Privacy policy

The controller for the website midflat.com, the partner portal and the Midflat apps is [RECHTSTRÄGER], [RECHTSFORM], [STRASSE UND HAUSNUMMER], [PLZ] [ORT], [REGION], [LAND]. Represented by [VERTRETUNGSBERECHTIGTE PERSON]. Privacy requests go to info@midflat.com.

Midflat is a service of [RECHTSTRÄGER]. A representative in the Union under Article 27 GDPR is required only if the seat is outside the EU. The company file currently says: [EU-VERTRETER]. Until that is settled, contact us at the email address above.

This policy covers midflat.com and the iOS and Android apps. Midflat connects tenants and commercial landlords for furnished stays of about one to six months.

Tenants use Midflat free of charge. Landlords publish listings free of charge. Contact with tenants requires an annual partner subscription. Midflat is not a party to the rental contract, does not collect rent and does not charge a commission on a lease.

The app and the website do not include a separate analytics or crash-reporting product. Technical server logs still exist, as described below.

Account data. Email address, sign-in status and, if you use Apple or Google, the identifier they send, the display name and a profile photo. Sign-in secrets stay with the sign-in service, not in the public profile.

Profile. Display name, photo, place, short text, languages, optional links to a website, Instagram and LinkedIn, the renting or hosting view, and the registration time. Flags such as the email confirmation state may be stored. No external identity-document check is connected.

Listings. Title, description, amenities, photos and videos, price, minimum stay, discounts, availability and the building address the landlord confirmed, with map position. Unit, access and other security details stay in a separate area and are not published. Listing media is kept in private storage and is only available for a short time. Profile photos are kept in public storage.

Search. Place, dates, number of people, price range, property type and amenities. Without an account, a favorites list stays on the device. With an account we store favorites, recent search places and, if you use the search agent, your search requests with an approximate place, radius and criteria.

Requests and chat. Dates, number of guests, an optional first message, the later messages and attachments. Attachments are private and only briefly available to participants.

Reports and blocks. Who reports, which listing or public landlord profile is affected, a short reason and the review state. Also profiles you block.

Notifications. If you turn them on: push token, operating system, language, app version and your notification settings.

Payment. No card number at Midflat. We store the plan, status, period end and the identifiers that Paddle, Apple, Google or RevenueCat send for the subscription.

Location and measurement. For an optional internet-speed test at the property, the app reads the device location only to see whether you are on site. We store the measurements, measurement id, server name, time, distance and accuracy. The raw location point is not stored for that test.

Larger portfolios. If you contact us for an offer above the catalog: email, approximate number of homes, country and an optional WhatsApp number. For abuse prevention we store a hash of the IP address, not the address in clear text.

Teams. Email addresses of invited people, permissions per property and a record of invitations and changes.

Technical data. Time, requested address and security logs of the servers.

We process this data to run accounts, show listings, provide search and the search agent, deliver requests and messages, send notifications, unlock subscriptions, handle reports and keep the platform secure.

The legal basis is, depending on the case, the user contract (Article 6(1)(b) GDPR), a legitimate interest in a safe marketplace where your rights do not override that interest (point (f)), consent, for example for push notifications and the location used for a measurement (point (a)), or a legal duty (point (c)).

You can withdraw consent for the future. Turn push notifications off in the app or the operating system. Location is used only if you allow the measurement.

Listings, the map and details are visible without an account. An account is required when you send a request or create a listing.

In the app you sign in with a one-time email code, with Apple or with Google. On the web we send a sign-in link, or you use Apple or Google. Resend sends those emails for us. Apple and Google receive the data their sign-in needs.

The web session is kept in a necessary cookie. The language choice is stored for one year in its own cookie.

A published listing shows the confirmed building address and the map position so tenants can judge the area. Unit and access details are not public.

Your public profile shows what you enter for it. Private messages are not read automatically to score friendliness. Response times may be derived from event times, not from the message text.

Until the partner subscription unlocks contact, a landlord only sees that a request exists. The tenant name, contact details and messages are not delivered.

Search runs in our database. Place suggestions and addresses are requested from Google Places. The map is Google Maps. Google may process technical data under its own rules.

The search agent stores your search request so it can be compared with later listings. Landlords cannot read individual requests. Only a summary by place and price band is intended, without name, contact details or an exact address. You can pause or delete requests. At most five can be active at once.

A reservation creates a request with dates and an optional message and holds the dates for two hours. Midflat does not accept or decline the request. Rent, payment rhythm, the contract and other details are settled in the chat between tenant and landlord. After two hours the hold ends. The request and the chat remain. A longer block is entered by the landlord in the calendar. We do not connect external calendars.

We do not read chats to run advertising or to calculate ratings. We may look at content when a report, a security incident or a legal duty requires it.

Signed-in users can report a listing or a public landlord profile, not their own. We store the reporter, the target, a short reason and the state (open, in review, resolved or dismissed). You can see your own reports. We review them and may remove content, limit features or close accounts. Automatic content detection is not built in.

You can block profiles. The block applies to your account.

Push notifications use Firebase Cloud Messaging from Google. We ask for device permission only after you turn notifications on. Signing out unregisters the device. Delivery follows your settings. Firebase receives the token and the notification content to the extent needed for delivery.

A stored preference for email or product news does not, in the current system, start a newsletter. Email sending that is implemented covers sign-in and team invitations.

Tenants pay nothing to Midflat.

Landlords take an annual subscription. On the web, Paddle is the merchant of record and handles payment, tax and receipts. In the apps the purchase is an in-app purchase through Apple or Google. RevenueCat sends us the subscription status from the stores. We do not store a card number.

The subscription unlocks contact for the portfolio, not publishing. The tier follows the number of listings published at the same time. A paused or expired status does not unlock contact.

The map shows listing locations. That does not require your location.

If a landlord wants to measure internet speed at the property, the app asks for precise location permission. The test runs through Measurement Lab (M-Lab). We store the result and the evidence that the test was near the building. Without permission there is no test.

Owners can invite people by email and give them rights on individual properties, for example for media, messages or the calendar. Resend sends the invitation. Invitees sign in with the same email and accept access. The landlord remains responsible for the team.

We set necessary cookies: one for sign-in on the web and one for the language. There is no banner for analytics cookies because we do not set analytics or advertising cookies. Cookies from Apple, Google or Paddle can appear once you open their sign-in or payment. Their own notices apply.

Recipients are the services named here, each only for its task.

Supabase runs the database, sign-in, file storage and server-side functions. The project region is not recorded in this codebase: [SUPABASE-REGION].

Resend, USA, sends sign-in emails and team invitations.

Apple and Google process sign-in, maps and place search, push notifications and purchases in the apps.

Paddle is the merchant of record for subscriptions on the web. Product documentation identifies the seller of the web subscription as Paddle US LLC. RevenueCat reports subscription status from the app stores. Measurement Lab runs the optional speed test. Cloudflare delivers and protects the website.

The operator seat is [STRASSE UND HAUSNUMMER], [PLZ] [ORT], [REGION], [LAND]. Where providers process data in the United States or in other third countries, we rely on standard contractual clauses under Article 46(2)(c) GDPR. Where a recipient is certified under the EU-US Data Privacy Framework, we also rely on that adequacy decision. Certification is not assumed for every recipient.

Provider notices: Apple, Google, Firebase, Supabase, Resend, Paddle, RevenueCat, Cloudflare, Measurement Lab.

Account data stays until you delete the account or we close it for a violation. Listings, search requests, favorites and messages are deleted with the account, or earlier if you remove them. The two-hour hold ends by itself. The request can remain after that.

Reports stay until they are handled and then for as long as we need to document the decision. No fixed deletion period is built into the system.

Push tokens are disabled on sign-out or when the token is no longer valid.

Paddle, Apple or Google keep subscription receipts. We keep the subscription status while the partner account exists.

Server logs stay only as long as security and troubleshooting need them. No fixed period is set in the source code. Statutory retention, where it applies to us or to the payment provider, is unaffected.

You have the right to access, rectification, erasure, restriction, portability and to object to processing based on legitimate interests. You can withdraw consent.

You may lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

Access and erasure: info@midflat.com.

In the app you can request a copy of your data. The request is stored. Automatic delivery of the copy is not connected. Write to info@midflat.com. We handle the request within the statutory period.

In the app you can delete the account. Deletion removes the user account and the content the system ties to that account, including messages you sent, your requests as a tenant and, if you are the sole owner, the partner account and its listings. A partner account with other owners remains. Your membership ends.

Deletion does not cancel a running subscription at Paddle, Apple or Google. Cancel it where you paid. The web portal has no separate deletion control. Use the app or info@midflat.com.

Midflat is not directed at children under 16. Age is not requested. If you believe a child has sent us data, write to info@midflat.com.

If the processing changes, we update this policy. The current version is at midflat.com/privacy. November 5, 2026.