Privacy Policy

Last updated: March 12, 2026

MindfulUX ("Company," "we," "us," or "our") operates the U-DORM platform ("Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Services. This policy applies to all Users worldwide.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, password, and role (Landlord, Tenant, Property Manager).
• Profile Information: Date of birth, home address, occupation, student status, school name, student ID, emergency contact details, and profile photo.
• Property Information: Property names, addresses, descriptions, unit details, and property images.
• Lease Information: Lease terms, rental amounts, start and end dates, additional fees, and house rules.
• Payment Information: Payment amounts, dates, methods (e.g., GCash, Maya, bank transfer, cash), payment proofs (uploaded images), and receipt data. We do not process or store credit card numbers or bank account details.
• Communications: Messages sent through the Platform between Users.
• Support Communications: Information you provide when contacting our support team.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, date and time of access.
• Device Information: Browser type, operating system, device type, screen resolution.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: See our Cookie Policy for details.

1.3 Information from Third Parties

• Social Login: If you sign in using Google, we receive your name, email address, and profile picture from Google.
• Landlord-Provided Data: Landlords may provide your name, email, and phone number when adding you as a tenant before you create an account.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: Operate the Platform, process account registration, manage leases, track payments, and enable communication between Users.
• Identity Verification: Verify tenant identities and match pre-registered tenant records with new registrations.
• Notifications: Send service-related notifications (e.g., payment reminders, lease updates, new messages).
• Analytics and Reporting: Generate financial reports, occupancy analytics, and bookkeeping data for Landlords.
• Improve the Platform: Analyze usage patterns to improve features, performance, and user experience.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.
• Security: Detect, prevent, and address fraud, unauthorized access, and security incidents.
• Communications: Respond to your inquiries and provide customer support.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Between Users: Tenant information is shared with their Landlord and assigned Property Managers as necessary for property management. Landlord contact information is shared with Tenants for communication purposes.
• Service Providers: We use third-party providers for email delivery (Resend), cloud storage (iDrive e2), authentication (Google OAuth), and payment processing integration (PayPal). These providers access your data only as necessary to perform their services and are bound by confidentiality obligations.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share your information for purposes not described in this policy with your explicit consent.

4. Data Storage and Security

• Your data is stored on secure cloud servers located in the United States.
• We implement industry-standard security measures including encryption in transit (TLS/SSL), secure password hashing (bcrypt), and access controls.
• File uploads (payment proofs, profile photos) are stored in encrypted cloud storage with access-controlled, time-limited URLs.
• While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• We retain your personal information for as long as your account is active or as needed to provide Services.
• Financial records (payments, receipts, bookkeeping data) may be retained for up to 7 years for tax and legal compliance purposes.
• Lease agreements and related documents are retained for the duration of the lease plus 3 years after termination.
• If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
• Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics purposes.

6. Your Rights

6.1 All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate personal information through your profile settings.
• Deletion: Request deletion of your account and personal data (subject to legal retention requirements).
• Export: Request a machine-readable copy of your data.

6.2 California Residents (CCPA/CPRA)

• Right to know what personal information is collected, used, shared, or sold.
• Right to delete personal information (with certain exceptions).
• Right to opt-out of the sale or sharing of personal information. We do not sell your personal information.
• Right to non-discrimination for exercising your privacy rights.
• Right to correct inaccurate personal information.
• Right to limit the use of sensitive personal information.

6.3 International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, you additionally have the right to:

• Restrict processing of your personal data.
• Object to processing based on legitimate interests.
• Data portability.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with a supervisory authority.

Our legal bases for processing include: performance of a contract, legitimate interests, compliance with legal obligations, and consent.

7. Children's Privacy

The Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.

8. International Data Transfers

If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law.

9. Third-Party Links and Services

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you use.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Platform at least 30 days before taking effect. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data access requests, or to exercise your rights, contact us: