Privacy Policy

Under You is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it. Parents or guardians who believe their child has provided us with personal information should contact us at support@underyourental.com.

Below are the categories that map to Apple's App Privacy ("nutrition label") disclosures on the App Store. All items marked linked to you are associated with your Under You account. None of the data we collect is used to track you across apps or websites owned by other companies.

• Identity & contact info (linked to you) — name, email address, phone number, city/province, profile photo, bio.
• Verification data (linked to you) — government-issued ID documents and a selfie you upload for identity verification. Visible only to our review team and used solely to confirm you are a real, unique adult.
• User content (linked to you) — item listings, listing photos, availability, prices, messages, reviews, and reports you submit.
• Photos & camera (linked to you) — images you choose to upload from your library or capture with the camera for listings, booking condition photos, your profile photo, or identity verification. We only access the specific photos you select; we do not scan or upload your library in the background.
• Financial info (linked to you) — booking amounts, payout status, and (for owners) the bank/debit details you provide to Stripe. Full card numbers and bank credentials are collected and stored by Stripe, never by Under You.
• Coarse location (linked to you) — the city or area you provide when creating listings or searching. We do not collect precise GPS location and do not run any background location tracking.
• Identifiers (linked to you) — your Under You user ID, and, on mobile, a push-notification token generated by OneSignal so we can deliver booking and message alerts.
• Usage data (linked to you) — the pages/screens you view, features you use, and actions you take, used to operate and improve the service.
• Diagnostics (not linked to you) — crash reports and performance logs used to fix bugs.

We do not use Apple's App Tracking Transparency (ATT) prompt because we do not track you across other companies' apps or websites and we do not use the IDFA.

• Operate the marketplace — create listings, process bookings, take payments, and issue payouts.
• Verify identity and keep the community safe (reviews, reports, blocking, fraud prevention, moderation).
• Send transactional notifications about booking requests, confirmations, cancellations, messages, and payouts.
• Provide customer support and respond to your requests.
• Debug, secure, and improve the service.
• Comply with legal obligations (tax, anti-fraud, lawful requests).

We do not sell your personal information and we do not share it for advertising. We share it only:

• With other users as needed to complete a rental (e.g. your first name, profile photo, rating, and general area are visible to the counterparty; owners and renters exchange the messages and photos needed for pickup/return).
• With service providers ("subprocessors") that run the platform on our behalf — see the table below.
• For legal reasons — to comply with applicable law, respond to lawful requests from public authorities, enforce our Terms, or protect the rights, property, and safety of Under You, our users, or the public.
• In a business transfer — if Under You is involved in a merger, acquisition, or sale of assets, your information may be transferred, and we will notify you before it becomes subject to a different privacy policy.

The following providers process personal data on our behalf:

On mobile, Under You uses OneSignal to deliver push notifications (booking requests and confirmations, new messages, payout events). You will be asked for permission the first time notifications are relevant. You can turn notifications off at any time from your device's OS settings (iOS: Settings → Notifications → Under You; Android: Settings → Apps → Under You → Notifications). Turning them off does not delete your account.

The mobile app requests the following device permissions, and only for the purposes described:

• Camera — to take listing photos, condition photos at pickup/return, a profile photo, and a verification selfie.
• Photo library — to let you pick photos to upload for the same purposes. We only access the specific images you select.
• Notifications — to alert you about bookings and messages (see above).

We do not request precise location, background location, contacts, calendar, microphone, health, or motion data.

Payments, card authorizations, refunds, and payouts are handled by Stripe under its own terms and privacy policy. Card numbers, CVCs, and bank account credentials are entered into Stripe's forms and stored by Stripe. Under You receives only limited transaction details (amounts, currency, status, last-4 digits) needed to operate the marketplace.

Under You is a user-generated content marketplace. To keep the community safe:

• Every listing, message, review, and profile can be reported from directly inside the app.
• You can block any user at any time; blocked users cannot message or book you.
• We aim to review reports of objectionable content or abusive users within 24 hours, and we remove content and/or terminate accounts that violate our Terms.
• We prohibit harassment, hateful content, illegal items, and fraudulent behaviour.

We keep your information while your account is active. You can permanently delete your account and personal data at any time from inside the app:

1. Open the Under You app and sign in.
2. Go to Profile → Account → Delete account.
3. Confirm — your profile, listings, bookings, messages, reviews, uploaded photos, and verification documents are removed.

If you cannot sign in, email support@underyourental.com from the address on file and we will delete your account within 30 days. We may retain a limited set of records (transaction receipts, fraud/abuse signals, and information required by tax, accounting, or anti-money-laundering law) for as long as required by applicable law, in a form that is not used to contact or profile you.

Depending on where you live, you may have the right to access, correct, port, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Canadian users have rights under PIPEDA and applicable provincial law. To exercise any of these rights, email support@underyourental.com. We will respond within a reasonable time and, in any event, within the period required by applicable law.

Under You is operated from Canada. Our infrastructure providers (Supabase, Stripe, OneSignal) may process data in Canada, the United States, and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

We use encryption in transit (HTTPS/TLS), encryption at rest through our infrastructure providers, row-level access controls in the database, hashed credentials, and least-privilege access for our team. No system is perfectly secure, but we work to protect your information and will notify affected users and authorities of material breaches as required by law.

We may update this policy from time to time. Material changes will be announced in the app or by email at least 7 days before they take effect. Continued use of Under You after the effective date constitutes acceptance of the updated policy.

For any privacy question, request, or complaint:

Email: support@underyourental.com
Mail: Under You — Privacy, Toronto, Ontario, Canada