Who we are
Esto (estoplot.app) is an independent product. “We” and “us” on this page mean Esto. Anything about your data goes through the support page, which reaches the person who builds Esto.
What we collect
Your account
You sign in with Google or Apple. Esto has no passwords of its own. The provider sends us your name, your email address, whether it has verified that address and, from Google, a link to your profile photo. We store those with your account, along with the provider’s ID for you and the sign-in tokens it issues. If you use Apple’s Hide My Email, we only ever see the relay address.
Sign-in sessions
Each device you sign in on gets a session. We store it with the device’s IP address, its browser or device type, and when the session expires. A session lasts a year from the last time that device used Esto, and ends when you sign out.
Your portfolio
Whatever you add: purchases (project, unit, developer, location, size, bedrooms, price paid, handover dates, construction progress, fees and your notes), their payment plans (instalments, amounts, due dates and what you have paid) and any forecast scenarios you save for a purchase. We store this so it follows you between the iPhone app and the web app, and so Esto can compare a unit with registered sales in its project.
Support messages
When you use the support form we keep your email address, the topic, your message, the page or app version it came from, and the country your connection came from, which Cloudflare works out from your IP address. If you were signed in at the time, the message is linked to your account so we can find your data.
Product news sign-ups
An earlier version of this site let people leave an email address to hear about Esto. If you did, we hold that address and when you left it, nothing more. Ask and we will delete it.
What stays on your device
Some things never reach us: the areas and sub-communities you save, the purchases you are weighing up in Forecast, your region, currency, units and appearance settings, and recent searches in the web app. The iPhone app also keeps a copy of your portfolio so it opens quickly and works offline. Signing out clears that copy. Deleting the app, or clearing your browser’s data for app.estoplot.app, removes the rest.
What we don’t collect
Esto never asks for your location, contacts or photos, and never handles payment details. We run no advertising or analytics tools of our own, and nothing in Esto tracks you across other apps or websites.
How we use it
Only to run Esto: to sign you in, store and sync your portfolio, work out figures for your purchases, answer your messages, and keep the service secure and working. We process it because it is needed to give you the service you signed up for, or because you asked us to, as when you send a support message.
We don’t sell your data, share it for anyone else’s marketing, or use your purchases in the market figures Esto publishes. Those come from public registries.
Where it is stored
Your account, portfolio and support messages are kept in a Cloudflare database that today runs in Cloudflare’s Eastern Europe region, so your data is stored outside the UAE. It is encrypted in transit and at rest, and only the person who runs Esto can access it. On iPhone, your sign-in session is kept in the Keychain.
Who else handles it
A few companies do part of the work. Each handles data under its own privacy policy.
- Cloudflare
- Hosts this site, the web app and Esto’s servers, and runs the database. Every request passes through its network, so it sees your IP address and request details. It keeps request logs for up to a week, which we use to fix errors.Cloudflare’s policy
- Google and Apple
- Handle sign-in when you choose them. Apple also distributes the iPhone app. If you have chosen to share analytics with app developers in your iPhone’s settings, Apple passes us anonymous crash reports and usage statistics.Google’s policy · Apple’s policy
- Resend
- Emails us a copy of each support message (and, in the past, each news sign-up). Our inbox is hosted by Google.Resend’s policy
- Mapbox
- Draws the maps. Your device loads map tiles straight from Mapbox, so Mapbox sees your IP address and device type, and its map software reports usage and performance data back to Mapbox. Esto never asks for your location, so none is included. In the iPhone app you can switch this off from the ⓘ button on the map, under Mapbox Telemetry.Mapbox’s policy
Cookies
This site sets no cookies. The web app sets one cookie to keep you signed in, and a second that lasts five minutes while you sign in with Google or Apple, to guard against forged sign-ins. Neither is used for tracking or advertising. The web app also keeps the on-device items listed above in your browser’s local storage, which is never sent to us.
How long we keep it
- Account and portfolio: until you delete your account.
- Sessions: until you sign out, or a year after the device last used Esto.
- Support messages: for as long as they help us answer you and keep a record of what was raised. They stay, no longer linked to you, if you delete your account. Ask and we will delete them too.
- Cloudflare request logs: up to a week.
- Backups: deleted data can remain in the database’s backups for up to 30 days before it is gone for good.
Deleting your account
Send a request through the support page, choosing “Account or sign-in”, from the email address your account uses, so we know it is yours. We will delete your account and everything in it: purchases, payment plans, notes and forecast scenarios, your sessions, and the link to your Google or Apple sign-in. We will reply once it is done. A delete button inside the app is on the way.
You can also remove Esto from the connected apps in your Google Account or Apple ID settings at any time. That stops the sign-in working, but doesn’t delete what we hold, so write to us as well.
Your rights
Under the UAE’s Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you can ask us to:
- tell you what personal data we hold about you, and give you a copy you can take elsewhere;
- correct anything that is wrong or out of date;
- delete it;
- stop or limit using it, or withdraw consent you gave earlier.
Ask through the support page and we will tell you what we have done. If you are unhappy with the answer, you can complain to the UAE Data Office.
Changes to this policy
When this policy changes, the new version goes up here with a new effective date. If a change affects how your data is used, we will say so in the app before it applies.
Questions about any of this? Ask on the support page. See also the terms of service.