Privacy Policy

Rental Book

Last Updated: 5 November 2026

Introduction

Binaryscript Private Limited ("we", "our", or "us") operates the Rental Book mobile application for Android (the "App"), a record-keeping tool for businesses that rent or hire out tractors and harvesters, JCBs and machines, tents and event gear, trailers and equipment, self-drive cars and bikes, cameras and gear, and party and bounce-house gear. This Privacy Policy explains what information the App collects, why, where it goes, and what control you have over it.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Your Business Records (Stored Only On Your Phone)

Everything you enter or capture in the App is stored in a local database and in the App's private file storage on your phone:

• Your business profile: business name, phone number, address, and the UPI ID printed as a pay QR on your bills
• Your trades, items and units: the trades you run, item names, rates, number plates and serial numbers
• Bookings and money: bookings, bills, deposits, payments received, the khata (credit ledger), repairs and reports
• Your customers' details: the name, phone number and address you type in
• Self-drive rentals (optional): a photo of the customer's driving licence and the last 4 digits of a licence or ID number
• Photos and signatures: hand-over and return photos, with the time printed on them, and customer signatures, all taken with the App's own camera screen

1.2 Other Information Stored Only On Your Phone

The App also keeps, only on your phone: your app settings and onboarding state, your language, the reminders it has scheduled, the approximate location described in 1.5, your detected country code and which payment method applies to you, your premium status and subscription end date, the identifiers of purchases already processed, your sign-in session tokens if you have signed in, and up to seven daily backups of your records.

Clearing the App's data or uninstalling the App deletes all of this permanently, together with your business records.

1.3 Optional Sign-In (Only To Buy A Subscription)

The App does not require an account. You are asked to sign in only when you choose to buy a subscription, so that your purchase can follow you to another phone. Sign-in is with Google. From your Google account we receive:

• Your name, as it appears on the account
• Your email address
• A Firebase user identifier (UID)

We never see or receive your Google password.

1.4 Information Sent To Our Own Servers (Only If You Sign In)

a) At sign-in
When you sign in, the App sends the following to our backend at api.binaryscript.com in order to create or recognise your account:

• The Firebase ID token issued by your sign-in
• The App's package name and the platform (Android)
• Device and build information: device model, Android version, App version and build number
• Your two-letter country code and language code
• Your Firebase app instance identifier
• The approximate location described in 1.5

In return we store an account record containing an internal identifier, your Firebase UID, your name, email, country, language, approximate location and your subscription status. If you enter a phone number in connection with a payment, it is stored with that account record.

b) Subscription and payment (India)
In India, subscriptions are paid through PhonePe by UPI AutoPay mandate or by scanning a UPI QR code, rather than through Google Play. For this the App exchanges the following with our backend: the plan you selected, the UPI app you chose to pay with, and the order and subscription identifiers returned to us, which are then used to verify the payment.

c) Session tokens
Our backend issues access and refresh tokens which the App stores on your phone to keep you signed in. They are removed when you log out or delete your account.

If our backend is unreachable, the App continues to work: your records are on your phone, so a server failure never locks you out of them.

1.5 Approximate Location From Your IP Address

When the App starts, it looks up an approximate location from your network (IP) address: city, state, country and their approximate coordinates, using BigDataCloud's reverse-geocoding service, which therefore sees your IP address. The App keeps the result on your phone. Only if you are signed in is it sent to our server and stored with your account, where it helps us understand where our users are. Privacy Policy: https://www.bigdatacloud.com/privacy-and-cookie-policy

1.6 Information Collected Automatically By Third-Party Services

a) Google Analytics for Firebase
Used to understand how the App is used and where owners get stuck. It collects:

• Screen views within the App
• Product events, such as onboarding completed, trades chosen, a booking, bill or payment recorded, a document shared, a backup made or restored, a reminder scheduled, the paywall viewed, a plan selected, and purchases started, completed, failed or restored
• Purchase events, containing the transaction identifier, product identifier, amount and currency
• User properties such as whether you are premium, your country code and which payment method applies to you
• Your Firebase UID as the Analytics user identifier, if you are signed in
• Device information: device model, Android version, App version, screen and language settings
• Session information: when the App was opened and how long it was used
• Identifiers: a Firebase app instance identifier and the Android advertising ID, which Google Analytics for Firebase may collect by default
• An approximate, coarse location (typically country or region) that Google derives from the IP address of the connection
• Privacy Policy: https://policies.google.com/privacy

b) Firebase Crashlytics
Used to find and fix crashes. It collects crash and error reports including the stack trace and the state of the App at the time, plus device model, Android version, App version and a Crashlytics installation identifier. Privacy Policy: https://policies.google.com/privacy

c) Firebase Performance Monitoring
Used to measure how fast the App starts and responds. It collects timings of App start-up, screens and network requests, together with device model, Android version, App version, network type and an installation identifier. It records no content from your records. Privacy Policy: https://policies.google.com/privacy

d) Firebase App Check
Used to confirm that requests to our services come from a genuine, unmodified copy of the App. It uses Google Play Integrity, which checks the App and the device with Google and returns a token; no personal information from your records is involved. Privacy Policy: https://policies.google.com/privacy

e) Firebase Remote Config
Used to adjust settings such as how often the upgrade screen appears and the minimum supported App version, without an update. It fetches configuration values; it sends us no personal information about you. Privacy Policy: https://policies.google.com/privacy

f) Firebase Authentication
Manages your sign-in session and issues the identity token described in 1.4(a), only if you sign in. Privacy Policy: https://policies.google.com/privacy

g) Google Play Billing
Handles all purchases outside India. Google processes your payment under its own privacy policy. We receive only the purchase status, the product identifier and the transaction identifier — never your card details or billing address. Privacy Policy: https://policies.google.com/privacy

h) Razorpay SDK (India)
On the India payment screen, the App checks which UPI apps on your phone support UPI AutoPay (such as PhonePe, Google Pay, Paytm, BHIM and Amazon Pay), so it can offer them for the payment. It uses Razorpay's SDK only for this check; no payment goes through Razorpay. To answer, the SDK reads which UPI apps are installed on your phone and may share this with Razorpay. Privacy Policy: https://razorpay.com/privacy/

1.7 How The App Determines Your Country

The App needs a country code to decide whether to offer Google Play billing or the Indian UPI payment, and to show prices in your currency. It resolves this from your Google Play billing country, your SIM card's country, your mobile network's country, or your phone's language and region setting, in that order of preference. This is a country code, not your location.

1.8 Permissions The App Requests

• Camera — to take hand-over and return photos and driving-licence photos. Photos are saved to the App's private storage on your phone.
• Notifications — for reminders about items going out today, items due back or late, and money to collect. Reminders are scheduled on your phone; there is no push server.
• Exact alarms — only if you allow it, so reminders arrive on time.
• Internet — for analytics, crash reporting, the optional Google Drive backup, sign-in, subscription checks and the in-app legal pages. Your records never use it, except inside a Drive backup you turn on yourself.
• Billing — for in-app purchases through Google Play and to read your Play billing country.

The App requests no location, contacts, SMS, call, microphone or telephone permissions.

1.9 What We Do Not Collect

We do not collect your customers' personal data, your bookings, bills, deposits, payments or khata, your photos, signatures or ID photos, your contacts, your messages, your precise location, your card or bank details, or anything else you type into the App.

2. Your Customers' Data — And Your Responsibility

The App is a tool for recording information about other people: your customers' names, phone numbers, addresses, rental histories and, for self-drive rentals, their driving licence photos and the last digits of their ID numbers. You enter that information; you decide what to record; and it stays on your phone.

If you operate in India, note that the Digital Personal Data Protection Act, 2023 places obligations on businesses that handle customers' personal data. In the United States, state privacy and data-security laws may apply to your business. Please satisfy yourself that your use of the App fits the rules that apply to you.

3. How We Use Information

We use the information described in Sections 1.3 to 1.6 only for:

• Creating and maintaining your account and keeping you signed in, if you sign in
• Determining and honouring your subscription entitlement across phones
• Processing subscription payments through PhonePe or Google Play
• Understanding how the App is used — which trades and features owners rely on, where people abandon a flow, which plans convert
• Diagnosing crashes, errors and slow screens so the App works on more phones
• Protecting our services from modified apps and abuse
• Deciding what to build next
• Complying with legal obligations, including tax and accounting requirements in respect of payments

We do not sell your data, we do not use it for advertising, and we do not build advertising profiles from it.

4. Advertising

Google Analytics for Firebase may collect the Android advertising ID, as described in Section 1.6, even though the App shows no ads. You can reset that identifier or opt out of ads personalisation at any time in Settings > Google > Ads on your phone, or at https://adssettings.google.com.

5. In-App Purchases and Subscriptions

The App is free to download, and its record-keeping works without paying. Premium may be offered as a monthly subscription, an annual subscription and a one-time lifetime purchase; the App shows what premium includes and its price before you pay.

5.1 Google Play (Outside India)

Outside India, purchases are processed by Google Play. We never receive or store your card details, billing address or any other payment information. We receive the purchase status, product identifier and transaction identifier so we can unlock premium features.

5.2 PhonePe (India)

In India, subscriptions are billed through PhonePe, by UPI AutoPay mandate or by a UPI QR payment. You approve the payment inside your own UPI app. Our backend records the plan, the order and subscription identifiers, the payment status and the subscription dates so it can verify your payment and honour your entitlement. Your UPI PIN, UPI ID, card number and bank details are never seen by the App or by us.

See also our Refund Policy.

6. Data Storage, Backup and Security

6.1 Your Records Live On Your Phone

Your records are stored on your phone. We hold no copy, there is no sync to our servers, and we cannot restore them. The App gives you three ways to protect them, none of which sends anything to us:

• Daily backup on the phone: the App keeps the last seven daily backups of your records on your phone (More > Backup > Back up now makes one at any time). These protect against mistakes, but they are lost with the phone, and they are deleted when you uninstall the App or clear its data.
• A copy off the phone: Save copy or Send copy on the Backup screen makes a full copy of your records, with photos, and saves it where you choose or hands it to an app you choose. Where that copy goes, and who can read it, is under your control; Restore from a file brings it back.
• Android backup: if Google backup is on for your phone, Android may copy the App's latest records backup to your own Google account, under Google's own backup service and privacy policy. You control this in your phone's settings.
• Google Drive backup (optional): you can turn on a backup to your own Google Drive with More > Backup > Back up to Google Drive. The App uses Google Sign-In only to get permission to a private app folder in your Drive (the drive.appdata scope), which you cannot browse and other apps cannot read. Your records go there, and photos too, but only over Wi-Fi. We cannot read these files; they are in your Google account, not ours. Turn off on the same screen stops the backup and removes the App's access.

6.2 Account And Subscription Data

If you sign in, your account record and subscription status are stored on our servers in India, and are transmitted over encrypted HTTPS connections.

6.3 Analytics, Crash And Performance Data

Transmitted over encrypted connections and stored on Google's infrastructure under Google's security practices.

6.4 Our Practices

We follow reasonable secure development practices, keep dependencies updated, and limit access to account data to the people who need it. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Sharing and Disclosure

7.1 We Do Not Sell Your Data

We do not sell, trade, rent or share your information with third parties for their own purposes.

7.2 Service Providers

The only third parties that receive data from the App are:

• Google — Firebase Analytics, Crashlytics, Performance Monitoring, App Check, Remote Config and Authentication, Google Sign-In, Google Drive (your own backup), Android backup and Google Play Billing
• PhonePe — payment processing in India
• Razorpay — the list of installed UPI apps, on the India payment screen
• BigDataCloud — your IP address, when the App starts, to look up an approximate location
• WhatsApp, your SMS app or any other app you share to — only when you yourself send something, and only what you send

Each processes data under its own privacy policy, linked in Section 1.

7.3 Legal Requirements

We may disclose information if required by law, court order or other legal process, or where necessary to protect our rights, safety or property, or to investigate fraud or abuse.

7.4 Business Transfers

If we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will update this policy if that happens.

8. Data Retention

• On-phone data (records, photos, signatures, settings, daily backups): kept until you delete it, clear the App's data or uninstall the App. We have no involvement and no copy.
• Your Google Drive and Android backups: kept in your Google account until you delete them, as described in Section 9.3.
• Account data: kept while your account is active, and deleted on request as described in Section 9.2.
• Payment and subscription records: retained for as long as required by applicable tax and accounting law, even after account deletion, in a form limited to what those obligations require.
• Crash reports: retained by Firebase Crashlytics for up to 90 days.
• Analytics data: retained according to our Firebase Analytics retention setting, and in any case for no longer than 14 months.

9. Your Rights and Choices

9.1 Access And Correction

Your name and email come from your Google account; change them there and they update here on your next sign-in. Everything else you can see and edit inside the App.

9.2 Deleting Your Account

You need an account only if you signed in to buy a subscription. More > Settings > Delete account, shown while you are signed in, asks you to confirm, then clears your session from the phone and deletes your Firebase user.

To have the account record held on our own servers erased as well — including your name, email, approximate location and subscription record — email support@binaryscript.com from the address you signed in with, or from any address quoting it, and we will delete it within 30 days, keeping only what tax and accounting law requires us to keep.

9.3 Deleting Your Business Data And Backups

• On your phone: delete individual records inside the App, or clear the App's data or uninstall it to remove everything at once, including the daily backups. This is irreversible.
• Google Drive backup: tap Turn off in More > Backup, then delete the App's hidden data in Google Drive on the web: Settings > Manage apps > Rental Book > Options > Delete hidden app data.
• Android backup: manage or delete it in your phone's Google backup settings or in your Google account.

9.4 Managing Your Subscription

• Google Play: Play Store > profile icon > Payments & subscriptions > Subscriptions
• PhonePe / UPI AutoPay: manage or revoke the mandate in the UPI app you approved it in, or write to support@binaryscript.com

9.5 Rights Under Applicable Law

Depending on where you live, you may have rights to access, correct, delete, export or restrict the processing of your personal data, to object to it, or to withdraw consent. In India, the Digital Personal Data Protection Act, 2023 gives you these rights; residents of some US states, such as California, have similar rights under state law. To exercise any of them, or to ask us to delete analytics or crash data associated with your phone, contact support@binaryscript.com. We will respond within 30 days.

10. Children's Privacy

The App is a business tool intended for rental and hire business owners and their staff. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact support@binaryscript.com and we will delete it.

11. International Data Transfers

We operate from India, and our account and subscription servers are located in India. Analytics, crash and performance data is processed by Google on infrastructure that may be located in the United States or elsewhere. By using the App you consent to your information being transferred to and processed in those countries, which may have different data protection laws than your own.

12. Third-Party Links and Apps

The App opens the following outside itself:

• Our privacy policy, terms and refund policy, shown in an in-app browser
• WhatsApp, your SMS app or another app, when you send or share a document
• Your maps app, when you tap Map on an address you typed
• Your UPI app, when you pay through PhonePe in India
• The Google Play listing, for updates and ratings
• Your email app, when you contact support

We are not responsible for the privacy practices of those third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes take effect when the updated policy is published. Material changes — in particular, any change to what we collect — will be published before the version of the App that makes them is released, and the "Last Updated" date above will change.

Your continued use of the App after an update constitutes acceptance of the updated policy.

14. Governing Law and Compliance

This Privacy Policy is governed by the laws of India. Any dispute arising from it is subject to the exclusive jurisdiction of the courts in Raipur, Chhattisgarh, India.

We comply with applicable Indian data protection law, including:

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

15. Contact Us

Questions, concerns or requests about this Privacy Policy, including data access and deletion requests:

We will respond within 30 days.

Summary of Key Points