Privacy Policy
Last updated 20 August 2026
Who we are
rentr is a peer-to-peer rental marketplace operating in the Philippines. This policy explains the information the service collects, why it is needed, and how it is protected.
What we collect and why
- Email address
- To identify your account and let you sign in.
- Mobile number
- Not required during the initial launch. If phone verification is enabled later, it will be used to verify your account and deliver rental alerts you choose to receive.
- Name and profile details
- Shown to the people you rent with, so they know who they are dealing with.
- Listing photos and descriptions
- Published on your listings so renters can see what they are renting.
- Item location
- Stored precisely so distance search works. Shown publicly only as an approximate area — see "Location" below.
- Rental requests, offers and bookings
- To operate the rental and to resolve disputes.
- Handover photos
- Evidence of an item’s condition at pickup and return, used only if a dispute arises.
- Payout details (GCash, Maya or bank)
- Shown to a renter only after you approve their request, so they can pay you directly. Encrypted at rest.
- Government ID and selfie (optional)
- Only to confirm you are who you say you are, and for nothing else.
- Reviews you write and receive
- Published on profiles to build reputation.
What we never do
- We do not sell your personal information.
- We do not share it with advertisers or data brokers.
- We do not hold your money. Payments go directly between renter and owner, so we never see your card or wallet balance.
Location
We store the precise coordinates you give for a listing, because distance search would otherwise be wrong. We never publish them. Publicly, a listing shows an approximate pin offset several hundred metres from the real location, plus the city.
The exact address is released to one person, at one moment: the renter whose request you approve. It stops being shown if that booking is cancelled.
Government IDs
Identity verification is optional. If you choose it, here is exactly what happens to your ID:
- The image is encrypted before it is stored, and is never placed at a public web address.
- Only a rentr reviewer can open it, through an access-controlled route.
- Every single view is logged against the reviewer's account.
- It is deleted 30 days after review. We keep the pass or fail decision, not the image.
Who else sees your information
- Other rentr users
- Your name, profile, ratings, listings, and — after you approve their request — your exact address and payout details.
- Our SMS provider
- Only when text messaging is enabled: your mobile number and the text of notifications, so they can be delivered.
- Our hosting and database providers
- They process data on our behalf under contract and may not use it for their own purposes.
- Law enforcement
- Only where we are legally compelled, and only what is compelled.
How long we keep things
- Government ID images
- 30 days after review, then deleted.
- Verification decision
- Kept while your account exists, so your badge remains valid.
- Rental records, reviews and handover photos
- Kept while your account exists — they are the record of what was agreed and returned.
- Reports you file or receive
- Kept after resolution, so a takedown does not erase the reason for it.
- Account data
- Kept while the account is active, subject to retention requirements for completed rentals and safety records.
Your rights under the Data Privacy Act
You have the right to:
- Be told what we hold about you, and get a copy.
- Correct anything inaccurate.
- Object to processing, and withdraw consent for anything optional.
- Have your data erased or blocked, subject to the note below.
- Receive your data in a portable format.
- Be indemnified for damage caused by inaccurate or unlawfully obtained data.
- Complain to the National Privacy Commission at privacy.gov.ph if you think we have got this wrong.
One honest limit: we may need to retain some records of a completed rental — who rented what, when, and the reviews left — even after an erasure request, because the other party has a legitimate interest in their own transaction history and reputation. We will tell you which records those are.
Security
Passwords are hashed. Payout account numbers and identity documents are encrypted at rest. Sessions use signed, HTTP-only cookies. Access to the exact address and payout details is gated behind a single approval check, and identity document access is logged.
No system is perfect. If we discover a breach affecting your personal information, we will notify you and the National Privacy Commission as the law requires.
Changes
If we change this policy materially we will say so on this page and update the date at the top.