Legal

Privacy Policy

Last updated: April 2026

01 — Controller

Vamico GmbH
Kaasgrabengasse 62/1
1190 Wien, Austria
support@rendita.app

02 — What data we collect

Rendita is designed to collect as little data as possible.

Local mode (free): All data you enter – activities, time periods, and amounts – is stored exclusively on your device. We have no access to this data.

Cloud sync (optional, paid): If you enable cloud sync, we store:

We do not store passwords, payment card numbers, email addresses, real names, or personal documents. Authentication is handled entirely by Apple or Google.

A note on free-text fields: Activity names, time-entry notes, and balance-entry notes are stored as you write them. If you enter personal information about yourself or others (real names, contact details, addresses) in these fields, that information is stored with your account. We recommend using generic labels such as “Client A” or “Project 2026” instead of real names wherever possible.

03 — Authentication

We use Sign in with Apple and Sign in with Google for authentication. We receive only an opaque provider-specific subject identifier and, during the OAuth handshake, your email and name – neither of which we persist. Our database stores only the opaque subject identifier. We never receive your password. If our database were leaked in isolation, it would contain no email or real name that could identify you.

04 — Biometric authentication

With your permission, the app can use biometric authentication (Face ID, Touch ID, fingerprint) to unlock access to your data on this device. Biometric data is processed entirely by your device's operating system. Rendita receives only a yes/no result and never sees, stores, or transmits any biometric information.

You can enable or disable this feature at any time in Profile → Preferences.

05 — Camera

Rendita requests access to your device's camera so you can scan invitation QR codes to join shared activities. The camera is used only while the scanning screen is open. We do not take photos, record video, or transmit any image data – the scanner only reads the text of the QR code.

You can deny or revoke camera access in your device settings; the rest of the app will continue to work – you'll simply have to enter invitation codes manually instead of scanning.

06 — Legal basis

Processing is based on the performance of a contract (Art. 6(1)(b) GDPR) for cloud sync features, and on our legitimate interests (Art. 6(1)(f) GDPR) for app stability and error logging.

Display names provided voluntarily are processed based on your consent (Art. 6(1)(a) GDPR) and can be removed at any time.

07 — Data storage & location

Cloud data is stored on servers within the European Union (Microsoft Azure, EU region). Where processors are located outside the EU/EEA – specifically RevenueCat and Sentry – data transfers are governed by Standard Contractual Clauses (SCCs) as described in Section 07.

08 — Third-party processors

Each processor is bound by a data processing agreement and handles data according to GDPR requirements.

09 — Retention

We retain your cloud data for as long as your account is active. You can delete your account and all associated data at any time from within the app (Account → Delete account) or by contacting us at support@rendita.app.

Inactive accounts and all associated cloud data are automatically deleted after 12 months of inactivity.

When you delete your account, the following is permanently removed from our servers within 30 days (we apply a 30-day grace period so an accidental or unauthorized deletion request can be cancelled from within the app):

You will have the opportunity to export your data before deletion. Entries you created in shared activities owned by others are transferred to the respective activity owner rather than deleted, preserving the integrity of shared records. You will be informed of this transfer before confirming deletion.

When you leave a shared activity, entries you created in that activity are transferred to the activity owner to preserve data consistency. You will be informed before this transfer takes place.

Data retained after account deletion:

Local data stored on your device is deleted when you uninstall the app or use "Delete account" from within the app.

10 — Account & data deletion

You can delete your account and all associated cloud data at any time using one of the following methods:

See Section 09 for details on what is deleted and what is retained for legal reasons.

11 — Your rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, as well as the right to object to processing. To exercise any of these rights, contact us at support@rendita.app.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): www.dsb.gv.at.

12 — Contact

For any privacy-related questions, contact us at support@rendita.app.