Security & your data
OneRent is run by ONE DRIVE PORTAL L.L.C., Dubai, United Arab Emirates. This page explains how to delete your account, which data we keep and how we protect the OneRent website, the OneRent app and your data. Our Privacy Policy has the full details.
Delete your account
You can delete your OneRent account yourself at any time, in the app or on the website. It is free and takes a minute.
In the OneRent app
- Open the Account tab and sign in.
- Tap Delete account.
- Enter your password and tap Delete my account.
On onerent.ae
- Sign in and open Account → Access & Security.
- Click Delete, enter your password and confirm.
By email
- Send an email to info@onerent.ae from the email address of your account and ask us to delete it. We delete it and confirm by email.
What is deleted
- Your name, email address, phone number, address, date of birth and nationality
- Your passport, Emirates ID and driving licence details, and the documents you uploaded
- Your profile photo, and your sign-in and notifications on every device
- A OneRent Flex request that the rental company has not answered yet, and that is not paid, is cancelled
What is kept, and why
- A booking that a rental company has accepted, or is still answering, keeps your contact details for that rental company, so it can carry out or answer your booking.
- Invoices and payment records are kept for as long as UAE law requires for accounting. Your account itself no longer holds your details.
- With a OneRent Flex plan running, or already paid, the car and its payments continue. Your account is then deleted automatically on the day the plan ends; the app and the website show you that date.
Apart from a running OneRent Flex plan, the deletion happens at once. A deleted account cannot be restored.
The data we collect
- Your account: name, email address and phone number. Your password is only stored as a secure hash.
- Bookings and OneRent Flex: the car, the dates, the options you choose and the messages you send to the rental company. For OneRent Flex, also the identity documents the rental company needs to approve you.
- The app: a notification token, to tell you when your request is answered, and crash reports without personal data.
- The website: cookies that keep you signed in and protect our forms against abuse.
We do not sell your personal data. We share it with the rental company you book with, and with service providers that run parts of OneRent for us, including Amazon Web Services (hosting and file storage), Stripe (card payments), Resend (email), Twilio (WhatsApp and text messages), Expo (app updates and notifications), Sentry (crash reports) and Cloudflare (protection against bots).
How we protect it
- Encrypted connections: the website, the app and our servers only talk over HTTPS (TLS).
- Passwords: stored only as a one-way BCrypt hash. Nobody at OneRent can read your password.
- Sign-in: on the website you stay signed in with secure, HttpOnly cookies that scripts on the page cannot read. The app keeps its sign-in in your phone's secure storage (Keychain on iPhone, Keystore on Android). Sessions expire automatically, and changing your password signs out your other devices.
- Documents: identity documents are kept in private cloud storage that is not publicly accessible, and are removed when you delete your account.
- Payments: card payments go through Stripe, which is certified to PCI DSS Level 1. OneRent never sees or stores your full card number.
- Access: a rental company only sees the bookings for its own cars, and OneRent staff only have the access their role needs.
- Abuse protection: our forms are protected against bots with Cloudflare Turnstile.
Report a security issue
Found a security issue on onerent.ae or in the OneRent app? Email info@onerent.ae with "Security" in the subject. Please give us time to fix it before you share it publicly.
Contact
ONE DRIVE PORTAL L.L.C., Dubai, United Arab Emirates info@onerent.ae · +971 58 554 6809