Privacy policy.
Short version: we collect only what it takes to run a rental, and we don't sell it. The long version below explains what the company that operates the UMALU service ("umalu", "we", "us") collects through the app, the website and the umbrellas, and what we do with it.
1. What we collect
Account information. Your name, phone number and email address, and the details you give us when you contact support.
Payment information. Payments are handled by our payment processor. We do not store full card numbers. We receive limited details such as card type, the last four digits, expiry date and the result of each payment.
Rental information. Which umbrella you rented, when and where the rental started and ended, how long it lasted and what it cost.
Location. With your permission, your device's location while you use the app, to show umbrellas near you and to start and end rentals. You can turn location access off in your phone settings; some features will then not work. Each umbrella's lock also reports its own location and status to us.
Device and usage information. Device model, operating system, app version, IP address, crash reports and how you use the app.
2. How we use it
- to run rentals: unlock, lock, timing and billing;
- to process payments and send receipts;
- to answer support requests and resolve disputes;
- to keep the service safe and prevent fraud and misuse;
- to maintain and locate our umbrellas;
- to fix bugs and improve the app;
- to send you service messages, and marketing only where you have agreed to it (you can opt out at any time);
- to meet our legal obligations.
3. Who we share it with
We do not sell your personal information.
We share it only with service providers that help us run umalu, under contracts that limit how they may use it: the mobility platform that runs our app and back end, our payment processor, SMS and email delivery, hosting, analytics and customer support tools. We may also share information when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply.
4. How long we keep it
We keep account information while your account is open. After you delete your account, we delete or anonymize your data, except records we must keep by law, such as payment and transaction records for tax and accounting, or information needed to resolve a dispute. Those we keep only as long as required.
5. Your choices and rights
- See, correct or download the personal information we hold about you: write to support@umalu.app.
- Delete your account and data: in the app or by email, see delete account.
- Turn off location access or notifications in your phone settings.
- Unsubscribe from marketing messages with the link in the message or by writing to us.
We answer requests within 30 days and do not charge for them.
6. Security
We protect your information with encryption in transit, access controls and reputable service providers. No system is perfectly secure, so if you notice anything suspicious with your account, tell us right away.
7. Children
umalu is not meant for children under 13, and we don't knowingly collect their information. You must be 18 or older to rent an umbrella.
8. Where your data is processed
umalu operates in the United States. Our service providers may process data in the United States and other countries, with safeguards required by law.
9. Changes
If we change this policy, we'll update the date at the top and, for important changes, tell you in the app or by email.
10. Contact
Questions about privacy: support@umalu.app.