Who we are
ONZIP is operated by Global Piggy Inc., a corporation incorporated in Ontario, Canada (Ontario Corporation No. 1001740679), 22 Hughson Street North, Unit 2808, Hamilton, Ontario L8R 0B1, Canada. Privacy questions: privacy@globalpiggy.com.
What ONZIP collects
- Sign-in: your email address or phone number. ONZIP signs you in with an email link or a phone code — no password and no social login. The same account works across the apps of Global Piggy Inc.
- Age check: ONZIP is for adults. You enter your date of birth once; our server checks that you are 18 or older and keeps only the result, not the date.
- Your home and tenancy: the address and province, the people in the home and their roles (landlord or tenant), and dates such as the move-in date. If you show that you own or manage the home, the document you upload for that check.
- Condition reports: photos, rooms and items, condition codes, descriptions and notes, the other details on the form (for example keys, repairs agreed at the start of the tenancy and a forwarding address), the names typed when signing, drawn signatures, statements of agreement or disagreement, and agreed deposit deductions.
- Photo record fields: when a photo was taken and received, the type of device, and the photo’s SHA-256 fingerprint. Location and other metadata are removed from the photo itself.
- Home records you add: repairs, warranties, maintenance records, inventory items (a name, an optional identifier such as a serial number, notes and photos), and structures and equipment with their documents (for example manuals, receipts, labels and inspection papers) and dates.
- Messages and contact cards: messages you write in a home conversation, and the contact card you choose to share with the other members of a home.
- Links: for signing links and calendar links, we keep only a fingerprint (hash) of each link, not the link itself.
- App diagnostics: crash reports, performance and diagnostic data, basic usage events (such as which screens are opened) and a Firebase installation ID. ONZIP does not use your device’s advertising ID.
- Notifications: a device token, so we can send the notifications you allow.
- Home assistant: the reminder cards ONZIP makes for you, the message drafts it prepares, and the questions you ask it with its answers.
ONZIP does not track your location. Address lookup uses only the address you type.
How we use it
- To build, sign and deliver condition reports between the people in a tenancy.
- To keep each home’s records and share them with the members of that home.
- To keep the evidence record: entries are chained by their fingerprints, and each day’s entries are signed with a server key.
- To show reference deadlines for your province.
- To suggest condition codes (see below).
- To prepare reminders, message drafts and answers about your home (see “The home assistant”).
- To fix crashes, keep the service secure, and answer you when you contact us.
We don’t sell personal information, and we don’t use it for outside advertising. Any promotional slot in ONZIP shows only our own announcements.
AI suggestions
When you ask for a suggestion, the photos of that item are sent to an AI service — Google’s Gemini or Anthropic’s Claude, chosen in our settings, with the other used if the first is unavailable. It returns a suggested condition code and description, and flags photos that may show a face so you can retake them. A suggestion never goes on the report by itself: a person confirms or changes every item. When you tap Translate on a message in a home conversation, the text of that message is sent to the same services.
The home assistant
The home assistant works from your home’s records. It prepares reminders, message drafts and answers. It does not send, pay, choose a provider or share anything on its own: you decide each step.
- Reminders — the cards and the daily notification — are worked out by our own rules on our servers from your home’s dates, repairs, reports and warranties. No AI service receives your data for them.
- Message drafts: to write a draft, we send an AI service (Gemini or Claude, as above) only the type of task, your role (landlord or tenant), a type of service and a date — no names, addresses, contact details or message text. A draft is kept until a new draft replaces it or the home or your account is deleted. Nobody sees it unless you send it yourself.
- Ask: when you ask a question, it is sent to Anthropic’s Claude together with the earlier questions and answers in the same conversation and facts about your home: the province and its date rules, your role, how many people are in the home, and the type, state and date of its reports, repairs and records and of your reminders. Names, addresses and the text of messages and repair descriptions are not sent — unless you type them into your question, so please leave them out. Questions and answers are kept for 90 days and then deleted.
- The home assistant may not be available in every area yet.
Service providers
- Google Cloud and Firebase — hosting, sign-in, database, file storage, server functions, notifications (Firebase Cloud Messaging) and the server signing key (Cloud KMS).
- Firebase Crashlytics, Google Analytics for Firebase and Firebase Performance Monitoring — crash reports, diagnostics and usage events.
- Google Maps Platform — turning an address into a map location when you look one up.
- Google (Gemini API) and Anthropic (Claude API) — AI suggestions, translation, message drafts and Ask, as described above.
ONZIP takes no payments in the app, so no payment processor receives your information through the app.
Where it is stored
Condition reports, home records, photos, PDFs and evidence records are stored with Google Cloud in Toronto, Canada (northamerica-northeast2). Your shared sign-in account is handled by Firebase Authentication, and its profile is stored in Frankfurt, Germany (europe-west3). Diagnostics and AI services may process what they receive outside Canada, including in the United States.
How long we keep it
A signed report belongs to both sides of a tenancy. Alberta requires condition reports to be kept for 3 years, and either side may need a report later. Signed reports and their evidence records are kept for at least 3 years after signing, and are not removed when one side deletes their account. Other information is kept while your account exists, and deleted as described below.
Exporting your records
You can export your home’s records as a data file from the app at any time. The file is made for you and goes only where you send it.
Deleting your account
You can delete your ONZIP account in the app (Account → Delete your account) or by email. Your personal information is then deleted, except condition reports you made with someone else and their photos, which stay for the other side for as long as the law requires, and records you added to a home you share, which stay with the home without your identity. Your name and contact details are hidden in ONZIP, but the signed PDF is kept exactly as it was signed — it still shows the names and signatures — because its fingerprint is what the verification code checks. Details: Delete Your Account.
Your rights
You can ask to see the personal information we hold about you, to correct it, or to delete it where we are not required to keep it. Write to privacy@globalpiggy.com; we reply within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or to your provincial privacy commissioner.
If someone else takes over the home
A home’s records stay with the home, but your personal details do not transfer to the next owner or tenant. Your contact card and your account stay yours.
Legal requests
If we are required to hand records to a tribunal, court or party, we check the demand is lawful, hand over the minimum it requires, and tell you unless the law forbids it.
Backups
We keep backups so records survive a failure. A deletion reaches backups as they cycle out; until then the deleted data is not used.
Age
ONZIP is for people aged 18 and older. Anyone who does not pass the age check is signed out of ONZIP; we do not knowingly keep ONZIP data about anyone under 18.
Changes
If we change this policy, we will post the new version here with a new effective date, and tell you in the app before a material change takes effect.