Privacy Policy

Studio 7 Productions LLC (dba Renga) runs the Renga marketplace at renga.life. This policy explains what personal information we collect when you use the site, request or guide trips, message other members or email us; why we collect it; who we share it with; how long we keep it; and the choices and rights you have. We are the "controller" or "business" responsible for this information. Contact: hello@renga.life.

Guides are independent businesses. When a Guide receives your booking they get the information they need to run the trip (your name, party size, messages and anything you tell them about your fitness or health). How a Guide uses that information beyond the trip is governed by our Terms, which forbid using it for anything else.

Information you give us

• Account: name, email address, password (stored only as a hash by our authentication provider), and your acceptance of the Terms with its date and version.
• Profile: photo, bio, home area, and anything else you choose to add. Profiles of Guides are public; Traveler profiles are visible to Guides you book with.
• Guide listings: trip titles, descriptions, photos, prices, meeting places, drawn activity areas, available dates and days off.
• Guide screening (Guides only): to start your check we send Yardstik your name and email. Yardstik collects everything else (including your Social Security number and driver's license details) directly from you; we never receive them. From Yardstik we receive the status of your invitation and report, the overall result, and, where a report needs a decision, the category and date of any reported records so our written eligibility rules can be applied. We also keep the dates of any adverse-action notice and dispute.
• Credentials (Guides only): the license or certification documents you upload (which may show your name, license number, date of birth, photo and address), plus the automated review's summary, the details it read from the document, its confidence and any staff notes.
• Bookings: trip, date, local start and end time, party size, open or private group, price, status, cancellations with their reasons, refunds, problem reports and case outcomes, Guide cancellation strikes and appeals, and your acknowledgement of the outdoor-risk waiver.
• Booking records: an append-only log of every booking change — who made it (Traveler, Guide, staff, or an automated system), when, and the reason given.
• Payments and payouts: handled by Stripe. We receive a payment reference, the amount, the last four digits and brand of the card, and the status of charges, refunds and payouts. We never see or store your full card number, bank account number, or Social Security number. Guides give those directly to Stripe when setting up payouts.
• Messages, reviews and reports: what you write to other members, reviews you leave, and reports or blocks you make.
• Health and fitness information you choose to share with a Guide in messages so they can run the trip safely. Share only what the Guide needs.
• Support: emails you send us and our notes on them.

Information collected automatically

• Log and device data: IP address, browser type, pages visited, timestamps, referring page and error reports, collected by our hosting provider and by us to keep the site working and secure.
• Sign-in session: a token kept in your browser's local storage so you stay signed in. See the Cookies page; we do not use advertising or analytics trackers.
• Approximate location: only if you choose "near me" on the map, your browser asks your permission and sends coordinates once to sort results. We do not store them.

We do not knowingly collect information from anyone under 18, and accounts are for adults only. If you believe a minor has an account, email us and we will delete it.

• To run the marketplace: show listings, match requests with Guides, process bookings, payments, refunds and payouts, and send the emails that go with them (requests, acceptances, reminders, receipts), from notifications@renga.life.
• To screen Guides: run the Yardstik background and driving record check and apply our written eligibility rules to the result automatically. AI is never used to decide background-check eligibility.
• To review Guide credentials: an AI model reads each uploaded document and may approve a clear, matching, unexpired document or reject an expired or unreadable one. Anything uncertain goes to a person, and staff can override any automated result.
• To resolve problem reports: an AI model reviews the report, the Guide's reply, the booking and trip details and the booking's message history, and may decide ordinary cases when it is highly confident and any extra refund is $300 or less. Safety concerns, larger refunds, uncertain cases and anyone who asks for a person go to staff. Guide suspension appeals are reviewed the same way.
• To keep people safe and the site honest: investigate reports, track Guide cancellation strikes, detect fraud and fake reviews, enforce the Terms, and handle disputes and chargebacks.
• To support you when you contact us.
• To improve the site: understand which pages and features are used, fix errors, and plan new features, using aggregated information wherever possible.
• To meet legal obligations: tax reporting for Guide payouts (through Stripe), record-keeping, responding to lawful requests.
• To send occasional product news or guide-recruiting emails, which you can opt out of at any time. Transactional emails about your bookings cannot be switched off while you have an account.

If you are in a place with laws that require a legal basis (such as the EU or UK), our bases are: performing our contract with you; our legitimate interests in running a safe, honest marketplace; your consent where we ask for it (location, marketing emails); and compliance with law.

Automated decisions. Some decisions are made automatically as described above: background-check results under fixed written rules, credential document reviews, and ordinary problem-report and appeal outcomes. You can always ask for a person to review an automated decision by replying to the email you receive or writing to hello@renga.life; background-check results can also be disputed with Yardstik under the Fair Credit Reporting Act.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share it only as described here.

• Other members. Guides see the name, profile and messages of Travelers who request their trips, and the party size and date. Travelers see Guides' public profiles, listings, screening status and reviews. Reviews are shown to the other party after both have reviewed or 14 days pass, and may appear publicly on profiles with your first name.
• Stripe (payments and payouts): your payment details go directly to Stripe. Guides' identity, tax and bank details go directly to Stripe for their connected account. See Stripe's privacy policy.
• Yardstik (background and driving record checks for Guides): we send Yardstik the Guide's name and email to create the invitation; the Guide then completes the application, consents and pays Yardstik directly. Yardstik sends us status updates and the report details described in Section 2, and handles pre-adverse and adverse action notices and disputes. See Yardstik's privacy policy and the disclosures Yardstik provides under the Fair Credit Reporting Act.
• Hosting, database and authentication (Lovable Cloud, built on Supabase, hosted in the United States): stores all account, listing, booking, message and document data with access controls and encryption in transit and at rest.
• Email delivery (Resend): sends our booking, message and account notification emails from notifications@renga.life and receives your email address and the message content.
• Maps (Mapbox): map images are loaded from Mapbox's servers, which receive your IP address and the map areas you view. See Mapbox's privacy policy.
• Fonts (Google Fonts): typefaces are loaded from Google's servers, which receive your IP address.
• AI review (Lovable AI, which routes requests to an AI model provider): receives uploaded credential documents with the Guide's profile name for credential review, and problem reports, Guide replies, booking and trip details and booking messages for case and appeal review. It is used only to produce the review, not for advertising.
• Professional advisers and successors: lawyers, accountants and insurers under confidentiality; and a buyer or successor if the business is sold or merged, in which case this policy continues to apply.
• Law and safety: when required by law, subpoena or court order; to enforce our Terms; or when we believe in good faith it is necessary to protect someone's life or safety, including sharing a Guide's or Traveler's details with search-and-rescue or law enforcement during an emergency on a trip.

• Account and profile: while your account is open, then deleted or anonymized within 90 days of closure unless we must keep it for the reasons below.
• Bookings, payments and payouts: 7 years, because tax and financial-record laws require it. Personal details are minimized once no longer needed for support or disputes.
• Messages: while both accounts are open, and up to 2 years after closure for safety investigations and disputes.
• Guide screening status, report ID, adverse-action and dispute history and the screening audit log: while the Guide account is open and 3 years after, to show the check was done fairly. Uploaded license documents and their automated reviews: deleted 1 year after they expire or the account closes, whichever is first.
• Booking change records, cancellation strikes and case decisions: 7 years, with the booking's financial records.
• Reviews: kept with your first name while the reviewed profile exists; anonymized when you close your account.
• Server logs and error reports: up to 90 days.
• Legal acceptances (which Terms version you agreed to and when): as long as a claim could arise, typically 4 years after account closure.

All traffic is encrypted (HTTPS). Data is encrypted at rest by our hosting provider. Access to the database is restricted by row-level security rules so that members see only their own data and what the Terms say they may see; documents and photos live in private storage reachable only through short-lived signed links; payment details never touch our servers; and staff access is limited to what support requires. No system is perfectly secure. If a breach affects you we will notify you and any regulator as the law requires.

• Profile and listings: edit or remove them any time from your profile and guide pages.
• Email: unsubscribe from non-essential emails via the link in them. Booking emails continue while you have bookings.
• Location: your browser controls whether we can read it; "near me" works only if you allow it.
• Messages: block a member to stop them contacting you; report a message to us.
• Close your account: email hello@renga.life from the address on your account. We will close it and delete or anonymize your data on the schedule above.

Depending on where you live you may have the right to: know what personal information we hold about you and get a copy; correct it; delete it; restrict or object to some uses; take it with you in a portable form; opt out of "sale" or "sharing" (we do neither); and not be discriminated against for exercising these rights. We extend these rights to everyone, wherever you live.

To exercise them, email hello@renga.life with the subject "Privacy request". We will verify you by asking you to write from the email on your account, and respond within 45 days (or the time your local law allows). You may use an authorized agent; we will ask for proof of authorization. If we decline a request we will tell you why, and you may appeal by replying to our decision.

California residents: in the last 12 months we have collected the categories listed in Section 2 (identifiers, customer records, commercial information, internet activity, geolocation when you allow it, professional information for Guides, inferences we do not draw, and sensitive information limited to license documents and health details you choose to share with a Guide), for the purposes in Section 3, and disclosed them to the service providers in Section 4. We do not sell or share personal information and have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes other than providing the service you asked for. We honor Global Privacy Control signals as an opt-out of any future sale or sharing.

EU and UK residents: our legal bases are in Section 3. You may complain to your local data-protection authority. Data is processed in the United States; where required we rely on Standard Contractual Clauses with our providers.

Renga operates from the United States and our providers store data in the United States. If you use the site from elsewhere, your information is transferred to and processed in the US, where privacy laws may differ from your country's.

When we change this policy we will post the new version with a new date, and for material changes we will email account holders or show a notice on the site before the change takes effect.

Studio 7 Productions LLC (dba Renga)
63 N Burritt Ave, Buffalo, WY 82834
Email: hello@renga.life (subject "Privacy request" for rights requests)