Privacy Policy — Diami

Last updated: 18 July 2026

Diami (“the app”, “we”, “us”) is a property-management app for boarding-house (kos), house, and apartment owners in Indonesia, published by Trackana. It helps owners manage properties, rooms, tenants, rent, finances, documents, maintenance, and — where smart meters are used — electricity billing. Diami is available as an app for Android and iPhone/iPad, and in a web browser; this policy applies to all of them.

Unlike a local-only app, Diami stores your data in the cloud so it is available across devices and to the people you share a property with. This policy explains what we collect, why, who we share it with, and how you stay in control. In short: we do not run ads, we do not use analytics or tracking, and we never sell or share your personal data for marketing.

Who this policy covers

Diami has two kinds of users, and both are covered here:

• Owners — property managers who run one or more properties in the app. Owners are the account holders and control the data for their properties.
• Tenants — residents who are invited by an owner to see their own bills, rent, documents, maintenance tickets, and announcements.

Information we collect

Account and contact information.

• Owners register with an email address and password. You may also add your name, a WhatsApp/phone number, and a business logo and signature image used on receipts.
• Tenants do not use an email or password. You join a property by entering an invite code from your owner, which links your device to your tenant record. Your name and phone number are held as part of that record.

Property and tenancy data. Details you enter to run a property: properties, rooms, floors, tenants, lease terms and deposits, rent charges and payments, income and expenses, and maintenance tickets (including any photos you attach).

Identity documents. Owners can store tenant identity documents — such as a KTP (national ID card) or KK (family card) — to keep tenancy records. These are uploaded by the owner or tenant and are visible to the property’s owner as part of that property’s records. They are stored in a private storage area that is not publicly listed and is access-controlled (see How your data is stored below).

Payment and financial records. Rent and bill amounts, payment dates, and any payment-proof images you or your tenants upload. When you subscribe to a paid plan, we store your plan, amount, and a payment reference — but not your card, bank, or e-wallet details (see Payments below).

Electricity meter readings. If a room has a smart meter, we record meter readings (such as cumulative kWh and instantaneous power) to calculate fair, prorated bills. Readings reach us in one of three ways depending on your setup: through our backend from the meter manufacturer’s cloud, through an on-site gateway device on your property’s network, or by manual entry if you have no meter hardware.

Device and technical information. If you enable notifications, we store a push notification token for your device so we can deliver reminders. Our servers keep basic operational logs (such as counts and timestamps of jobs) to run the service; these are not used to profile you.

How we use your information

We use your information only to provide and operate Diami:

• to run your properties — tracking tenants, rent, finances, documents, and maintenance;
• to calculate and present electricity bills from meter readings;
• to send you notifications you’ve asked for (rent due, new bills, maintenance updates, subscription reminders);
• to process subscriptions to paid plans;
• to secure the service and support you when you contact us.

We do not use your data for advertising or profiling, and we do not sell or rent it to anyone.

How your data is stored

Diami is operated from Indonesia. Your data is stored on managed cloud infrastructure provided by Supabase (a hosted database, authentication, and file-storage provider). Access is controlled by row-level security so that each owner can see only their own properties’ data, and tenants can see only their own records. Files such as identity documents and payment proofs are kept in a private storage area reachable only through short-lived, signed links — not by public URL. Connections between the app and our servers use encryption in transit (HTTPS).

Who we share data with

We share data only with the service providers needed to run Diami, and only for that purpose:

• Supabase — our cloud database, authentication, and file storage provider. It hosts the data described above on our behalf.
• Midtrans — our payment provider. When you subscribe, payment is completed on Midtrans’ own secure page; Diami never receives or stores your card, bank, or e-wallet details. We share the amount and your email so Midtrans can process and confirm the payment.
• Firebase Cloud Messaging (Google) — delivers push notifications to your device, or to your browser where supported. It receives your device’s push token and the notification content. On iPhones and iPads, delivery is carried by Apple’s Push Notification service (APNs).
• Email delivery (Zoho) — sends account emails to owners, such as sign-up confirmation and password resets.
• Apple App Store and Google Play — distribute the mobile app on iOS and Android and, where applicable, handle installation and updates. Diami is also available directly on the web.

A note on WhatsApp. When you tap “send via WhatsApp” (for a bill, receipt, or to contact an owner), Diami simply opens your own WhatsApp app with a prepared message using a wa.me link. The message is sent by you, from your account — it does not pass through our servers, and we do not use any WhatsApp business service.

We do not use any advertising, analytics, or crash-reporting services. Diami contains no tracking SDKs.

Notifications

Diami can notify you about activity on your properties — new bills, rent due, maintenance updates, subscription reminders, and similar. These arrive in the app and, if you allow it, as push notifications on your device. You can turn off notifications at any time in your device settings.

Cookies and local storage

When you use Diami in a web browser, we store your login session in the browser’s local storage so you stay signed in, along with basic app preferences. This is essential to signing you in and is not used to track you. We do not use advertising or third-party tracking cookies. You can clear this data at any time by signing out or clearing your browser’s site data. On the mobile app, the equivalent session and settings are stored on your device.

Data retention and deletion

Owners. You can request deletion of your account and its data at any time — from Account → Delete account in the app, or by emailing support@trackana.net from your account’s email address. We process deletion requests within 30 days. Some records may be retained only as long as required to meet legal, tax, or accounting obligations, after which they are deleted.

Tenants. Choosing Delete account removes your login link to the property and ends your access. Records that belong to the property owner’s own bookkeeping — such as your tenancy and rent history — remain with that owner, who is responsible for them. To have those removed, contact your property’s owner.

You can also reach us at support@trackana.net with any request about your data.

Security

We protect your data with encryption in transit (HTTPS), access controls that scope data to the correct owner and tenant, and private, signed-link storage for documents and proofs. Payment credentials are handled entirely by our payment provider and never reach us. No system is perfectly secure, but we work to keep your data protected and to fix issues we find.

Children

Diami is intended for property owners and their tenants, who are adults. It is not directed to children under 18, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as Diami evolves or as we add features. Material changes will be reflected by the “Last updated” date above, and significant changes will be communicated in the app.

Contact

For any question about this policy or your data, contact us at support@trackana.net.