Atrino

Privacy

Last updated: 29 October 2026

This policy explains what personal data we process when you use the Atrino app, the website and the admin panel, why we do it and what rights you have.

Who we are

The controller of your personal data is "Fondle" Ltd., company ID 206174020, registered at 4 Prof. Petar Shapkarev str., Sofia, Bulgaria. For anything about your personal data, write to us at support@atrino.app.

What data we process

Account. Atrino accounts are for owners of places only and are created by invitation. We keep your name, email, language, profile photo (if you upload one) and password. We keep the password only as an irreversible hash.

Phone. Optional: the mobile number you confirm with an SMS code, so that we can reach you if something happens at a place. The Atrino team sees it in the admin panel, and the guests you invite see it once they have confirmed their invitation, to be able to call you.

Devices and sign-in. For each device you sign in from: an installation identifier, model, platform, app version, IP address, time of last use and a token for notifications. We keep only hashes of the sign-in tokens, not the tokens themselves.

Places. Your places’ details: name, address, location (if you set it), time zone, usual check-in and check-out times and photos. Before we save the photos, we remove their metadata, including GPS coordinates. When you tap “Use my current location”, the app takes the phone’s location once and saves it as the place’s location; otherwise we do not use it.

Door controllers. The devices you connect: the door’s name, the kind of lock and input, the device’s identifier, model, firmware and MAC address, when it was online, and the device’s password if the app sets one (we keep it encrypted). The controllers’ records: when and by whom the door was unlocked, when the sensor reports it opening and closing, when the device connects and disconnects.

Requests from the website. Name, email, phone, city, number of places and a message, when you request an invitation on the website, and the language of the page.

Plans and payments. Your plan (Basic, Pro or Business), monthly or yearly, its status, until when it is paid and whether its renewal is off. The plan is chosen with the invitation to your account and paid from the link we email you, through Stripe: Stripe receives your name and email, and you give your card or other payment details only to Stripe, on its page; we never see or keep them. From Stripe we get the plan’s state, the identifiers of your Stripe customer and subscription and, for every payment, the amount, the period and the card’s type and last 4 digits: with them we keep the receipt we email you. Stripe sends no emails of its own: we send them, from no-reply@atrino.app, when a plan starts, after every payment, at every failed payment attempt, 14 and 7 days before a plan with its renewal off ends, and when a plan ends.

Usage statistics. Only if you allow them in the app (asked once on the phone, for owners and guests alike; Profile → Usage statistics, or below a guest’s keys): which screens you open, with the phone’s model and system, the app’s version, an approximate country and city and a random ID of the installation. Without your name, email, phone, the places’ addresses or the invitation links, and never for ads. Never on the website.

Technical records. Records of errors and of how the system works, which may contain an IP address and a user identifier.

Guests

Guests have no account. An owner sends a guest an invitation for their stay as a link, and the guest confirms it with a code sent by SMS to the phone number the owner gave. For this we process:

  • What the owner enters: the guest’s name and phone number, the language, check-in and check-out.
  • The confirmation: the SMS code (Twilio sends and checks it), when the guest confirmed the invitation and the name of the device they did it on, such as “Android · Chrome”.
  • The unlocks: when the guest unlocked which door. They go into the door controllers’ records under the guest’s name, and the owner is told about the first one (and about every one, if they turn that on).
  • The location at an unlock: for a place whose location the owner set, the phone’s or the browser’s location once at each unlock, to check that the guest is at the place. It is not stored.

Before the code, the link shows the place’s name and photo, the owner’s first name and the dates of the stay; after it, also the address and location, the doors and their state, and the owner’s confirmed phone number. The doors open only from check-in to check-out.

The key that opens the doors stays on the guest’s device: in the app’s secure storage, or in the browser’s local storage on the website. We keep only a hash of it. A confirmation on another device or a new phone number from the owner makes the old key stop working.

An invitation, with the guest’s name and phone number, is deleted 30 days after check-out, or after the owner cancels it. Guests can exercise the rights below by writing to us at support@atrino.app.

Why we process it and on what basis

  • To perform our contract with you (Art. 6(1)(b) of Regulation (EU) 2016/679): account, places, controllers, unlocking the doors, notifications, answering requests and invitations, your plan and its payments, and, before a contract, answering an email about the Business plan.
  • To meet our legal obligations (Art. 6(1)(c)): keeping the payment records that accounting and tax law requires.
  • In the legitimate interest of the owners and ours (Art. 6(1)(f)): guest invitations, so that only the guest the owner invited gets in, and only during their stay; security of accounts and places, preventing abuse, fixing errors. For example, we check whether a new password has leaked publicly by sending only the first 5 characters of its hash, never the password itself.
  • With your consent: when you send a request from the website, and the usage statistics in the app. You can withdraw your consent at any time; for the statistics, under Usage statistics in the app, which also deletes what has not been sent yet.

We do not show ads, we do not use your data for ads by others, we do not sell it and we do not profile you in ways that have legal effects on you.

Who else receives data

  • Google Firebase Cloud Messaging and Apple (notifications): the device token and the notification text.
  • Google Firebase Crashlytics (app crash reports): the phone’s model and system, the app’s version and what went wrong, with a random ID of the installation.
  • Google Analytics for Firebase (usage statistics), only if you allow them: the data under “Usage statistics”. It is not linked to Google’s advertising.
  • Google Maps Platform (the map and the address search for places): the text you type as a place’s address, and the point on the map; the map in the app is loaded from Google on your phone, including with your IP address.
  • Sentry (error reports from our servers): what went wrong and the request it happened in, without your name, email or IP address.
  • Twilio (SMS codes): your phone number, and the guest’s for an invitation.
  • Stripe (payments for plans): your name and email, your payment details as you give them on Stripe’s page, and the plan you buy. Stripe is also a controller of some of this data under its own privacy policy, for example to prevent fraud.
  • The email provider we send Atrino’s emails through, and Contabo (servers in the EU), which process data only on our instructions.
  • Public authorities, when the law requires it.

Some of these providers process data outside the European Economic Area (for example in the USA). This is based on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

How long we keep data

  • We keep your account and the data linked to it (places, photos, controllers) until you delete the account. When you delete it, they are deleted and the controllers are disconnected from the server.
  • Google keeps the usage statistics for 14 months.
  • We keep the door controllers’ records for 30 days and technical records for 14 days.
  • A guest invitation, with the guest’s name and phone number, is deleted 30 days after check-out or after the owner cancels it.
  • Confirmation codes expire within minutes and are deleted every night. Expired sessions are also deleted every night.
  • An invitation that was not accepted is deleted 30 days after it expires.
  • We keep requests from the website until they are reviewed and decided, and after that only as long as needed.
  • We delete the emails about the Business plan 12 months after the last message of the conversation, unless a contract follows; then they are kept with it.
  • Your plan’s details are deleted with your account, and your receipts are kept for accounting with nothing that identifies you (no name, email or card: only the number, plan, period and amount); deleting the account cancels a Stripe subscription at once. Payment records are kept as long as accounting and tax law requires (in Bulgaria up to 10 years), at Stripe, from where we can get them.

Your rights

You have the right:

  • to ask for access to your data and a copy of it. You can ask for the copy yourself in the app;
  • to correct inaccurate data. You can change most of it yourself in the app;
  • to ask for erasure. You can delete your Atrino account yourself: in the app, open Profile, tap “Delete account”, then Continue, and confirm with your password. Or write to us at support@atrino.app from the account’s email. What is deleted and what stays is under “How long we keep data”;
  • to restrict processing, or to object to processing based on legitimate interest;
  • to receive your data in a machine-readable format (portability);
  • to withdraw consent where processing is based on consent.

To exercise your rights, write to us at support@atrino.app. We answer within one month.

You also have the right to complain to the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or to the data protection authority of the country where you live.

Cookies

The website uses one cookie, lang, which remembers the language you chose for a year. It is needed for that choice to work, so it requires no consent, and it does not track you. The website has no visitor analytics or ads and loads nothing from other sites. The admin panel uses a session cookie when signing in and a cookie for the chosen theme. The app stores your sign-in data securely on your phone, and the usage statistics’ ID only if you allow them. The page that opens a guest invitation keeps the guest’s key and the chosen language in the browser’s local storage, not in a cookie. Nothing of it is used to track anyone. When you buy or manage a plan, you go to Stripe’s pages, which use their own cookies.

Security

Connections to us are encrypted. We keep passwords and codes only as hashes. Each controller connects with its own key. Access to data is limited to the people who need it for their work.

Children

Atrino is not meant for people under 18, and we do not knowingly collect data about them.

Changes

If we change this policy, we will publish the new version here with the new date. For significant changes we will notify you in the app or by email.

Back to the start