PRIVACY POLICY AGREEMENT

1. Introduction

This Privacy Policy explains how Midnight Sharp Creative Studios (“Midnight Sharp Studios,” “we,” “us,” or “our”) collects, uses, stores, discloses, protects, and deletes information in connection with Renda & Toni (the “App”), including related websites, account services, shopping-list sharing, price-comparison features, subscriptions, sponsored content, customer support, and other related services.

​

Renda & Toni is designed to help people organize household shopping and, where available, compare retailer prices. We are committed to privacy, data minimization, transparency, security, and meaningful user control. We do not sell personal information.

​

2. Controller / Privacy Contact

Legal entity: Midnight Sharp Creative Studios

ID: 67.021.740

Address: Av. Calle 6 # 47-58 Interior 1, Puente Aranda, Bogotá, Colombia

Privacy Office: Midnight Sharp Creative Studios – Privacy Office

Privacy email: legal@midnightsharp.com

Support email: info@midnightsharp.com

Website: www.midnightsharp.com

​

3. Scope and Eligibility

Renda & Toni is intended for people aged 18 or older. It is not directed to children. By using the App, you represent that you meet the applicable minimum age requirements.

​

The service is intended for users throughout the Americas, including Canada, the United States, Latin America, the Caribbean, and countries in Central America, subject to applicable law and availability.

​

4. Information We Collect

4.1 Account and authentication information

• Name or display name.

• Email address.

• Authentication identifiers associated with your account.

• Authentication information handled by Firebase Authentication. We do not have access to your password in readable form.

• Information provided through Google Sign-In or Sign in with Apple, to the extent necessary to create and maintain your account.

• Account preferences, including language and avatar selection.

 

4.2 Guest mode

Renda & Toni can be used in Guest mode without creating an account. Guest users can create, edit, delete, and share shopping lists. Guest data may be stored locally on the device and may be lost if the application is removed, application data is cleared, or the user declines to migrate the lists to an account.

​

When a Guest user creates an account, Renda & Toni may offer a one-time migration of Guest lists to the new account. If the user chooses not to migrate and confirms the warning, those Guest lists may be permanently lost.

​

4.3 Shopping lists and collaboration

• Lists and the shopping items contained in them.

• Item status, including whether an item has been purchased and related shopping history.

• Information required to manage list ownership and collaboration.

• Names and avatars shown to collaborators.

• Sharing and collaboration events necessary to operate the feature.

 

Renda & Toni is designed so that shopping lists contain shopping items rather than free-form personal notes. Users should nevertheless avoid placing sensitive or unnecessary personal information into item names.

​

4.4 Images and files

Renda & Toni may allow you to personalize your profile or add images to grocery list items by choosing from built-in avatars, taking a photograph using your device's camera, or selecting an existing photograph from your device's photo library.

​

Depending on the feature you choose to use, we may process the selected avatar, photograph, or image file for purposes such as displaying your profile picture, identifying a grocery item, and supporting the functionality of the App.

Built-in avatars can be used without uploading a personal photograph.

​

Access to your device's camera or photo library will be requested or enabled as necessary for the relevant functionality and subject to the permissions and controls available on your device. You may choose not to use these features; however, certain functionality may then be unavailable.

​

Renda & Toni does not need access to your entire photo library merely because you choose to upload an image. Where supported by your device and operating system, you may select an individual photograph for use within the App.

​

Images submitted to Renda & Toni may be stored and processed using our service providers, including cloud storage providers, as necessary to provide the requested functionality and in accordance with this Privacy Policy.

​

You should avoid uploading photographs containing sensitive personal information or images of other individuals unless you have the necessary rights and permissions to do so.

​

4.5 Location

If you grant location permission, Renda & Toni may use your current location to determine which participating or publicly available retailers are relevant within a distance you select. The intended design uses current location for relevance and does not require maintaining a historical record of where you have been.

​

Renda & Toni is designed to associate price results with the relevant retailer and source information rather than maintaining a persistent history of the user's movements. Users can control the search radius.

​

4.6 Camera, microphone, photo library and files

These permissions are used only when you choose a feature that requires them, such as taking a product photo, selecting an image, or using voice input to add an item. The App does not intentionally use the camera or microphone for continuous background monitoring.

​

4.7 Technical, diagnostic and usage information

Depending on the production configuration, our infrastructure and analytics providers may process technical or diagnostic information such as application version, operating system, device or app identifiers, crash information, performance information, network information, timestamps, approximate technical location signals, and usage events. The exact categories will be reflected in the App Store and Google Play disclosures applicable to the published build.

​

5. Firebase and Other Service Providers

Renda & Toni uses Google Firebase services. Depending on the production build, these may include Firebase Authentication, Cloud Firestore, Realtime Database, Cloud Storage, Analytics, Crashlytics, Performance Monitoring, Cloud Messaging, Remote Config, Cloud Functions, and App Check.

​

These services may process information on Midnight Sharp Studios's behalf for authentication, database and file storage, synchronization, security, diagnostics, analytics, application configuration, messaging, and infrastructure.

​

We may also use other carefully selected technology providers for email, payments, artificial intelligence, hosting, security, analytics, customer support, or other service functions. We maintain an internal record of relevant providers and the categories of information each provider is permitted to process.

​

6. Authentication and Passwords

Renda & Toni supports email/password registration and login, Google Sign-In, and Sign in with Apple. We also provide password recovery for applicable accounts.

​

Passwords are managed by Firebase Authentication. Midnight Sharp Studios does not have access to users' passwords in readable form.

​

We recommend verifying the email address associated with an account. Email verification helps protect accounts from unauthorized use and helps ensure that password recovery and important account communications reach the account owner.

​

7. How We Use Personal Information

• Provide, operate, maintain, and secure Renda & Toni.

• Create and authenticate accounts.

• Provide password recovery and account-security functions.

• Synchronize shopping lists across devices for authenticated users.

• Enable list sharing and collaboration.

• Display a collaborator's permitted name and avatar.

• Use current location, when permission is granted, to identify relevant nearby retailers.

• Provide price-comparison functionality.

• Research, extract, normalize, validate, and organize publicly available retailer price information.

• Maintain and update the Price Vault.

• Administer premium subscriptions and determine subscription entitlements.

• Display clearly identified sponsored promotions.

• Measure aggregate campaign performance.

• Send transactional emails and, where permitted, marketing communications.

• Diagnose crashes, bugs, performance issues, abuse, and security incidents.

• Improve product reliability, usability, and security.

• Comply with applicable law and protect our legal rights.

• Prevent fraud, misuse, unauthorized access, and other harmful activity.

 

8. Price Vault and Retailer Information

Renda & Toni is designed to compare prices only for retailers whose relevant information is available through publicly accessible retailer websites or other permitted public retailer sources. We do not intend to use marketplace listings such as Mercado Libre as a substitute for a retailer's own public source when determining the retailer's price.

​

The intended workflow is: Retailer public source → automated/AI extraction → validation and normalization → Price Vault → Renda & Toni.

​

The Price Vault may contain retailer, product, brand, description, size, unit, price, currency, source reference, verification date/time, expiration date, confidence or quality information, geographic relevance, and method of acquisition. We may minimize or omit source-level fields where retaining them is not operationally necessary.

​

9. Price Accuracy and Retailer Responsibility

Prices and promotions displayed by Renda & Toni are provided for informational and comparison purposes. They may vary from the price actually charged by the retailer.

​

Where technically feasible, Renda & Toni may display when a price was last verified, for example: “Price verified: 10 Aug 2026, 10:30 AM.”

​

Retailers are solely responsible for the accuracy of prices, promotions, availability, inventory, product descriptions, and commercial terms published through their own channels. If a retailer publishes an erroneous price or promotion, Renda & Toni does not guarantee that the retailer will honor it and does not provide refunds, price adjustments, or other compensation on the retailer's behalf.

​

Renda & Toni does not represent that a displayed price is a binding offer, contractual quotation, or guaranteed selling price.

​

10. Artificial Intelligence and Automated Processing

Renda & Toni may use artificial intelligence, machine-learning, automation, or similar technologies to research publicly available retailer information, extract and normalize product and price information, validate data, identify relevant products, and support other service functions.

​

We may change AI providers over time. For this reason, this Privacy Policy describes the function rather than naming a specific AI vendor. We maintain internal vendor records and assess providers before enabling them.

​

Our intended price-research workflow does not require sending users' personal information to AI providers. We will not intentionally submit personal account information, passwords, private shopping lists, or precise location histories to an AI provider for retailer price research.

​

11. Shared Shopping Lists

When you select “Share list,” the operating system's sharing interface may allow you to send an invitation link using WhatsApp, messaging, email, social applications, or other applications available on your device.

​

A recipient must have Renda & Toni installed and follow the invitation flow to access the shared list. A collaborator may edit the list but cannot delete the owner's list. The owner may stop sharing, remove collaborators, and the collaborator may leave a shared list.

​

Collaborators may see the owner's name and avatar. They are not given the owner's email address, password, precise location, or unrelated account information through Renda & Toni.

​

If the owner deletes the list or account, the associated list is intended to become unavailable to collaborators.

​

12. Subscriptions and Payments

Renda & Toni may offer a monthly auto-renewing premium subscription that unlocks multi-retailer price comparison and other premium functionality described in the App.

​

Consumer subscriptions are intended to be purchased through Apple In-App Purchase and Google Play Billing, as applicable. Payment credentials are processed by the applicable platform. Midnight Sharp Studios does not intend to collect or store the user's full payment-card number, security code, or bank-account credentials.

​

Apple or Google may provide us with information necessary to validate the purchase, subscription status, renewal, cancellation, or entitlement.

​

Retailer-sponsored services are separate B2B arrangements with Midnight Sharp Studios and are not consumer subscriptions purchased through the App.

​

13. Sponsored Content

Retailers may pay Midnight Sharp Studios to display promotional content in Renda & Toni. Sponsored placements may appear as banners or short promotional spots and may invite the user to consider adding a retailer or promotion to a comparison.

​

Sponsored content will be identified or presented in a manner intended to make its commercial nature reasonably clear. Retailers do not receive individual user profiles or personal information from Renda & Toni for their own direct marketing.

​

We may provide sponsors with aggregate campaign metrics, such as impressions, views, or interactions, that are designed not to identify individual users.

​

14. Email and Notifications

We may send account verification, password recovery, security, service, and support-related emails. We may also send newsletters and marketing communications where permitted by law.

​

Marketing communications will provide an appropriate unsubscribe mechanism. Push notifications may be introduced in future versions; if enabled, users will be provided with appropriate operating-system controls and applicable notices.

 

15. Information Sharing and Disclosure

We do not sell personal information.

• Service providers processing information on our behalf.

• Authentication providers selected by you, such as Google or Apple.

• Apple or Google as necessary to process and validate subscriptions.

• Professional advisers or authorities when disclosure is required by law or reasonably necessary to protect rights, safety, security, or legal interests.

• A successor or transaction party in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable privacy protections.

• Other users only where you intentionally use a feature that requires sharing, such as shared shopping lists.

 

We do not provide participating retailers with individual user profiles, email addresses, precise locations, shopping histories, or other personal information for their independent marketing.

 

16. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, maintaining security, resolving disputes, complying with legal obligations, enforcing agreements, and maintaining appropriate business records.

​

Account and shopping-list information is generally retained while the account or content exists. Price Vault information may expire or be replaced as prices change. Technical, analytics, and diagnostic information may have separate retention periods based on operational and provider requirements.

​

We do not intend to delete an account merely because a user has been inactive for a specified period unless we adopt and disclose an inactivity-deletion program.

​

17. Account Deletion

Authenticated users can request permanent deletion from within the App. Midnight Sharp Studios will also maintain a web-based account-deletion mechanism at www.midnightsharp.com for users who cannot or do not wish to access the App.

​

Deletion is intended to remove the account and associated active personal information, including the Firebase Authentication account, user records, shopping lists, items, purchase history associated with lists, sharing relationships, avatars, and uploaded images, subject to information that must or may lawfully be retained.

​

There is no planned account-recovery period after confirmed deletion.

​

18. Backups and Disaster Recovery

Deleted information may remain temporarily in encrypted disaster-recovery backups that cannot reasonably be edited record-by-record. Our intended practice is to remove information from active systems promptly and allow residual backup copies to expire automatically through a limited backup-retention cycle.

​

For planning purposes, Midnight Sharp Studios targets an approximately 30-day backup lifecycle, subject to the actual production configuration and capabilities of the selected infrastructure.

​

Backup copies are not intended to be used for ordinary application operations or restored except where reasonably necessary for disaster recovery or legitimate technical purposes. When a backup containing deleted information reaches the end of its retention period, it will be overwritten or securely deleted according to the applicable infrastructure process.

​

19. Security

We use technical, organizational, and administrative safeguards designed to protect information. Depending on the system, safeguards may include encryption in transit, secure cloud infrastructure, Firebase Authentication, Firebase Security Rules, App Check, least-privilege access, restricted administrative access, secure credential management, logging, monitoring, backups, and secure development practices.

​

Access to the production Firestore environment is restricted to authorized Midnight Sharp Studios personnel with a legitimate operational need. Passwords are not visible to Midnight Sharp Studios personnel.

​

No security measure can guarantee absolute security. If a security incident occurs, Midnight Sharp Studios will assess it and provide notices to affected users or authorities where required by applicable law.

​

20. Privacy Rights

Depending on your location and applicable law, you may have rights concerning personal information, including rights to access or know what information we process, obtain a copy, correct inaccurate information, delete information, restrict or object to certain processing, withdraw certain consent, opt out of certain marketing, or make a complaint to a competent privacy authority.

​

To exercise a privacy right, contact Midnight Sharp Creative Studios – Privacy Office at legal@midnightsharp.com. We may need to verify your identity before completing certain requests.

​

21. California Privacy Notice — CCPA/CPRA

To the extent the California Consumer Privacy Act, as amended, applies to Midnight Sharp Studios, California residents may have applicable rights including the right to know, delete, correct, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information where applicable, and receive equal treatment for exercising privacy rights.

​

Renda & Toni does not sell personal information and does not intend to share personal information for cross-context behavioral advertising.

​

California privacy requests may be submitted to legal@midnightsharp.com. We will not discriminate against you for exercising rights provided by applicable law.

 

22. Canada

For users in Canada, Midnight Sharp Studios intends to apply privacy practices consistent with applicable Canadian privacy law, including principles relating to accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, limiting retention, safeguards, openness, access, correction, and complaint handling.

​

Where a provincial privacy law applies, the applicable provincial requirements may apply in addition to or instead of federal requirements.

​

23. International Processing

Midnight Sharp Studios and its service providers may process or store information in countries other than your country of residence. Where applicable law requires safeguards for international transfers, we will use appropriate contractual, technical, or organizational measures.

​

24. User Choices and Controls

• Use Guest mode instead of creating an account, subject to Guest limitations.

• Choose whether to grant location permission.

• Choose the search radius used for retailer relevance.

• Choose whether to upload a personal avatar or use a built-in avatar.

• Choose whether to use camera or microphone-based features.

• Choose whether to share a list.

• Stop sharing a list or leave a shared list.

• Change your display name and avatar.

• Unsubscribe from marketing emails.

• Delete your account and associated active data.

• Submit privacy requests to the Privacy Office.

 

25. Data Export

Where supported by the App, users may export or share shopping-list information in a readable format, including through available device sharing mechanisms such as email or messaging. This is intended to provide useful access to list information and is not a promise that every internal database record or technical log will be exported.

​

26. Third-Party Websites and Services

Renda & Toni may reference or access retailer websites or other third-party services. Those services are controlled by their respective operators and are subject to their own privacy policies and terms. Midnight Sharp Studios is not responsible for the privacy practices of third-party websites.

​

27. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal obligations, or privacy practices change. When material changes require notice, we will provide notice through appropriate channels. The effective date and last-updated date will identify the current version.

​

28. Publication Note — Internal

This document is intentionally comprehensive and is also being used as an implementation roadmap. Before publication, Midnight Sharp Studios must verify every technical statement against the production build. No statement should remain in the public policy if the corresponding feature, control, retention rule, deletion behavior, or disclosure is not actually implemented.

​

​

​

​

​

​

 

 

Acceptance of Terms

By using this app, you are hereby accepting the terms and conditions stipulated within the Privacy Policy Agreement. If you are not in agreement with our terms and conditions, then you should refrain from further use of our app, site and other services. In addition, your continued use of our app and website following the posting of any updates or changes to our terms and conditions shall mean that you agree and acceptance of such changes.

 

 

 

​

​

 

Sincerely,

Midnight Sharp Studios Legal & Compliance Team.