Draft: pending legal review.
Last updated: · Version 6
Privacy Policy
This policy explains what personal data Onrently collects, why, who can see it, and what you can do about it. It describes how the app works today.
[LAWYER: Check this policy against Nepal's Individual Privacy Act, 2075 (2018) and its regulations, the Electronic Transactions Act, and any other law that applies (including foreign laws if we serve users abroad).]
1. Who we are
Onrently is run by Lukla Logic, [COMPANY ADDRESS] (registration number [REGISTRATION NUMBER]). We decide how your data is used.
Contact us about privacy at [SUPPORT EMAIL].
2. What we collect
From your Google account, if you sign in with Google: your name, email address, profile photo and Google account ID. We never see your Google password.
If you create an account with an email and password: your name, your email address and your password. We never store the password itself, only a one-way scrambled form (a salted hash) that can't be turned back into the password, so nobody at Onrently can read it. We also keep the date you confirmed your email address. If you later sign in with Google using the same email address, both ways open the same account.
Confirmation and reset links: when we email you a link to confirm your address or to choose a new password, we keep a scrambled form of the link's code, when it was made, when it ends and whether it was used. Confirmation links work for 24 hours and reset links for 60 minutes, each only once. These records are deleted one to two days after the link ends.
What you add to your profile: your name (if you change it), phone number, city, whether you rent, list or both, and your email notification setting.
Listings: title, description, category details, photos, prices, deposit, and the pick-up location you set (an exact point and an approximate area — see section 4).
Saved items: the listings you save with the heart button, and when you saved each one. Only you can see your saved list. Owners are not told who saved their listing, and we show no count of saves.
Service profile, if you offer work on the "Hire a worker" page: the kind of work, a one-line headline, a description, the areas you work in, a price note, a phone number for customers, and whether that number is on WhatsApp. While your profile is live, everyone can see it together with your name, profile photo and verified tick. The phone number you give there is shown only to people who are signed in (see section 6). A profile is live only after your ID is verified, and you can pause or remove it at any time.
Rental requests: the item, dates, plan, price, your message, cancellation or decline reasons, and each status change.
Chat: messages, photos you send, and pick-up locations you share in chat.
Reviews and reports: reviews you write and receive, ratings, and reports you make about reviews.
ID verification (only if you choose it): photos of the front and back of your ID document, the type of document, the dates, and the decision. See section 5.
Device and usage data: technical logs from our server: the kind of request, the page or action requested (without search terms or coordinates), the result, errors, and times. Our logs don't record your IP address, email, phone number, coordinates, cookies or login token. To limit abuse, our server briefly keeps a count of requests per IP address in memory; it is not saved. [HOSTING PROVIDER] may keep its own access logs.
Listing views: each listing shows how many times it was viewed. When an item page has been open for about two seconds, we count one view per visitor per listing per day (Nepal time). The owner's own visits, admins and automated bots aren't counted. To avoid counting you twice we keep, for one to two days, a scrambled code made from your account ID (or, if you aren't signed in, from the visitor cookie in section 8), together with the listing and the date. That code can't be turned back into your ID. We never store who viewed a listing, and nobody — owners included — can see it; everyone sees only the total.
Device location (only if you allow it): see section 4.
Emails we send you: a copy of each email (recipient, subject and content) and whether it was delivered.
3. Why we use it
| Data | Why |
|---|---|
| Google account basics | To sign you in, keep your account secure and contact you. |
| Email, password hash | To sign you in with a password, to check that the email address is yours, and to let you reset the password. |
| Profile details | To show your public profile and to let the other person reach you after a request is accepted. |
| Listings and photos | To show your items to renters. |
| Pick-up locations | To show an approximate area on the map, and the exact point after you accept a request. |
| Requests, chat | To run the rental process between you and the other person. |
| Reviews, ratings, reports | To build trust and to remove abuse. Owner ratings and verification are also used to order listings on Explore. |
| ID documents | To check your identity if you ask for the verified tick. |
| Logs | To keep Onrently working and secure, and to find and fix problems. |
| Email copies | To retry failed emails and to check what was sent. |
[LAWYER: Add the legal basis for each use under Nepali law (for example consent or necessity for the service), if required.]
4. Location
- Public pages show only an approximate area. Each listing gets an approximate point, set once at a random offset from the real one. Explore, the map, search and "Near me" only ever use this approximate point.
- The exact pick-up point is shown only to the owner, and to the renter of a request the owner has accepted, while it is accepted. Nobody else can see it, and it is never put in emails.
- Your device location is used only when you tap "Use my location" or "Near me" and allow it in your browser. We round it to about 100 metres and send it with your search to find nearby items. We don't save it on our servers or link it to your account. It is kept in your browser for that session only.
5. ID documents
- Verification is optional.
- Your ID photos are stored as private files. Only authorised admins can open them, and every view is logged with who viewed it and when.
- We never store your ID number, date of birth or any other text from the document.
- The photos are never shown to other users and never put in emails. Other people only see a green tick next to your name.
- The photos are deleted 30 days after we decide (approve or reject), at once if you cancel your request, and at once if your account is deleted.
- We keep the fact that you are verified, the dates, and which admin decided.
6. Your phone number
Your phone number is optional. It is shown only to the other person in a rental request after it is accepted, while it stays accepted. It is never shown on your public profile or in emails.
If you offer a service, you give a separate phone number for customers on your service profile. That number is shown to every signed-in user on the "Hire a worker" page while your profile is live, so that they can call or message you (WhatsApp opens outside Onrently, under WhatsApp's own terms). It is not shown to people who are not signed in, and not while your profile is paused, hidden by us or waiting for ID verification. Removing the service profile deletes that number. We don't record who looked at it or who called you.
7. Who we share data with
We don't sell your data. We share it only with other users as described above, and with these service providers, who process it for us:
| Provider | What for | Data |
|---|---|---|
| Sign-in | Your Google sign-in token, checked by Google | |
| Cloudinary | Storing and showing photos; private storage of ID documents | Listing photos, chat photos, ID photos |
| Neon | Our database | All account, listing, request, chat and review data |
| Resend | Sending email | Your email address and the email content |
| [MAP TILE PROVIDER] | Map images | Your IP address and the map area you view (not your account) |
| [HOSTING PROVIDER] | Running the website and server | All data passes through it |
We may also share data when the law requires it, or to protect people from harm or fraud.
[LAWYER: Do we need data processing agreements with these providers, and must they be named here?]
8. Cookies and browser storage
- We use three cookies:
- a secure login cookie (
access_token) that keeps you signed in for up to 7 days, not readable by scripts on the page; - a visitor cookie (
bhaada_vid) holding a random ID (nothing about you), set the first time you open an item page, kept for 365 days, not readable by scripts on the page. It is only used so a view is counted once a day (section 2), not to follow you around the site or elsewhere. Deleting it means your next visit may be counted again; - a listing-order cookie (
bhaada_seed) holding a random code and the time you were last active, set when you open the home page. It keeps the "Mixed for you" order of listings the same during your visit. It ends when you close your browser or after 30 minutes without activity, holds nothing about you, and isn't sent to anyone else. Our page reads it so the order doesn't jump while you browse.
- a secure login cookie (
- We store two small items in your browser: your answer to the location question, and your rounded location for the current session.
- We use no advertising or tracking cookies and no analytics services.
- Google's sign-in button is loaded from Google and may set Google's own cookies. [LAWYER: confirm whether this needs a cookie notice.]
9. Emails
We email you when a request is sent to you or answered, about new chat messages (grouped per conversation, not one per message), about reviews, and about your ID verification. You can turn emails off at any time under Profile → Email me about requests & messages, or with the "Manage notifications" link in every email.
Emails about your account itself are sent even when notifications are off: the link to confirm your email address, the link to choose a new password, and a note when someone tries to create an account with an address that already has one. We send at most three links of each kind per account per hour. The copy we keep of these emails (section 2) includes the link; a link stops working once used or when its time ends.
10. How long we keep data
| Data | How long |
|---|---|
| Account, listings, requests, chat, reviews | While your account exists. [RETENTION AFTER DELETION] |
| Service profile (Hire a worker) | Until you remove it or your account is deleted |
| Password hash | While your account exists, until you change it |
| Confirmation and reset link records | One to two days after the link ends |
| ID document photos | 30 days after the decision, or sooner (see section 5) |
| Verification decision and admin view log | [AUDIT LOG RETENTION] |
| Copies of emails | [EMAIL LOG RETENTION — no limit is set yet] |
| Server logs | [SERVER LOG RETENTION] |
| View counting codes (section 2) | Deleted daily; kept one to two days |
| Visitor cookie in your browser | 365 days, or until you delete it |
| Listing-order cookie in your browser | Until you close your browser or 30 minutes idle |
[LAWYER: Set retention periods. Note: copies of emails are currently kept with no time limit; this must be fixed or disclosed.]
11. Your rights
You can:
- See your data. Most of it is on your Profile and in your Inbox. For a full copy, email us.
- Correct your data. Change your name, phone and city on your Profile. (While you are verified, your name is locked; email us to change it.)
- Download your data. Email us and we will send you a copy. [DATA EXPORT: replace when an in-app export exists.]
- Delete your account and data. Email us from the address you sign in with. [IN-APP DELETION: replace with "Use Profile → Delete my account" when it exists.] Your ID photos are deleted at once.
- Object or complain. Contact us first. You may also complain to [DATA PROTECTION AUTHORITY].
Email [SUPPORT EMAIL] to use any of these rights. We may need to confirm it's you. We will reply within [RESPONSE TIME].
12. Security
- All connections use HTTPS.
- Your login cookie is secure and can't be read by page scripts.
- Passwords are stored only as a salted hash (scrypt). Choosing a new password does not sign out devices that are already signed in; their login ends by itself within 7 days.
- Only the people who need it can see your data. Admin access to ID documents is logged.
- ID documents are private files that are never sent to anyone's browser except an authorised admin's, and only through our server.
- We limit how often requests can be made, to slow down attacks.
- No system is perfectly secure. If we learn of a breach that affects you, we will tell you [LAWYER: and the authorities, as the law requires].
13. Children
Onrently is not for people under 18. We don't knowingly collect data from children. If you think a child has an account, tell us and we will delete it.
14. International transfers
Some of our providers may store or process data outside Nepal. [DATA LOCATIONS: list the regions for each provider.]
[LAWYER: Check what Nepali law requires for transferring personal data abroad.]
15. Changes to this policy
We may change this policy, for example when we add a feature. The version and date are shown at the top. If a change is important, we will tell you in the app or by email before it takes effect.
16. Contact
Lukla Logic
- Email: [SUPPORT EMAIL]
- Phone: [SUPPORT PHONE]
- Address: [COMPANY ADDRESS]