Privacy Policy
Last updated: October 6, 2026
renou is operated by MUNADI AI SOLUTIONS - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect personal information when you use the renou website at renou.ai, the renou iOS application, and related services (together, the "Service").
Account creation, day-to-day product use, and paid upgrades happen inside the renou iOS application. The website explains the product and is where you sign in to approve an AI assistant connection.
This policy also covers information about people who do not have a renou account, such as a contact added by a user or a person appearing in optional public professional research.
1. Information we collect
Information you provide
When you create an account in the iOS application, we collect your email address and a password (stored as a salted hash; we never see your plaintext password). You may also choose to sign in using a supported identity provider, in which case we receive the limited profile information that provider returns to us with your authorization.
Within the application, we store the content you create or import: contacts, notes, reminders, touchpoints, digital business cards, and relationship context. When you use voice capture, scan a business card, or import a chat screenshot, the audio or image is sent to our AI processors to produce a transcript or extract the details; our product database keeps the resulting text, such as the transcript or contact fields, rather than the original capture audio or image. How long our AI processors keep data is described under Data retention. AI requests may also include relevant saved contact information, notes and assistant memory. Voice-note name matching happens within renou without sending an address-book list to the model.
If you add a profile photo or images to your digital business card, we store those images. Images on a business card can be opened by anyone who has the card's link, like the card itself.
Information from users and public sources about other people
A user may save information about you in their private contact records, notes or meeting preparation. Optional online research can also retrieve public professional profiles and company news through Exa, including names, roles, employers, general locations, source links, short excerpts and summaries. Sources can include professional profile pages, company websites and news publications. Public information can be inaccurate or out of date.
This research is intended to help users identify professional contacts they know and prepare relevant follow-up. It is not intended for a public people directory, bulk prospect harvesting, researching children, inferring sensitive personal characteristics, or employment, credit or similar eligibility decisions.
Information collected automatically
We collect device, application, and usage information needed to operate and secure the Service, including IP address, access timestamps, device identifiers, application version, authentication events, push-notification tokens (if you enable notifications), and subscription status received from Apple's App Store.
Information processed on the website
Browsing the website does not require an account. The website does not run analytics or advertising trackers and does not set non-essential cookies. Standard server logs (request metadata) are processed by our hosting provider for security, performance, and abuse prevention. See our Cookie Policy for details.
If you connect an AI assistant to renou, you sign in to your renou account on renou.ai to approve the connection, and your browser keeps an essential sign-in session for that page.
If you subscribe to our newsletter or join a waitlist on the website, we collect the email address you submit and confirm it through a double opt-in step. We store your email address and subscription status so we can send the messages you asked for. Every newsletter email includes an unsubscribe link. If you unsubscribe, we keep your address marked as unsubscribed so we do not send further newsletters unless you subscribe again. Unconfirmed sign-ups are removed in a daily cleanup once they have been inactive for 30 days. We rely on your consent for newsletter delivery.
2. How we use your information
We use personal information to:
- Provide and maintain the Service
- Create and secure accounts
- Sync your data across your devices
- Deliver reminders, notifications, and assistant features you enable
- Process and verify subscription purchases
- Respond to support and feedback requests
- Diagnose, debug, and improve product quality
- Comply with legal obligations and enforce our Terms
3. Legal basis (EEA, UK, and similar regimes)
Where applicable privacy law requires a legal basis, we rely on the following:
For limited public professional research, where the law permits reliance on legitimate interests, our interest and the user's interest are in distinguishing known professional contacts and preparing relevant follow-up. We balance this against the person's privacy, limit the information used and provide correction and objection channels. A user's permission to enable AI or research is not consent from the person being researched. Where another basis or notice is required, that requirement still applies.
- Performance of a contract, to provide the Service you have requested
- Legitimate interests, in operating, securing, and improving the Service in a manner you would reasonably expect
- Consent, for processing that requires it under applicable law. This includes push notifications and the AI features described in this policy, which require a current grant recorded from the application. You can withdraw either consent at any time, and withdrawing is as easy as agreeing was
- Compliance with a legal obligation
4. Categories of recipients
We do not sell your personal information. We share information with service providers we engage to operate the Service, and with third parties you direct us to share with (described below). The relevant service-provider categories are:
- Cloud hosting, content-delivery, database, authentication, and storage providers
- Push-notification delivery infrastructure
- Apple, in connection with App Store distribution and Apple's in-app purchase system, to process and verify subscription purchases
- Subscription management infrastructure, to record, verify, and synchronize your subscription status with your account
- Diagnostics and crash-reporting providers, to receive crash reports and technical diagnostics so we can debug and improve the application
- Security and anti-abuse providers, including bot-detection on public web forms, to protect the Service against automated abuse
- Third-party AI processors, xAI (SpaceXAI LLC, providing US-hosted Grok models for the conversational assistant, image reading, note structuring, and relationship suggestions), ElevenLabs (voice transcription), and Exa Labs Inc. (optional public profile and company research), to deliver these features with the required permissions
- Email delivery providers, for account, transactional, and newsletter email
Optional online research
Online research is optional and available on the Power plan. When you enable it, we send the contact name, company, role and location needed for the search to Exa. Search suggestions can be wrong or incomplete. You choose from up to three suggested profiles or skip without selecting one. A search result does not automatically replace saved contact details. Online research stays on for your account until you switch it off in Settings. Switching it off stops future research requests but does not erase saved profile links, meeting briefs or related assistant context, and does not switch off the app's core AI features.
Third-party AI assistants you connect
renou lets you connect a third-party AI assistant or agent of your choice to your account, for example Claude (Anthropic), ChatGPT (OpenAI) or Muse (Meta). If you connect one, you sign in to renou on renou.ai and approve the specific access you are granting. Reading your data is always part of a connection. Creating and updating contacts, including birthdays, and logging new touchpoints are enabled by default on the connection page. You can turn write access off before approving the connection for read-only access. Once approved, those changes can be made through the assistant without opening the iOS app. Older connections keep their existing permissions until you disconnect and reconnect.
When you ask the assistant something, it sends renou a tool request, such as a search term, the contact details or birthday you want saved, or the touchpoint you want logged. The connection does not give renou access to your full chat history. A request may contain information from your conversation that the assistant includes as a tool input. Depending on the request, renou returns a small page of your own data: contact details (name, company, role, email, phone, location, birthday, notes, tags and social profile), touchpoints including their notes, open commitments, relationship-health scores, upcoming birthdays, and your contact groups. Answers are capped per request and per day, and there is no tool to export all of your data.
To prevent abuse, we record connector usage, including the account and connected assistant, tool used, time, result count, request outcome, and a minimal summary such as a contact identifier, the names of fields changed, or whether a note was included. The usage record does not contain the search text, saved field values, or note itself. Records older than 90 days are removed by scheduled cleanup, and account deletion also removes them. We do not use data accessed through a connected assistant for advertising or to train AI models.
This access happens only at your direction and is limited to your own data. You can review your connected assistants and disconnect any of them at any time in the application's settings, which revokes access immediately. Disconnecting does not delete your saved renou contacts or touchpoints, or erase data the assistant has already received. Usage records follow the retention period above. The assistant provider's handling of data it receives is governed by its own terms and privacy policy, for example the policies of Anthropic, OpenAI and Meta.
Other disclosures
We may disclose information when required by law, to protect rights or safety, or in connection with a corporate transaction such as a merger, acquisition, or sale of assets.
If you choose to share content using a feature designed for sharing, such as a digital business card, the information you choose to share will be visible to recipients of that share.
When you share a digital business card, a person who receives it may choose to send you their details through the card. We collect and store the details they submit, such as name, email, phone, company, and any note, so we can deliver them to you. Where the sender is not a renou user, we also store a hashed form of their IP address to prevent abuse.
5. Automated processing
Some product features rely on automated processing. Your network map groups related contacts within our backend using saved relationship data and existing numeric representations of that data. It does not send contact information to an external service to create new embeddings. We use AI processors to transcribe voice recordings, recognize text on business cards, read chat screenshots you import, and power the conversational assistant. Third-party AI processing runs only with your permission. These features support and inform you and do not produce legal or similarly significant effects on you within the meaning of Article 22 GDPR.
6. International data transfers
Grok model requests go directly to xAI's US regional endpoint, with Zero Data Retention required and no fallback to another provider or region. Under this setting, xAI does not retain the model content after processing or use it for model training. This applies to content sent through the Grok API; it does not mean that account, billing, security, or other providers' records have no retention. Our primary product database is hosted in Frankfurt, Germany.
Your information may be transferred to and processed in countries other than where you live. Where required by law, we use appropriate safeguards for international transfers, including standard contractual clauses or equivalent protections.
7. Data retention
We retain your information for as long as your account is active and as needed to provide the Service. You can start account deletion directly in the iOS application. When you do, access ends immediately and we remove or anonymize the personal data associated with your account from active systems without undue delay. Limited information may remain in routine backups for a short period before being overwritten in normal rotation, and we may retain information longer where required by law or necessary to establish, exercise, or defend legal claims.
API rate-limiting records are scheduled for deletion after 24 hours, and AI usage and connector audit records after 90 days. Cleanup runs periodically rather than at the exact moment a record reaches that age. Saved daily digests and notification history remain with your account unless removed earlier. These account-linked records are removed when you delete your account.
Exa research and ElevenLabs transcription use standard provider retention. We do not promise zero retention or that these providers never use data for improvement. Their handling depends on the applicable service terms and settings. Removing data from renou does not automatically erase provider history, logs, backups or the original public source. Where a request requires processor action, we coordinate that separately and explain any retained information or work still pending.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Delete your personal information
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
- Withdraw consent for processing that is based on consent
How to exercise your rights
You can start account deletion and request a data export from inside the iOS application. To exercise other rights, contact us at support@renou.ai.
You do not need a renou account to request access, correction, erasure or restriction, or to object to research about you. Email support@renou.ai with the information you want us to review and, if available, the relevant public profile or source link. Please do not send identity documents or sensitive information unless we explain why they are needed. We may ask for limited information to distinguish you from someone with a similar name and protect other people's privacy.
AI is essential to renou's core features, and AI processing requires your permission. Without permission, those features are unavailable. You can grant or withdraw permission in the application's settings; a withdrawal saved to our server blocks subsequent AI requests, including scheduled personalization. Account deletion and data export remain available. If you are offline or a withdrawal cannot be saved, AI is disabled locally and the app shows that the withdrawal is pending. Reconnect and retry in Settings. Requests already sent cannot be recalled by withdrawing permission.
If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. If you are a resident of California or another US state with applicable privacy law, you may have additional rights under that law, such as the right to know, correct or delete your information and to appeal our decision on your request. You can make these requests at support@renou.ai, and we will not treat you differently for exercising them. We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.
9. Security
We use reasonable technical and organizational measures designed to protect personal information, including access controls and encrypted network transport for synced data. Some data may also be stored on your device to support offline use. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us so we can delete it.
11. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page and, where appropriate, communicated through the application. The date at the top of this policy reflects the most recent change.
12. Contact us
For privacy questions or to exercise your rights, contact us at support@renou.ai.