fbpx
Skip links

data-collection

📱 Mobile App Data Collection

This page details our data collection practices specifically for the GoRealo mobile applications available on iOS App Store and Google Play Store, in compliance with app store requirements and privacy regulations. Last Updated: September 26, 2025. See our Terms of Use and Privacy Policy for full details.

Overview of Data Collection

The GoRealo mobile application collects limited data to provide mortgage lending services, enhance user experience, and comply with financial regulations. We minimize collection to essentials (e.g., no sensitive info like SSNs in the app—handled via secure website). We are committed to transparency about our data practices and protecting your privacy.

256-bit
Encryption
GDPR
Compliant
CCPA
Compliant

Types of Data We Collect

📋 Personal Information

Identity Information:
  • Full name
  • Real Estate License Number
Contact Information:
  • Email address
  • Phone numbers
  • Mailing address

💰 Financial Information For Borrowers

Income & Employment:
  • Employment history
  • Salary and income estimates
  • (Tax returns/W-2: Via website upload, not app)
  • Bank statements (summaries)
  • Investment accounts (estimates)
Credit & Debt Information:
  • Credit score estimates
  • Existing loans and debts (summaries)
  • Payment history (estimates)
  • Asset information (estimates)
  • Liabilities (estimates)
  • (Full reports: Via website, not app)

🏠 Property Information

  • Property address and details
  • Property value and appraisal (estimates)
  • Property type and use
  • Purchase price and down payment (estimates)
  • Property insurance information
  • HOA fees and property taxes (estimates)

📱 Technical & Usage Data

Device Information:
  • Device type and model
  • Operating system version
  • App version
  • Device identifiers (IDFA/GAID)
  • Screen resolution
Usage Analytics:
  • App usage patterns
  • Feature interactions
  • Session duration
  • Crash reports
  • Performance metrics
  • Cookies/local storage (for analytics and service improvement)

📍 Location Data

User Consent Required: We do not collect location information.

📄 Documents & Media

Document Uploads:
  • Pay stubs and tax documents (summaries)
  • Bank statements (summaries)
  • ID verification documents (photos)
  • Property documents (photos)
  • (Full docs: Via website, not app)
Camera & Photo Access:
  • Document photography
  • ID verification selfies
  • Property photos
  • Signature capture
Accuracy of User‑Submitted Content: GoRealo does not verify, endorse, or guarantee the accuracy of user‑submitted content. Users (including real estate agents) are responsible for ensuring any content provided is accurate, complete, lawful, and MLS‑compliant.

How We Use Your Data

🏦 Mortgage Services

  • Process loan applications and pre-approvals
  • Verify identity and prevent fraud
  • Assess creditworthiness and loan eligibility
  • Facilitate loan closing and funding
  • Provide customer support and account management

📊 App Improvement

  • Analyze app performance and user experience
  • Fix bugs and technical issues
  • Develop new features and improvements
  • Optimize app speed and reliability
  • Conduct A/B testing for better user experience

🔒 Security & Compliance

  • Detect and prevent fraudulent activities
  • Comply with federal and state regulations
  • Maintain audit trails for regulatory purposes
  • Protect against cyber threats and data breaches
  • Verify user identity and authorization

📢 Communication

  • Send loan status updates and notifications
  • Provide customer support and assistance
  • Share important account information
  • Send regulatory disclosures and notices
  • Marketing communications (with consent)

Data Sharing and Third Parties

Cookies & Tracking Technologies

We use cookies and similar tracking technologies (including local storage and device identifiers) to enhance your experience, improve our Services, and analyze performance. These may be set by us or by third-party providers such as Google Analytics, Firebase, and the Google My Business API. Cookies may collect information such as your IP address, device type, browser type, usage patterns, and location (if enabled).

You can manage or disable cookies through your browser or device settings. Disabling cookies may limit certain features or functionality of the Services.

App Permissions

Permission Control

You have full control over app permissions. You can grant or revoke permissions at any time through your device settings. Some features may not work without certain permissions.

📷 Camera Access

Purpose: Document photography and ID verification

Required: For document upload features

Data: Photos are processed and stored securely

📁 Photo Library

Purpose: Upload existing documents and photos

Required: For document submission

Data: Only selected photos are accessed

📍 Location Services

Our Real Estate Agent app and website for users does not collect location information. 

 

🔔 Push Notifications

Purpose: Loan updates and important alerts

Required: Optional, for timely updates

Data: Device tokens for notification delivery

☎️ Phone Access

Purpose: Direct calling to customer support

Required: Optional, for convenience

Data: No call data is stored

🌐 Network Access

Purpose: App functionality and data sync

Required: Essential for app operation

Data: Secure encrypted communications

Data Security Measures

 

Encryption

256-bit AES encryption for data at rest and TLS 1.3 for data in transit

 

Biometric Security

Support for Touch ID, Face ID, and fingerprint authentication

 

Fraud Detection

Advanced AI-powered fraud detection and prevention systems

 

Secure Infrastructure

Secure cloud infrastructure with 99.9% uptime

 

Access Control

Multi-factor authentication and role-based access controls

 

Monitoring

24/7 security monitoring and incident response capabilities

Data Retention

Retention Periods

  • Loan application records: retained for at least 7 years (regulatory compliance).
  • Marketing and lead records: retained for up to 2 years, unless you request deletion sooner.

Note: Some data may be retained longer if required by law or for legitimate business purposes such as fraud prevention. Data is deleted upon account deletion or rights request.

Your Privacy Rights

🔍 Right to Know

You can request information about what personal data we collect, use, and share.

Request Information

✏️ Right to Correct

You can request correction of inaccurate personal information we have about you.

Request Correction

🗑️ Right to Delete

You can request deletion of your personal data, subject to legal and regulatory requirements (processed within 30 days).

Request Deletion

🚫 Opt-Out & Limits

Opt out of sharing/sale; limit sensitive data use. No discrimination for exercising rights.

Submit Request