EvoRent Mobile Privacy Policy
This policy explains how personal information is processed through EvoRent Mobile on Android and iOS and through the connected services used to provide its features.
Last updated: October 5, 2026
1. Who we are and how to contact us
EvoRent is a product operated by EvoMaro. In this policy, “we” refers to EvoMaro as the provider of the EvoRent software, connected services, hosting and support.
Rental agencies manage and use their own customer and rental data. EvoMaro provides the SaaS platform and related technical processing and does not claim ownership of agency customer data.
For privacy questions, correction or deletion requests, or technical support, email support@evorent.app.
2. Scope and account access
This policy covers information about agency staff, rental customers and drivers, and people appearing in documents or rental evidence processed through EvoRent Mobile and its connected services.
Your rental agency or its administrator provides your staff login and manages your access. EvoRent Mobile has no in-app staff account creation. Agency rental records are managed through the agency’s EvoRent system, and the agency may provide additional information about its own handling of those records.
3. Information processed
- Staff and account information, including names, email addresses, login credentials, staff and agency identifiers, permissions and session tokens. The app may securely retain session credentials and, if enabled, remember an email and agency address; it does not store the login password.
- Customer and driver information, including contact and identity details, address, nationality, date of birth, CIN or other identity-document details, driving-licence numbers and expiry dates, and operational notes.
- Vehicle, rental and financial records, including registration, VIN, vehicle details, mileage, fuel, dates and locations, reservations, contracts, prices, payments and balances.
- Documents and evidence, including identity and licence scans, uploaded files, contracts, signature images, damage and inspection photographs, and optional inspection video that may include audio. Connected signing pages may record timestamps, IP address, browser or device information and document-integrity evidence.
- Assistant input, including typed questions and, on Android when used, voice recordings and transcriptions. Inspection-video audio is a separate feature and may also be recorded on iOS.
- Device, communication and security information, including app-generated device identifiers, push-registration tokens, installation identifiers, app and platform details, request and error diagnostics, and IP or similar network metadata handled by connected services.
Information is entered by staff, read from agency records, captured or selected on the device, or produced while the service operates. Customer searches and duplicate checks can transmit entered identifiers before final saving. Support messages contain the information you choose to send.
4. Why information is used
Information is used to operate the app; authenticate users and manage agency access; manage customers, vehicles and rentals; prepare and preserve contracts, signatures and inspection evidence; perform eligibility and fraud-prevention checks; deliver operational notifications; maintain usage and accounting records; and provide support, security and diagnostics.
The current app does not use advertising, attribution or cross-app tracking features and does not integrate Firebase Analytics, Crashlytics or Sentry. This does not exclude the service and SDK diagnostics described below.
5. Connected services and recipients
Business requests go to the selected agency’s EvoRent system. Some processing also uses EvoMaro central services and infrastructure providers, so data is not exclusively local to the phone or agency.
- Hosting and infrastructure services process the records and technical information needed to operate agency and central systems.
- Google Firebase Messaging and Apple APNs process push registration or installation identifiers and delivery metadata. Notifications use operational identifiers and generic notification text.
- OpenAI may process some Assistant questions and Android voice recordings or transcriptions through EvoRent agency and central services for interpretation or transcription. The Assistant workflow does not send retrieved agency business evidence to the model, but user input can contain personal information. Do not include unnecessary information. EvoMaro does not promise zero provider retention or immediate deletion after processing.
- Google ML Kit performs document OCR on the device. Scanned images and recognized text are not sent to Google for recognition. Separate SDK installation, usage, performance or diagnostic information may be transmitted to Google. Saving extracted data or documents to EvoRent is a separate operation.
Central usage and accounting flows may receive customer or staff identifiers and names. If you export content through the phone share sheet, the selected service receives it under its own terms; sharing is not automatic.
6. Global blacklist and eligibility checks
The global blacklist is enabled. The agency system may send customer identifiers, including CIN and driving-licence numbers, to a centralized service for matching, rental eligibility and fraud-prevention checks. Results may contain reported risk information. Publishing an entry may also transfer contact details, risk reasons, notes, severity and related operational information.
You may ask about or dispute information concerning you through your rental agency or by emailing support@evorent.app.
7. Local drafts and device storage
Offline drafts are restricted to their authenticated tenant, agency and staff owner. Logout or account switching hides them. The same owner can restore a valid draft, and manual deletion removes its copied documents.
Drafts expire 30 days after their last local update or explicit restore. Listing drafts does not extend the period. Physical deletion, including associated copied media, occurs on the next authenticated draft operation and does not run while the app is closed. Older drafts without reliable ownership remain hidden, are never reassigned, and follow the same cleanup rule.
Draft storage is excluded from ordinary device and cloud backups using Android and iOS controls, but this cannot recall backups made by older versions. Drafts rely on the app sandbox and platform protections and are not separately encrypted by the app. Interrupted review or download operations may leave temporary files until later cleanup or operating-system cache removal. Original photos and exported copies are outside draft cleanup.
8. Customer documents and security
Current customer-document flows are designed to use private storage and authenticated, authorized access with user-permission and agency or customer scope checks. Historical customer documents may still require production migration and removal of older public copies or caches. EvoMaro does not claim that this migration is complete for every production tenant.
Mobile connections to agency APIs use HTTPS. Access controls, secure session storage, private-media authorization and document-history protections form part of the security measures. No system can guarantee absolute security. This policy does not claim end-to-end encryption, universal encryption at rest or verification of every provider connection.
9. Retention and deletion limits
The 30-day rule applies only to local offline drafts. It is not a universal period for agency records, signed contracts, document snapshots, amendments, inspection evidence, payments, security logs, provider data or backups.
Signed contracts, legal evidence and rental or business records may be retained where required by operational, contractual, dispute, accounting or legal obligations. Logout, access removal or a deletion request does not automatically erase those records. Server records, logs, provider copies, backups and copies exported to another service follow separate retention arrangements.
10. Privacy requests and rights
Depending on applicable law, you may have rights to access, correct or delete personal information and, where applicable, restrict or object to processing, receive a portable copy, withdraw consent, or contact the relevant authority. Email support@evorent.app; rental customers may also contact the agency managing their rental.
Describe your request, your relationship to the agency and a contact address. We may need to verify identity and authority to protect other people’s records. Do not send passwords, access tokens, complete identity-document scans or unnecessary customer records in the first email. Access removal, correction and deletion are different requests. Required retention can limit erasure, particularly for signed evidence and legal or business records.
11. Your device choices
Camera, microphone, selected-photo access and notifications support the relevant capture, voice, upload and push features. You can manage permissions in device settings; declining a permission may prevent the related feature from working.
The current app does not access native GPS location or the contact book. Entered rental locations are business data, and uploaded files can contain image metadata. Revoking permission or logging out does not delete information already submitted to the agency system.
12. Changes and contact
Updates will be published on this page with a revised update date and any additional notice required by applicable law.
For privacy and support requests, email support@evorent.app or use the EvoRent Mobile Support page linked above.