Privacy Policy

This Privacy Policy explains what information Rentiqo collects through our website and mobile apps (the "Services"), how we use it, and the choices you have. It applies to everyone who creates an account or otherwise uses the Services.

• Account information: name, email, phone number, password (stored as a salted hash, never in plain text), gender and date of birth if you choose to provide them.
• Identity verification data: a photo of a government-issued ID and the text automatically extracted from it, encrypted at rest (AES-256-GCM) and used solely to confirm the name matches your profile.
• Location data: approximate location derived from your IP address at signup (used only to default your country, currency, timezone, and language — you can change all of these in your profile at any time), and, where you grant permission, precise GPS coordinates during a rental handover check-in/check-out to timestamp condition photos.
• Listings and rental activity: items you list or rent, rental dates, prices, messages within the rental flow, condition photos, and any insurance claims you submit.
• Device and usage data: device push-notification token (if you enable push notifications), app version, and basic diagnostic/log data.
• Payment information: processed by our payment provider; Rentiqo does not store your full card number.

• To operate the marketplace: creating your account, publishing listings, processing rental requests, generating rental contracts, and facilitating handovers.
• To verify identity and calculate a trust score used to unlock certain marketplace features.
• To send transactional notifications (push, email, and/or SMS) about your rentals, contracts, handovers, claims, and account — see your Notification Settings to manage channel preferences.
• To detect and prevent fraud, abuse, and violations of our Terms of Service.
• To default (never to permanently fix) your country, currency, timezone, and language based on your IP address at signup — this is a best-effort convenience and is never used to make a security or eligibility decision.

• The other party to a rental: a Lender and Borrower can see each other's name, profile photo, and the information needed to complete a rental (not full ID document images).
• Service providers: cloud hosting, storage, and (where enabled) push-notification delivery via Expo's push service. Email/SMS delivery, when enabled in a given environment, would go through a provider under a data-processing agreement.
• Legal and safety: where required by law, or to protect the rights, safety, or property of Rentiqo, our users, or the public.
• We do not sell your personal information.

Our website uses browser local storage to keep you signed in (storing your session token) and to remember basic preferences. Our mobile apps store your session token in the device's secure, encrypted credential storage (iOS Keychain / Android Keystore). We do not use third-party advertising trackers.

You can delete your account at any time from Profile → Delete Account. When you do, we anonymize your personal details (name, photo, government ID) and permanently delete your uploaded photos and documents from storage; some records tied to a completed rental (e.g. the immutable audit trail of a transaction) may be retained in de-identified form where needed for legal, financial, or dispute-resolution purposes. You can also delete just your uploaded government ID at any time without deleting your whole account.

• Access, correct, or update your profile information at any time.
• Override your detected country, currency, timezone, and language in your profile settings.
• Manage which notification channels (push/email/SMS) you receive in Notification Settings.
• Delete your government ID or your entire account, as described above.
• Depending on where you live, you may have additional rights — e.g. under the GDPR (EU/UK), the CCPA (California), or India's Digital Personal Data Protection Act, 2023 (right to access, correct, and erase your personal data, and to withdraw consent) — to request a copy of your data or object to certain processing. Contact us to exercise these rights; we'll respond within the timeframe your local law requires.

The Services are not directed to children under 18, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

We use industry-standard safeguards including encrypted storage of sensitive documents, hashed passwords, rate limiting, and role-based access controls. No system is perfectly secure, and we encourage you to use a strong, unique password and keep your device secure.

Our servers are located in the United States. If you use the Services from India or elsewhere outside the US, your information is transferred to and processed in the United States regardless of where you're located, and we apply the same safeguards described in this policy to that data no matter where it's processed. By using the Services, you consent to this transfer.

We may update this Privacy Policy from time to time. Material changes will be announced through the in-app notification inbox or by email before they take effect.

Questions about this policy or your data? Contact us at rentiqo.co@gmail.com.