Overview
PropertyMatch is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).
This Privacy Policy applies to the PropertyMatch website at property.kinetic.im, the PropertyMatch mobile application (iOS and Android), and any related services we operate (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
Data Controller
The data controller responsible for your personal data is:
Data We Collect
Information you provide directly
- Email address — when you join the waitlist or create an account
- Name — when you complete your profile in the app
- Property preferences — budget, location, property type, number of bedrooms, and other search criteria you set
- Messages — communications you send to agents through the in-app chat
- Viewing requests — dates, times and properties selected when booking viewings
Information collected automatically
- Usage data — pages viewed, properties swiped on, time spent in the app, features used
- Device information — device type, operating system version, unique device identifiers, app version
- IP address — used to determine approximate location for property relevance
- Log data — error reports, crash reports, performance data
Information we do not collect
- We do not collect financial or payment card data (we have no paid features)
- We do not collect precise GPS location without your explicit permission
- We do not collect biometric data
- We do not use your device camera or microphone
How We Use Data
| Purpose | Data Used |
|---|
| Providing the Service (showing properties, agent matching) | Email, preferences, usage data |
| Waitlist and launch communications | Email address |
| Facilitating agent–buyer communication | Name, messages, viewing requests |
| Personalising property recommendations | Preferences, swipe history, usage data |
| Improving the Service | Usage data, crash reports, device info |
| Legal compliance and fraud prevention | IP address, device identifiers, log data |
| Sending service notifications | Email address, name |
We will never sell your personal data to third parties. We do not use your data for advertising profiling or share it with real estate portals or advertisers.
Legal Basis for Processing
Under GDPR, we process your personal data on the following legal bases:
- Contract performance — processing necessary to provide the Service you have requested (e.g., showing you properties, connecting you with an agent)
- Legitimate interests — improving the Service, fraud prevention, security, and app performance analytics — provided these interests are not overridden by your rights
- Consent — for marketing emails and optional notifications. You may withdraw consent at any time
- Legal obligation — where we are required by Spanish or EU law to retain or disclose data
Sharing & Disclosure
We share your data only in these limited circumstances:
Real estate agents
When you swipe right on a property or request a viewing, your name and contact information are shared with the assigned PropertyMatch agent (currently Valeria) to facilitate the property introduction. Agent communications are bound by confidentiality obligations.
Service providers
We use trusted third-party providers to operate the Service. These providers process data only on our instructions and may not use it for their own purposes:
- Cloud hosting and infrastructure (servers located in the EU)
- Email delivery (for waitlist and notification emails)
- Crash reporting and app performance monitoring
Legal requirements
We may disclose data if required by a court order, law enforcement request, or other legal obligation under Spanish or EU law. We will notify you of such requests unless legally prohibited from doing so.
Business transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Data Retention
- Waitlist emails — retained until the app launches and you create an account, or until you request deletion, whichever is earlier
- Account data — retained for the duration of your account plus 12 months after deletion, to comply with legal obligations
- Messages and chat history — retained for 24 months from the date of the message
- Usage and analytics data — retained in aggregate, anonymised form for up to 36 months
- Log data — retained for 90 days
You may request deletion of your data at any time — see Your Rights below.
Cookies
The PropertyMatch website uses a small number of cookies. The mobile app does not use browser cookies.
| Cookie | Type | Purpose | Duration |
|---|
| pm_session | Essential | Maintains your session state | Session |
| pm_consent | Essential | Records your cookie consent choice | 12 months |
| pm_pref | Functional | Remembers your language and display preferences | 12 months |
| _ga, _gid | Analytics | Google Analytics — aggregate visitor statistics (only with consent) | 2 years / 24 hrs |
You may refuse non-essential cookies using the consent banner on your first visit, or by adjusting your browser settings. Refusing analytics cookies will not affect your ability to use the Service.
Your Rights (GDPR)
As a person in the European Economic Area, you have the following rights regarding your personal data:
- Right of access — request a copy of all personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") — ask us to delete your data, subject to legal retention obligations
- Right to restriction — ask us to pause processing of your data while a dispute is resolved
- Right to data portability — receive your data in a structured, machine-readable format (JSON or CSV)
- Right to object — object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent — withdraw consent for marketing emails at any time via the unsubscribe link or by contacting us
To exercise any of these rights, email privacy@property.kinetic.im. We will respond within 30 days. We do not charge a fee for reasonable requests.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish data protection authority:
Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- Encryption of data in transit using TLS 1.2 or higher
- Encryption of sensitive data at rest
- Access controls limiting who within our team can access personal data
- Regular security reviews of our infrastructure
- Breach notification procedures in line with GDPR requirements (72-hour notification to the AEPD for qualifying breaches)
No method of transmission or storage is 100% secure. If you believe your data has been compromised, contact us immediately at privacy@property.kinetic.im.
Children
The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you are on our waitlist or have an account) and update the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.