Privacy Policy
Last updated: August 11, 2026
Who we are
Rental Return is operated by Rental Return ("we", "us", "the app"). Rental Return is the data controller for the personal data described in this notice: we decide what data is collected and why. Our payment provider Paddle.com acts as an independent controller for payment and tax data (see "Payments and Merchant of Record" below). You can contact us about privacy at support@rentalreturn.app.
Overview
Rental Return helps you build timestamped, GPS-tagged evidence of a rental car's condition at pickup and return. This notice explains what we collect, why we collect it, the legal bases we rely on, and the choices you have.
Information you provide
- Account: email address and password when you create an account, or the email address supplied by Google if you sign in with Google.
- Record details: rental company, odometer readings, fuel levels, agent name, and any notes you type or dictate.
- Media: photos, video walkaround clips, and audio notes you capture while creating a record.
Information captured with your permission
The app asks before using your device's sensors. Nothing is gathered silently:
- Location: GPS coordinates are captured only when you tap "Find my location" or start a new record.
- Camera: photos and video are captured only when you open a capture step.
- Microphone: audio is recorded only while you hold the dictate button or record an audio note. Recordings are transcribed to text and not retained as audio for longer than needed.
How we use your information
- To store and display your rental records so you can export or share them.
- To generate PDF evidence reports from the media and metadata you captured.
- To reverse-geocode GPS coordinates into a readable place name for your records.
- To authenticate you and keep your records private to your account.
Legal basis for processing
- Performance of a contract: creating and maintaining your account, storing your records and media, generating reports, and providing paid Pro features.
- Consent: access to your device location, camera and microphone, and any marketing emails. You can withdraw consent at any time in your device or account settings.
- Legitimate interests: keeping the service secure, preventing fraud and abuse, and improving reliability and product quality.
- Legal obligation: tax, accounting and record-keeping duties relating to purchases, and responding to lawful requests.
Payments and Merchant of Record
Purchases of Rental Return Pro are processed by Paddle.com, which acts as the Merchant of Record for all our orders. Paddle collects and processes the payment data needed to complete your order — including billing name, billing address/country, payment method details and tax identifiers — and handles invoicing, sales tax/VAT, subscription management, refunds and payment-related customer service. We never see or store your full card details; we receive only the order and subscription status linked to your account. Paddle processes this data under its own privacy notice.
Who we share data with
- Service providers / subprocessors: hosting, database and storage, authentication, reverse-geocoding and AI transcription providers (listed below).
- Merchant of Record: Paddle.com, for the sale of the product, subscription management, payments, tax compliance and invoicing.
- Professional advisers: legal and accounting advisers where necessary.
- Authorities: where we are required to disclose data by law.
How your data is stored and protected
Your records and media are stored in a private, per-account cloud database and storage bucket protected by row-level security. Only you can read or download your own records unless you choose to share them. Photos are compressed before upload to save data. We do not sell your data or share it with rental companies.
Third-party services
- Supabase (our managed backend) for authentication, database, and file storage.
- Google for optional sign-in.
- BigDataCloud for converting GPS coordinates to a place name.
- AI transcription for turning dictated audio into text. Audio is sent for transcription and is not used to train models.
Your choices
- You can deny location, camera, or microphone permission at any time in your device settings.
- You can delete any record, which removes its media and metadata.
- You can sign out or request account deletion by contacting us.
Data retention
Records and media are kept until you delete them. If you request account deletion, your records and associated files are removed.
Children's privacy
The app is not intended for children under 13, and we do not knowingly collect their information.
Changes to this policy
We may update this policy as the app evolves. We will update the "Last updated" date above whenever it changes.
Contact
Questions about this policy or your data? Email support@rentalreturn.app.