Privacy Policy

1. Who we are

ReneWalo (“we”, “us”) is a renewal tracking service. The operator is [Your name or company — fill in before public launch] (“operator”). Contact: privacy@renewalo.app.

ReneWalo is available to users worldwide, including in Europe, the United Kingdom, Switzerland, the United States, and Australia.

2. What ReneWalo does

ReneWalo helps you track subscriptions, licenses, contracts, and other items with renewal or expiration dates, and sends email reminders before those dates. ReneWalo does not renew anything for you, does not store documents or passwords, and does not provide legal or compliance advice.

3. Data we collect

Account data

• Email address (for sign-in, verification, and service emails)
• Password (stored by our authentication provider; we do not store it in plain text)
• Email notification preference (on or off)

Renewal items you add

• Name, type, vendor, expiration or renewal date, cost and currency, priority, optional notes, reminder schedule, “On my list”, and vendor auto-renews setting

Technical data

• Basic server and security logs from our hosting providers (for example IP address and request metadata) as part of running the service

4. What we do not collect

• Documents, license files, or attachments
• Passwords, API secrets, private keys, or payment card details (we do not process payments in V1)
• Third-party analytics, advertising, or marketing pixels in V1

Do not put passwords or secrets in notes. ReneWalo is not designed to store sensitive credentials.

5. Why we use your data

• To create and secure your account
• To store and show your renewal items
• To send reminder emails and account-related emails (sign-up, password reset, account deletion confirmation)
• To operate, protect, and improve the service

We do not send marketing emails unless you separately opt in (not offered in V1).

6. Legal bases (EEA, UK, and Switzerland)

Where GDPR or similar laws apply, we rely on:

• Contract — to provide the service you signed up for
• Legitimate interests — to keep the service secure and reliable, balanced against your rights
• Legal obligation — where we must comply with law

7. Service providers (processors)

We use trusted providers to run ReneWalo. They process data only on our instructions:

• Supabase — database and authentication (primary database in the EU/UK region)
• Vercel — application hosting
• Resend — transactional email (reminders and account emails)

Each provider has its own privacy policy and data processing terms. We sign their standard data processing terms where required.

8. International transfers

Your data may be processed in the European Union, the United Kingdom, the United States, and other countries where our providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) offered by our providers.

9. How long we keep data

We keep your account and renewal items until you delete them or delete your account. When you delete your account, we remove your renewal items and account data. Some backup or log data may remain for a limited period for security and legal reasons, then is deleted or anonymised.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your data, object to certain processing, or complain to a supervisory authority.

• Delete your data: use Settings → Delete account in the app
• Other requests: email privacy@renewalo.app

European Economic Area / UK / Switzerland: you may contact your local data protection authority.
Australia: you may contact the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.
United States: some states give residents additional privacy rights; contact us and we will respond as required by applicable law.

11. Children

ReneWalo is not intended for anyone under 16. We do not knowingly collect data from children.

12. Security

We use HTTPS, access controls, and row-level security so each user can only access their own data. No method of transmission or storage is 100% secure.

13. Cookies

V1 uses only cookies or similar technologies needed for sign-in and basic site function. We do not use analytics or advertising cookies, so we do not show a cookie consent banner in V1. If we add analytics later, we will update this policy and ask for consent where required.

14. Changes

We may update this policy. We will post the new version on this page and update the “Last updated” date. Material changes may also be emailed to account holders.

15. Contact

Questions about privacy: privacy@renewalo.app