Privacy policy

Who is responsible

Stuga is an iPhone app published by Svante Dahlberg, an independent developer. Reaching the developer about anything on this page is a matter of one email, to svante.dahlberg@gmail.com.

What Stuga stores, and where it lives

Everything you enter belongs to you and is held on your device: the property, its purchase and mortgage figures, the lease, the tenant's details, expenses and receipts, reminders, inspections, maintenance records and any documents you import.

If you are signed into iCloud, that data also syncs to your own private iCloud database so it reaches your other Apple devices. That copy sits in your Apple account, under Apple's terms, and the developer has no access to it. There is no Stuga account, no sign-up and no password, because there is no Stuga database holding your records.

Reading a document works the same way. When you import a lease, a mortgage statement or a receipt, the text is extracted on your device, and the structured fields are filled in on your device. That pipeline makes no network request at all.

What Stuga never collects

• No analytics or usage measurement, from any provider.
• No advertising, no advertising identifier, no third-party marketing tools.
• No tracking across apps or websites, and no data sold or shared with data brokers.
• No background location, no contacts, no microphone, no camera roll scanning.

Stuga asks for photo library access only at the moment you choose a photo to attach, and it receives only the photos you pick. Reminders are scheduled as local notifications by your own device; no reminder is sent through a server.

The assistant, which is the one exception

"Ask Stuga" is the only feature that sends anything off your device. It ships switched off, asks for your consent before its first question, and can be switched back off in Settings at any time, which stops every call immediately.

What is sent when you ask a question

Your question, together with a summary of the property, lease, tenant, reminders and expense totals needed to answer it. When you ask about a document, that document's text is sent with the question. Nothing is sent until you ask something. Your files and photos themselves are never uploaded, and your iCloud data is never read by anyone but you.

Settings has a switch that replaces your tenant's name with "the tenant" before anything leaves the device, if you would rather the name never travelled.

Who processes it

The question goes first to Stuga's own proxy, which runs on Cloudflare Workers, and then to Anthropic, who run the model that writes the answer. The proxy exists so that the app never carries an API key, and so that no request or response body is ever written down. Anthropic process the request to produce the answer and do not train their models on it. Cloudflare handle the request in transit as the infrastructure provider.

Questions that need a web search

Some questions, particularly about landlord and tenant rules, are answered by searching official federal, state and city sources, and the answer cites what it found. When that happens the search terms go to the search provider used by Anthropic's API, and your property's city and state are passed along so the results are for the right jurisdiction. That is an approximate location taken from the address you typed. Stuga never reads your device's location.

What is kept afterwards

Nothing of the conversation. The proxy stores no questions, no answers and no document text, and logs neither. Your conversation history lives on your device for as long as the chat is open.

The one thing the proxy does keep is a counter. Each subscription has a monthly allowance, so the proxy stores a number of calls used, filed under the anonymous subscription identifier Apple issues for your purchase. It holds no name, no email and no address, and each month's counter expires about two months after it is written.

What the assistant is allowed to do

It can propose a reminder or draft an expense, but it cannot save, change or delete anything in your records. Every such action opens the normal screen and waits for your tap. Answers about rules are general information, not legal advice.

Subscriptions

Stuga Pro is bought through Apple's In-App Purchase. Apple handle the payment and share no card details with the developer. To confirm a subscription is real, the app passes Apple's signed purchase record to the proxy, which checks Apple's signature and keeps the identifier described above for the usage counter. The developer never sees your Apple Account, your name or your payment method.

Inviting a co-landlord

If you share a property with someone, iCloud sends them an invitation and, once they accept, they see that property and everything filed under it: its lease, tenant details, expenses, documents and reminders. Sharing runs entirely through Apple's iCloud sharing, so the data still never touches a Stuga server. You can see who has access, and stop sharing, under More, Co-landlords.

Your data, and how to get rid of it

Because your records live on your device and in your own iCloud, you hold them directly. Deleting a record in the app deletes it, and deleting the app removes its local copy; clearing Stuga's data from iCloud in your device settings removes the synced copy. Nothing has to be requested from anyone, because there is no copy held elsewhere to request.

Where the law gives you rights of access, correction, deletion, portability or objection, those rights apply to the only personal data outside your own control, which is the subscription usage counter. Write to svante.dahlberg@gmail.com and it will be dealt with. Assistant questions cannot be produced or deleted on request for the simple reason that no copy of them exists.

Children

Stuga is a tool for managing a rental property. It is not directed at children and collects nothing from them knowingly.

Changes to this policy

If what the app does with data changes, this page changes with it, and the date at the top moves. A change that widens what is sent off your device would be put in front of you in the app rather than left here to be discovered.

Contact

Questions about privacy, or about anything on this page, go to svante.dahlberg@gmail.com.