Proma helps families manage their properties: tenants, rent, maintenance, bills, documents and money in and out. Proma is provided by Kahf Lab (“we”). This page explains what Proma stores, why, who helps us run it, how long we keep it, and what you can do about it. It is written for India’s Digital Personal Data Protection Act, 2023 and applies wherever you use Proma from.
What we store, and why
- Your account (to sign you in and show you to your family): your email address, the name you give, and a profile photo and phone number if you add them.
- Your family’s records (to run the app for you): properties, units, tenants and their contact details, leases, rent payments, expenses, income, bills, reminders, maintenance requests, and the photos and documents you upload.
- WhatsApp (only if you link your number): your WhatsApp number, the bill photos you send to Proma’s number, and your reply language.
- How the app is used (to see what works and keep it secure): events such as “property added”, linked to an account ID rather than your name or email. Screen text and what you type are masked before anything is sent. We also keep sign-in and activity times, device and browser type, and technical logs. Analytics providers may infer an approximate area from your IP address. We never ask for GPS location, contacts or your microphone.
- App lock: your PIN and Face ID or fingerprint never leave your phone. Proma keeps only a scrambled copy of the PIN on the device.
We only use this information to provide Proma, keep it secure and improve it. We don’t sell it, share it for advertising, or use it to train AI models.
Tenants and other people in your records
When you add a tenant, a contractor or anyone else, you decide what to record about them and you are responsible for having their agreement and for telling them you keep it. Proma stores it only on your family’s behalf. For identity documents, keep only what you need: for Aadhaar, Proma saves only the last four digits.
A tenant who is invited to Proma’s tenant portal sees only their own lease, payments, shared documents and repair requests. Tenants can write to getproma@gmail.com about information held about them, and we will pass the request to the property’s family and help them answer it.
Who can see it
Everything you add belongs to your family. Approved members see what their role allows (owner, manager, caretaker, accountant or viewer), and the owner approves who joins. Nobody outside the family can see it. Our team does not look at your records except to fix a problem you report, to keep the service secure, or when the law requires it.
Services that help run Proma
- Supabase stores the database, sign-in and uploaded files, in India (Mumbai).
- Vercel hosts the app and its servers.
- Meta (WhatsApp) carries the messages and bill photos you send to Proma’s WhatsApp number, if you link one.
- Anthropic reads bill and payment photos sent through WhatsApp or a family automation, to fill in the amount, date and payee. Anthropic does not train its models on this data. The in-app AI assistant is switched off in this release.
- Resend sends Proma’s emails: rent and approval notices, monthly summaries and urgent repair alerts.
- PostHog receives the masked usage events described above.
- Kahf Lab’s own console receives whether you are online in the app, so our team can see that Proma is working.
- Constra, our construction app, sends a project’s photos, documents and contractors to Proma when you move a finished building across.
- Make and Bolna are used only if your family turns on automations, such as WhatsApp reminders or voice calls.
Some of these services store data outside India, for example in the United States. They are bound by contracts to protect it and to use it only to provide their service to us. Receipt scanning inside the app runs on your device. Rent reminders you send open your own WhatsApp; Proma doesn’t read your chats.
Payments
Pay links open the tenant’s own UPI app (Google Pay, PhonePe, Paytm and others). Proma stores a property owner’s UPI payment address if they add one, along with rent amounts, payment methods, deposits and ledger records. Proma does not collect card numbers, bank passwords or UPI PINs, and does not hold or transfer money.
Security
All connections use HTTPS. Data is encrypted at rest by our storage provider, each family’s records are walled off from every other family’s at the database level, and receipts, tenant files and property documents open only through short-lived links. Property and profile photos are reachable by anyone who has their exact link, which is long and random. If a breach ever affects your information, we will tell you and the Data Protection Board of India without delay, with what happened and what you can do.
How long we keep it
- Your family’s records stay while your family uses Proma.
- Anything you delete goes to Recently deleted and is erased for good, with its files, after 30 days.
- When you delete your account, your name, email, phone, photo, WhatsApp link and email settings are erased straight away.
- Database backups roll over and are gone within 30 days. Technical and security logs are kept for up to a year.
Your rights and choices
- See and correct your details any time in Settings, and export your family’s records from Reports.
- Withdraw consent as easily as you gave it: turn off emails in Settings → Email notifications or with the link in any email, unlink WhatsApp in Settings, or stop sharing usage data in Settings → Privacy.
- Delete your account in Settings → Account, or without signing in. Records you added to a family stay with that family, shown as added by a former member, because the rest of the family relies on them. To delete a whole family and everything in it, email us from the owner’s email.
- Nominate someone to act for you if you die or can’t act yourself, by writing to us.
- Complain to us first (below). If you’re not satisfied, you can go to the Data Protection Board of India.
We answer requests within 30 days, and may ask you to confirm it’s you.
Children
Proma is for adults managing property. It isn’t meant for anyone under 18, and we don’t knowingly keep their data. If you think a child has signed up, tell us and we’ll delete the account.
Changes
If this policy changes in a way that matters, we’ll say so in the app before it takes effect.
Contact and grievances
For any question, request or complaint about your data, write to our grievance contact at getproma@gmail.com.