Data Safety & Security Architecture
1. Encryption in Transit (TLS 1.3)
All network communication between mobile devices, browser web clients, and cloud backends is strictly routed over HTTPS utilizing Transport Layer Security (TLS 1.3). Insecure HTTP connections and deprecated SSL/TLS 1.0/1.1 protocols are systematically rejected at our Cloudflare edge proxies.
2. Encryption at Rest (AES-256)
All persistent resident records, lease agreements, bed assignments, and KYC photographs stored within Google Cloud Firestore and Firebase Storage are encrypted at rest using industry-standard 256-bit Advanced Encryption Standard (AES-256).
3. Play Store Data Safety Questionnaire Mapping
| Data Category | Data Field | Collected? | Shared? | Purpose |
|---|---|---|---|---|
| Personal Info | Name | Yes | No | App functionality, tenant tenancy identity |
| Personal Info | Email address | Yes | No | Authentication, receipts, security notices |
| Personal Info | Phone number | Yes | No | SMS/WhatsApp rent notices, emergency contact |
| Personal Info | User IDs | Yes | No | Role-based authorization (RBAC) |
| Financial Info | Payment history | Yes | Yes (Cashfree) | Fee processing via PCI-DSS gateway |
| Photos & Videos | Profile photos | Optional | No | Digital Student/Staff ID badge generation |
| Health Info | Blood group | Optional | No | Campus emergency first aid record |
| App Diagnostics | Crash logs | Yes | No | Reliability & bug remediation |
| Device Identifiers | Biometric ID / Push token | Optional | No | Turnstile attendance sync & alerts |
4. Role-Based Access Control (RBAC)
Tenly enforces strict authorization rules at the database engine level via Firestore Security Rules and Cloud Functions custom claims. Tenants can only inspect their own tenancy agreement and receipts; property owners can only access data belonging to their assigned properties.
5. Audit Logging & Vulnerability Remediation
Automated dependency scans and security audits are performed on each release. Vulnerability disclosures and incident reports can be reported directly to privacy@zephvion.com.