opening a saved phone number, email address, document or this privacy policy invokes another app. Sharing grants the selected receiving app temporary access to the chosen exported file. The information you send is then handled by that app or recipient.

Storage and security

• Records use a local SQLite database and attachments use private app files. Vara relies on Android’s app isolation and device protection; the database is not separately encrypted by Vara. Use a secure device lock. Automatic Android cloud backup and device transfer are disabled for app data.
• Full .vara backups contain your portfolio, settings and attachments. Password protection is optional: when enabled the backup is encrypted with AES-256-GCM; without a password it is readable. CSV exports are readable and unencrypted. Keep passwords separately; the publisher cannot recover them or records held only on your phone.
• Restoring replaces the current portfolio after a preview and your confirmation. A local safety copy of the previous state is retained in the same phone without a separate password. Earlier attachment generations, recovery files or temporary shared exports can also remain in private storage. They are not an off-device backup.

Third-party services

• Vara includes no advertising, developer analytics, bank-connection or cloud-sync SDK. Google Play handles app distribution and any store transaction under Google’s own policies. The app contains no in-app billing library and does not receive card details or banking credentials.
• A storage or sharing service you select, such as Google Drive or email, receives the file you choose to save or send and applies its own privacy and retention policy. Uploads require any necessary service setup and network connection. Vara does not verify that a cloud service finished uploading.

Advertising and purchases

• Vara has no advertisements, subscriptions or in-app purchases. Launch pricing is being confirmed; Google Play will display the applicable store price before installation or purchase. This page does not mean the app is already publicly available.

Retention and deletion

• Archiving a property keeps its history. Removing a record does not remove copies in existing backups, recovery files or exported documents. Removing an attachment attempts to delete its current private file, but does not erase earlier safety copies or the original source file.
• To remove all local Vara records, attachments, safety copies and cached exports, clear the app’s storage in Android Settings or uninstall it. Menu names vary by device. Export anything you want to keep first. Delete backups and shared files separately where you saved or sent them. There is no Vara account to close.
• We retain support correspondence while needed to resolve and follow up on your request. Records may be retained where required by law or needed for a dispute. For access, correction, deletion or other questions about information we hold, contact info@blacksunset.ee. You may also contact your local data protection authority. We cannot retrieve data stored only on your device.

Your rights and contact

Where data-protection law applies, you may request access, correction, deletion, restriction or portability of personal data controlled by the publisher, and object to processing. Most product data described here is held only on your device and can be managed there.

You may also lodge a complaint with the Estonian Data Protection Inspectorate.

This policy may be updated when the app or legal requirements change. The revision date above shows the current version.