Privacy Policy

Last updated: 1 August 2026

RentProof helps tenants in Singapore document their rental at move-in and move-out so they can prove the unit's condition and protect their security deposit. This policy explains what we collect, why, and the choices you have.

In short: your evidence is yours. We don't sell your data or share it with landlords or advertisers. Your records are only shared when you choose to export or send a report.

1. Who we are

RentProof ("we", "us") provides the RentProof mobile app and the website at rentproofsg.com. RentProof is currently run by an independent developer based in Singapore, operating in a personal capacity. For any privacy question, contact us at hello@rentproofsg.com.

This website collects nothing. There is no sign-up form, no account, no cookies and no analytics on rentproofsg.com. Everything below describes the RentProof app, which you only use after installing it and creating an account.

Note to self — before taking payment: Singapore's PDPA applies to individuals acting in a business capacity, so the obligations here already hold. Once you incorporate, add your registered entity name, UEN and registered address to this section and to section 12 — the Companies Act requires them on your website. Fill in the bracketed retention periods in section 8 too.

2. Information we collect

Account details — your email address, and name if you provide it, used to create and secure your account. If you sign in with Apple, we receive the identifier Apple provides (and an email, which may be Apple's private relay address).
Evidence you create — the photos, videos, documents, defects, receipts and notes you add to your locker, together with the details you enter (e.g. property address, lease dates, rent and deposit amounts, landlord contact).
Integrity metadata — for each item we compute a SHA-256 digital fingerprint and record timestamps (including a server-verified time) so any later change to a file would be detectable.
Optional location — if you enable it, an approximate location tag may be attached to evidence you capture. This is optional and off unless you allow it.
Device & diagnostic data — limited technical data used to keep the service secure and working, including app-integrity signals (Apple App Attest via Firebase App Check) and basic diagnostics.

3. How we use your information

To create your account and store your evidence securely.
To generate your move-in, handover and move-out reports and PDFs.
To compute and verify digital fingerprints and timestamps that make your records tamper-evident.
To operate, secure and improve the app, and to prevent abuse.

4. Where your data is stored

Your photos, videos and documents stay on your device — the original media files are never uploaded to our servers. What syncs to the cloud is your account information and your records' metadata (such as item details, the SHA-256 fingerprints, and timestamps), which we store using Google Firebase (Authentication and Firestore). That data is protected by access rules restricting each account's records to that account, and is encrypted in transit. Firebase may process it on Google Cloud infrastructure outside Singapore.

Please note: because your media lives only on your device, deleting the app or losing your device will lose the underlying photos and videos. Export your reports to keep a copy.

5. Sharing & disclosure

We do not sell your personal data or share it for advertising. We share data only:

When you choose to — e.g. exporting a report or sharing a file with your landlord or the Small Claims Tribunals.
With service providers who process data on our behalf under contract — principally Google (Firebase) and Apple (sign-in and payments).
When required by law — to comply with a valid legal request.

6. Payments

Purchases (Protect and Dispute tiers) are handled by Apple's In-App Purchase. Apple processes your payment; we do not receive or store your card details.

7. Your choices & rights

Access & correction — you can view and edit your records in the app at any time.
Deletion — you can permanently delete your account and all associated data from inside the app (Property details → Delete account & all data). This erases your records from both your device and the cloud and cannot be undone.
Location — you can turn location tagging on or off in your device settings.
Withdrawing consent — you can withdraw consent for us to collect, use or disclose your personal data at any time by emailing us. We will action it within [10] business days and confirm when it is done. Withdrawing consent for product emails does not delete your account; ask us separately if you want that too.

8. Data retention

We keep your data for as long as your account is active. When you delete your account, your evidence and records are removed. Some minimal transaction or security logs may be retained where required for legitimate or legal reasons.

9. Children

RentProof is intended for adults entering into tenancy agreements and is not directed at children under 16.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new "Last updated" date.

11. Contact

Questions or requests about your data? Email hello@rentproofsg.com. We respond to access, correction and withdrawal requests within [30] days, at no charge for a reasonable request.

12. Data Protection Officer

Under Singapore's Personal Data Protection Act we have appointed a Data Protection Officer responsible for how we handle personal data:

Email: hello@rentproofsg.com, marked "PDPA request"
We aim to acknowledge within 3 business days.

If you are not satisfied with our response, you may raise the matter with Singapore's Personal Data Protection Commission at pdpc.gov.sg.