Rentanoo app privacy policy
Last updated: 20 October 2026
This policy explains what data the Rentanoo mobile app (iOS and Android) collects, why, who it is shared with and how to exercise your rights.
1. Data controller
RENTANOO SASU, registered with the Trade and Companies Register (RCS) of Saint-Pierre, La Réunion, under no. 100 000 926, with its registered office at 38 chemin de la Source, 97416 Saint-Leu, La Réunion (France). Operations are carried out locally in Nosy Be (Madagascar).
Contact: WhatsApp +261 37 34 379 12 or e-mail support@rentanoo.com.
2. What the app does
The app lets you book, in Nosy Be, taxi-boat crossings (shared or private), excursions and restaurant tables. Each request is sent to the local provider, who accepts or declines it. Payment is made online through Stripe. The app also lets you leave a review and offers a dedicated area for partner providers.
3. Data we collect
- Account: e-mail address; if you sign in with Apple or Google, the first and last name they share with us (Apple may provide a relay e-mail address instead of your real one).
- Booking: the first name and phone number you enter, and the content of your request (date, time, number of people, message).
- History: your bookings and payments (amounts, status). No card data: your card number is entered at Stripe, Rentanoo never sees it.
- Reviews: text, rating and, if you wish, a photo chosen from your photo library (the app does not use the camera).
- Notifications: your device's push notification token, to keep you informed about your bookings.
- Anonymous usage metrics: app opens and screens viewed, not linked to your identity, to improve the app.
The app does not collect your location, shows no advertising, does no cross-app tracking, and Rentanoo never sells data.
4. Why (purposes and legal bases)
- Creating and managing your account, handling bookings, payments, refunds and cancellations: performance of the contract.
- Sending notifications about your bookings: performance of the contract (you can turn them off in your phone settings).
- Publishing your reviews: your consent, given when you post.
- Bookkeeping and legal obligations: legal obligation.
- Anonymous usage metrics and service security: Rentanoo's legitimate interest in running and improving the app.
5. Who we share data with
- The provider concerned (boat captain, guide, restaurant): your first name, phone number and booking details, only once the booking is confirmed.
- Stripe: card payment processing and refunds.
- Supabase: hosting of the app's database. Servers are located in the region chosen for the project (European Union or another region offered by Supabase); any transfer outside the European Union is covered by GDPR safeguards (standard contractual clauses).
- Expo, Apple and Google: delivery of notifications to your device.
- Telegram: forwarding booking requests to providers and to Rentanoo.
These processors only use your data to provide their service. Some may process it outside the European Union, under the safeguards provided by the GDPR.
6. Retention
- Account: until it is deleted.
- Bookings and payments: for the legal retention period of accounting records (10 years in France), in anonymised form once the account is deleted.
- Reviews and review photos: as long as they are published.
- Notification token: until the account is deleted or the app is uninstalled.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, object to, restrict and port your data, and to withdraw your consent at any time. To exercise these rights: WhatsApp +261 37 34 379 12 or e-mail support@rentanoo.com. You can delete your account yourself: see Delete your account.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Children
The service is not intended for people under 16 without the consent and supervision of a parent or legal guardian.
9. Security
Exchanges between the app and our servers are encrypted (HTTPS). Access to data is limited to the people and services that need it. Payments are processed by Stripe, which is PCI-DSS certified.
10. Changes
This policy may change. The last update date is shown at the top of the page; you will be informed in the app of any significant change.