Privacy policy

Who processes your data

The controller of your personal data is Kullakoda OÜ, registry code 12832208. For data protection questions, write to info@camelot.ee.

What data we collect

• Account: email address, username, display name, about text, language preference and a hash of your password. When you sign in with Google or Apple, we receive your email address and name and the identifier that service gives us.
• Listings: title, description, category, price, photos, delivery terms, and the tool's address and coordinates.
• Bookings: dates, the price calculation, your note to the owner and, for a delivery, the address you entered.
• The messages you exchange with another user, and the reviews and reports you send.
• Technical data: session identifiers and a hash of your IP address, used to limit request rates. We use no advertising or tracking tools.

Location

If you allow the app to use your location, we use it only to find tools near you and to calculate distance. We do not store your device's location or show it to others.

A tool's exact address is seen only by its owner and by the renter of a confirmed booking. Everyone else sees an area accurate to about one kilometre.

Before a photo is stored, we remove its metadata, including where it was taken.

The delivery address you enter in a booking is used to calculate the distance and the fee, and the owner of the tool sees it.

Emails

We only send emails about the service: verifying your address, resetting and changing your password, booking notices (request, approval, decline, cancellation, expiry and a reminder the day before a rental starts), a request for a review after a rental, and a notice about unread messages. We send no marketing email. Emails arrive in the language you chose in the app.

Chat

Messages are seen only by the two parties of a conversation. We read a message only when someone has reported it or when it is needed to investigate misuse. Only text can be sent in a chat.

Reviews

The review a renter leaves an owner after a rental is public: it is shown on the owner's profile with the writer's username, and it counts toward the owner's average rating. We may hide a review that breaks the rules.

What we use the data for

We use the data to provide the service: to manage your account, to show listings and search results, to pass on bookings and conversations, to send service emails and to prevent misuse. The legal basis is the performance of our contract with you and our legitimate interest in keeping the service safe.

We use your device's location only with your permission. You can withdraw it in your device settings at any time, and the app works without it.

Who we share data with

Other users see your username, display name, about text, listings and the reviews you have received. The other party of a booking sees the details of that booking.

We use processors: Vercel (hosting and file storage), Neon (database) and Resend (sending email). The database and the servers are in the European Union.

The addresses you type when you list a tool or ask for a delivery are sent to the In-ADS address service of the Estonian Land Board (Maa-amet), which turns them into map coordinates. The service is hosted in Estonia.

The maps in the app are loaded from the map tile servers of the OpenStreetMap Foundation in the United Kingdom. Your device sends them its IP address and the area of the map you are looking at, which can be the area around your location or around a tool.

When you sign in with Google or Apple, we check your identity through that service. We do not pass on what you do in Renpal to them.

Apart from the address lookup above, we disclose data to public authorities only when the law requires it.

We do not sell your data or share it for advertising.

Website and cookies

The Renpal website uses no cookies, no analytics and no third-party tracking. The app keeps on your device only the identifiers needed to stay signed in, your settings, your recent searches and an unfinished listing with its address and map pin. Your recent searches and the unfinished listing are erased from the device when you sign out or delete your account.

Security

We keep your password only as a hash, never in readable form. Traffic between the app, the website and the server is encrypted. Only those who need the data to provide the service have access to it.

How long we keep the data

We keep your data for as long as you have an account. When you delete your account, we erase your sign-in details, email address, username, listings and photos. Earlier bookings, messages and the reviews you wrote stay for the other party, without your name.

The verification and reset links we email can be used once, and they expire.

We keep reports of objectionable content for as long as it takes to resolve them and to prevent repeated violations.

Your rights

You have the right to see your data, to receive a copy of it, to have it corrected or erased, to have its processing restricted and to object to its processing. To do so, write to info@camelot.ee. If you believe we are infringing your rights, you may contact the Estonian Data Protection Inspectorate.

We answer a request within one month at the latest. You can delete your account and its data yourself in the app at any time.

Age limit

Renpal is meant for people aged 18 or over. We do not knowingly collect the data of minors.

Changes to this policy

If we change this policy in an important way, we will tell you in the app. The date of the version in force is always at the top of this page.