Privacy Policy

RONDAPP ("we," "us," or "our") operates the RONDAPP mobile and web application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.

Account Information: When you register, we collect your first and last name, email address, a unique and permanent @username, and profile picture (optional).

Financial Information: We collect contribution amounts, payout schedules, payment records, and transaction fees related to your savings groups. We do not store full payment card or bank account details — these are handled securely by Stripe. A 1% ACH processing fee is added on top of each contribution, and a 10% total service fee is deducted from each payout at the time it is processed. Pools created before August 2026 retain the legacy 6% rate.

Usage Data: We collect information about how you interact with the app, including log data, device type, and feature usage.

Communications: Messages sent within the app (group chat and direct messages) are stored to provide the messaging service.

Identity & Payout Verification: To receive payouts, you must connect a bank account through Stripe Connect. Stripe may collect identity verification information (such as your legal name, date of birth, address, and government ID or tax identification number) directly. RONDAPP never sees or stores this sensitive information — we only store your Stripe account reference and onboarding status.

Consent Records: When you accept our Terms of Service, we record the version accepted, the date and time of acceptance, and, where available, your IP address, for legal compliance purposes.

Invitations: When you invite someone to the app or a savings pool, we store the invitation details, including the recipient's email address, to deliver and track the invitation.

Authentication Providers: We offer authentication via email and password, Sign in with Apple, and Sign in with Google. When you use Apple or Google to sign in, those providers share your name and email address with us to create and verify your account — we never receive your Apple or Google password. If you use Sign in with Apple, Apple may provide a relay email address (e.g., xyz@privaterelay.appleid.com) instead of your real email to protect your privacy. See Apple's privacy policy at apple.com/legal/privacy and Google's privacy policy at policies.google.com/privacy.

We use the information we collect to:

• Provide, operate, and maintain the RONDAPP Service
• Process contributions and payouts within your savings groups
• Send payment reminders and payout notifications
• Communicate with you about your account or the Service
• Monitor and analyze usage patterns to improve the Service
• Comply with legal obligations

We do not sell your personal information. We may share your information with:

• Other group members: Your name, @username, and payout week are visible to members of your savings group. Your @username may also appear in app-wide member searches (for example, when starting a message or sending an invite).
• Stripe (payment processor): Payment processing and payout identity verification are handled by Stripe, Inc., which acts as our payment processor and, for identity verification purposes, as an independent data controller. See Stripe's privacy policy at stripe.com/privacy.
• Service providers: We use trusted infrastructure providers (such as hosting and email delivery services) that process data on our behalf under confidentiality obligations. They may not use your data for their own purposes.
• Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users.

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account through the Profile Settings in the app. However, account deletion is blocked while you are the organizer of an active savings pool or a member with unfulfilled payout obligations. Upon deletion, your personal information (name, email, profile picture, and messages) is permanently removed. Financial transaction records and contribution histories are retained and anonymized for a minimum of 7 years to comply with legal audit and regulatory obligations — these records are no longer linked to your identity.

Transaction records, payment history, and contribution logs are retained for a minimum of 7 years following the completion or termination of the associated savings pool. This retention period is maintained for financial audit purposes and to comply with applicable legal and regulatory obligations, even if you delete your account.

Messages sent within RONDAPP (including group chat and direct messages) are stored to provide the messaging feature. RONDAPP does not actively monitor, read, or analyze the content of private messages.

However, RONDAPP reserves the right to review message content if: (a) legally compelled to do so by a valid court order or government authority; (b) a user reports a potential violation of these Terms of Service; or (c) we have reasonable grounds to believe illegal activity is occurring through the platform. By using the messaging features, you consent to this limited review right.

We implement industry-standard security measures to protect your information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

RONDAPP is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

Depending on your state of residence, you may have the following rights regarding your personal data:

• Right to Know / Access: Request a copy of the personal information we collect about you and the categories of personal information we have disclosed.
• Right to Delete: Request deletion of your personal information, subject to the financial record retention requirements described in Section 5 and the account deletion restrictions described above.
• Right to Correct: Request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. RONDAPP does not sell or share your personal information for cross-context behavioral advertising or any commercial purpose. No opt-out link is required because no sale or sharing occurs.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of your sensitive personal information to what is necessary to provide the Service. We do not use sensitive personal information for any purpose beyond providing and securing the Service.
• Right to Data Portability: Request your personal information in a portable, machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Do Not Sell or Share My Personal Information: RONDAPP does not sell your personal information to third parties, nor do we share it for cross-context behavioral advertising. This notice is provided in accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). No opt-out is necessary because no sale or sharing occurs.

How to Exercise Your Rights: To exercise any of these rights, contact us at the email below or use the account deletion feature in the app. We will verify your identity before processing your request and respond within 45 days. If we need more time, we will notify you within that period and may take up to an additional 45 days as permitted by law.

In accordance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), we collect the following categories of personal information:

• Identifiers: Name, email address, and unique @username. Collected at registration to create and manage your account.
• Financial Information: Contribution amounts, payout schedules, and transaction records. Collected to facilitate pool coordination and payouts. Full bank account details are handled by Stripe, not RONDAPP.
• Communications: Messages sent within the app (group chat and direct messages). Collected to provide the messaging feature.
• Usage Data: Log data, device type, and feature usage patterns. Collected to improve and secure the Service.
• Consent Records: Terms acceptance version, timestamp, and IP address. Collected for legal compliance.
• Invitation Data: Recipient email addresses for invitations. Collected to deliver and track invitations.

We do not collect government identification numbers (handled by Stripe), biometric information, precise geolocation, or browsing history. We do not use automated decision-making technology or profiling that produces legal or similarly significant effects.

The business purpose for collecting each category is to provide, operate, and secure the RONDAPP coordination Service, process contributions and payouts, comply with legal obligations, and communicate with users about their accounts. We retain each category for as long as your account is active, except financial records which are retained and anonymized for 7 years as described in Section 5.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy within the app and updating the "Last updated" date above.