Who this app is for
RCIB Agent is the iPhone work app for registered agents of RCIB Real Estate Limited, Brokerage in Ontario, Canada. It is not a consumer home-search service. A separate office-issued invitation can give a prospective agent access to onboarding; it does not grant access to agent records. This policy covers the app. The website privacy policy covers this website.
What the app collects and uses
- Account identity: your brokerage username, name, profile details, agent status and access permissions, so the app can show the records available to you.
- Brokerage records: deals, listings, commission figures, statements and submission details that you view or send through the app.
- Files and photos: documents, photos, scans and attachments you choose to upload to Drive, a deal, a conversation or a support request.
- Messages and requests: Talk messages and attachments, office support requests, and questions and answer history in Ask RCIB. Enabled Talk calls also use your microphone and, for video, camera.
- Device and notification details: a device label, app/platform version, push token and notification registration identifiers, used to identify this installation and deliver notifications.
- Diagnostics and error reports: connection status, error messages and technical traces, the affected screen, time, app/build/update identifiers and iOS version, used to investigate failures. App error reports go to RCIB automatically. The separate local diagnostics log stays on your phone unless you choose to share it.
Error reporting filters recognizable credentials, email addresses and URL query strings before saving or sending reports. This is a safeguard, not a guarantee that every piece of personal information in an unexpected error will be removed. Review screenshots and copied diagnostics before sending them to support.
Your sign-in password stays in the browser
Sign-in opens the system browser at the brokerage's own Nextcloud service, drive.rcib.ai. You enter your account password there. RCIB Agent never receives or stores that account password. After you approve access, Nextcloud issues a separate device-specific credential, called an app password. The app stores that credential and its office session token in the iPhone Keychain so you do not have to sign in for every request.
Face ID or device-passcode checks are handled by iOS. RCIB Agent receives the result of the check, not your face data or device passcode. Camera, photos, microphone and notification access are requested for the features that use them; you can manage permissions in iPhone Settings.
Where information lives
The main brokerage records live on RCIB's own self-hosted infrastructure: Nextcloud for files and Talk, Back Office for agent and deal records, and the RCIB-hosted Ask service for question history. The app also keeps downloaded files, drafts and working caches on your phone. These primary records are not hosted in a third-party cloud database. Some information still passes through or is processed by the service providers below.
Who can receive information
Within RCIB, information is available according to account permissions and the people or conversations you share it with. The app does not include advertising or advertising-tracking tools. It would be inaccurate to say that nothing ever goes outside the brokerage:
- Expo Push Service and Apple Push Notification service: receive notification-routing identifiers and the notification payload to deliver alerts to your iPhone. The Nextcloud relay sends an encrypted notification subject and signature through Expo; it does not add readable message text to that relay payload.
- Expo's update service: receives requests for app updates, including app/project, platform, runtime and update identifiers, the update channel and ordinary network information such as your IP address. It supplies app code and assets; the update request does not upload your deals, documents or messages.
- Apple TestFlight: when you use the beta, Apple collects testing and crash information and shares it with the developer. Feedback you submit can include your name/email, comments, screenshots, device information and app usage information. See Apple's TestFlight information.
- Apple speech recognition: if you choose to dictate a question, the app uses iOS speech recognition. Audio may be processed by Apple because the app does not require on-device-only recognition. The resulting text goes into the question field; you choose whether to send it to Ask RCIB.
- OpenAI, Google Gemini and SerpAPI: Ask RCIB currently uses OpenAI to classify questions, search its knowledge base using embeddings and generate answers. This can send your question and relevant knowledge-base excerpts to OpenAI. Google Gemini is configured as a classification fallback and can receive the question. General questions may be sent as search queries to SerpAPI for Google results, with OpenAI as a search fallback. Avoid including client-identifying or confidential deal details in questions.
- Cloudflare: RCIB's public service connections pass through Cloudflare for network delivery and protection. It processes connection information, such as IP addresses and request metadata, and may process request content in transit. It is not the primary store for brokerage records.
- Recipients you choose: sharing a file or public link, exporting a document, saving to Photos or opening another app can make information available outside RCIB. Check the recipient and link permissions before sharing. Those other services have their own privacy practices.
Retention and signing out
Signing out removes the app's stored credentials and clears its account caches, drafts, saved offline files and local logs. It also requests revocation of this device's credential. It does not delete brokerage records on RCIB's servers or copies you exported to Photos, Files or another service. Deleting the app is not a request to delete your brokerage account.
Ask for a copy, correction or deletion
Contact the office at [email protected] or 416-277-9494 and ask for the person responsible for RCIB Agent privacy. Say which account and records your request concerns. Do not send your password. Ask the office to confirm any identity checks, records it must retain and the expected response date. A deletion request may not mean every transaction record can be erased.
Office mailing address: 5580 Explorer Dr, Suite 600, Mississauga, ON L4W 4Y1.
Ontario and Canadian law
This policy is governed by applicable Ontario and federal Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies. PIPEDA sets rules for how organizations handle personal information in commercial activities. You can read the Privacy Commissioner of Canada's plain-language PIPEDA guidance.
Changes to this page will be identified by its last-updated date. For help using the app, visit RCIB Agent support.