RentRock Privacy Policy

This Privacy Policy describes how Webinane ("we", "us", or "our") collects, uses, and shares information when you use the RentRock mobile application ("App"), available on the Google Play Store.

By downloading or using RentRock, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

We collect the following categories of information when you use the App:

Account Information

When you register, we collect your name, email address, phone number, and profile photo (if you choose to upload one).

Location Data

We collect your precise GPS location while using the App to provide ride booking, route navigation, and driver matching features. Location is only collected while the App is in the foreground and you are actively using a location-based feature.

Payment Information

We collect payment details to process ride bookings. Payment data is handled exclusively by our payment processors (Stripe and PayPal) and is never stored on our servers. We only retain a payment reference ID and booking amount for transaction records.

Photos and Media

We request access to your photo library only when you choose to upload a profile picture. We do not access your media without your direct action.

Device and Usage Data

We may collect device identifiers (e.g., Firebase installation ID for push notifications), app version, operating system version, crash logs, and general usage analytics to improve the App's performance.

We use the information we collect to:

• Provide the core service — match you with drivers, process bookings, calculate routes and fares
• Process payments — charge ride fees via Stripe or PayPal
• Send notifications — booking confirmations, driver arrival alerts, promotional offers (you can opt out)
• Authenticate your identity — maintain a secure session via Supabase Auth
• Improve the App — analyse crash reports, usage patterns, and performance data
• Customer support — respond to inquiries and resolve disputes
• Legal compliance — fulfill obligations under applicable law

RentRock integrates the following third-party services. Each has its own privacy policy:

We share your data only in these limited circumstances:

• With your driver — your name, phone number, and pickup location are shared with the matched driver to complete your ride
• With payment processors — Stripe and PayPal receive payment details to complete transactions
• Service providers — Supabase, Firebase, and Google Maps process data on our behalf under data processing agreements
• Legal requirements — we may disclose data if required by law, court order, or to protect the safety of users or the public
• Business transfers — in the event of a merger or acquisition, data may be transferred to the acquiring entity

We do not share, sell, rent, or trade your personal information to any third parties for their own marketing purposes.

We retain your data for as long as your account is active or as needed to provide services:

• Account data — retained until you delete your account
• Booking history — retained for up to 3 years for legal and accounting compliance
• Location data — retained only during an active trip; not stored long-term
• Crash and analytics data — retained for up to 12 months in anonymized form

When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request deletion of your account and personal data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Opt-out of notifications — disable push notifications at any time in your device Settings
• Revoke location access — disable location permissions in your device Settings

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

RentRock is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such data immediately.

If you believe your child has provided us with personal data, please contact us and we will take appropriate action.

• TLS/HTTPS encryption for all data transmitted between the App and our servers
• Encryption at rest for all data stored in Supabase
• PCI-DSS compliant payment processing via Stripe (we never store raw card data)
• Row-Level Security (RLS) policies to ensure users can only access their own data
• Secure authentication via Supabase Auth with JWT tokens

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong password and keep your account credentials confidential.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you via a push notification or in-app message if the changes are material.

Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.