Privacy Policy
RentalGenie is photo evidence for rental cars. The privacy model is simple:your scans start on your device, and only reach our cloud when you choose to back them up. Here is exactly what happens either way.
1. What we collect
| Data | What & why |
|---|---|
| Account identity | Name and email from the identity provider you sign in with (currently Google, via OAuth). Used to identify your account and sync scans across devices. We never see your provider's password. |
| Scans & photos | The photos and details (plate, odometer, timestamps) you capture. Stay on your device until you back them up; stored in the cloud only after that, to preserve them for 365 days, sync them, and generate reports. |
| Usage data | Basic events (screens opened, features used) to understand what works and fix what doesn't. No advertising, no profiling, no selling — ever. |
| Technical data | Device model, OS version, app version, crash diagnostics — to keep the app running on the devices people actually use. |
2. On device first
Photos are captured and compared on your device. A scan saved "on this device" is invisible to us — we can't read it, lose it, or be ordered to hand it over, because we don't have it. Backing up to RentalGenie Cloud is an explicit action you take (manually, or automatically once you've turned auto-backup on while signed in). Before you sign in, nothing leaves the device.
3. RentalGenie Cloud
The cloud exists for three purposes only: preservation (keeps scans safe for 365 days if you lose or replace your phone), multi-device access, andreport generation. Cloud-stored scans are deleted automatically when their 365-day retention ends. You can also delete any scan — or your entire account and everything in it — at any time from the app.
4. Who sees your data
- Nobody by default. We do not sell, rent, or share your data with advertisers or data brokers.
- Reports and photos go only where you download or share them.
- Service providers we rely on (e.g. cloud hosting) process data strictly on our instructions and are contractually bound to protect it.
- We may disclose data if legally compelled — and because of on-device storage, most of your content wouldn't even be in scope.
5. Sign-in with Google — and others
Sign-in uses OAuth: you authenticate with Google, and we receive only your name and email. We don't access your Google Drive, contacts, photos, or anything else in your Google account. You can revoke access any time from your Google account settings. Other providers (e.g. Apple) may be supported in the future, on the same principle.
6. Retention
- On-device scans: kept until you delete them; deleting the app or "delete all local data" erases them.
- Cloud scans: deleted automatically 365 days after upload.
- Account: deleting your account removes your cloud data without undue delay.
- Usage/technical data: kept in aggregate or pseudonymous form only as long as needed for product improvement.
7. Your rights
You can access, export, correct and delete your personal data at any time — most of it directly in the app. Beyond that, under the Swiss FADP and the EU GDPR you may request information, rectification, erasure, restriction, portability, and object to processing. Write tosupport@rentalgenie.app and we'll respond within 30 days.
8. Security
Data in transit is encrypted (TLS); data at rest in our cloud is encrypted at rest. Access is limited to systems that need it. No service is perfectly secure, but we treat your evidence the way we'd want our own deposit disputes treated.
9. Children
RentalGenie is not intended for children under 16, and we don't knowingly collect their data.
10. Changes to this policy
If this policy changes materially, we'll announce it in the app and on this page before it takes effect. The version and date at the top always reflect the current policy.
11. Contact & controller
Controller for all data processing described here is Merola Software & Services, Wartauweg 19, 8049 Zurich, Switzerland. Questions, requests or complaints:support@rentalgenie.app.