How RentaFlo handles user data

Data we collect

• Account details such as user ID, email address, display name, phone number, city, and verification status.
• Vehicle and listing details such as car photos, registration number, chassis number, engine number, pricing, availability, and optional owner-only car document images.
• Booking records such as requested dates, pickup and return locations, generated invoice/agreement content, acceptance records, payment status, payment proof images, and timeline logs.
• User content such as listing chat messages, support messages, chat reports, handover photos, notes, and evidence checklist images.
• Device and notification data such as Firebase Cloud Messaging tokens, platform, and notification delivery records.
• Subscription data from RevenueCat, Apple App Store, or Google Play such as entitlement status, product identifier, purchase event type, and active car-slot limits.
• Location data only when a user grants permission for verification or rental safety records.

How we use data

• Create and secure user accounts.
• Show public car listings and let renters request bookings.
• Let owners manage fleets, availability, bookings, invoices, agreements, payment status, photos, and car documents.
• Support pre-booking chat, chat reporting, blocking, and internal moderation.
• Send booking, payment, chat, support, and account notifications.
• Verify users manually through the internal admin team.
• Manage subscriptions and car-slot entitlements through RevenueCat and app-store billing systems.
• Investigate abuse, fraud, disputes, account deletion requests, and platform safety issues.

Sharing and processors

RentaFlo does not sell user data. Data is shared only where needed to run the app, provide notifications, manage subscriptions, review safety issues, comply with law, or protect users.

• Supabase stores app accounts, database records, private storage files, authentication sessions, and realtime app data.
• Firebase Cloud Messaging receives device push tokens and notification payloads needed to deliver push notifications.
• RevenueCat, Apple App Store, and Google Play process subscription purchase and entitlement information.
• Softotic internal admin team members may review verification requests, support messages, chat reports, bookings, evidence, and account deletion requests when needed to operate and protect RentaFlo.

Retention and deletion

Users can request deletion from inside the app or through the account deletion page. Some records may be retained for a limited period when needed for safety, abuse prevention, disputes, payment investigation, legal compliance, accounting, or admin audit history.

Contact

For privacy questions or data requests, contact Softotic support using the email address linked to your RentaFlo account when possible.