PropDaddy — Privacy Policy

Who we are

PropDaddy is run by Big Papa Pte. Ltd. (UEN 202323507N), a company registered in Singapore. Under Singapore's Personal Data Protection Act 2012 (PDPA) we are the organisation responsible for the personal data you give us through the website and the apps. "We" and "us" on this page mean that company. PropDaddy is independent: it is not run by, affiliated with or endorsed by URA, HDB, SLA or any other government agency.

What we collect

If you create an account:

• Sign-in details — your email address and/or mobile number, and a password if you set one (stored only in scrambled form by our sign-in provider).
• Profile — your name, phone number, date of birth, gender, marital status, occupation, citizenship or residency status and monthly income. The profile page shows which of these you need to fill in; the rest are optional and used to pre-fill the calculators.
• Your properties — address, postal code, unit and floor, property type, size, purchase price and date, loan details, and, if you add them, rental income, expenses, lease expiry and ownership shares.
• Other people's details you type in — for example a co-owner's name or a tenant's name on one of your properties. Please only add someone else's details if they are happy for you to do so.
• Portfolio history — each day we work out the estimated value of your properties and keep a dated record of the total and the holdings, so we can show how your portfolio has moved and alert you when it changes.
• Notifications — your alert settings and the alerts we send you (portfolio value changes, mortgage-rate moves and property news).

Whether or not you have an account:

• Addresses and postal codes you look up — in the Valuator, Amenities, Rental Finder and similar tools. They go to our server, which may look them up with OneMap (see below) to find the location and work out the answer. We don't store them with your account (only properties you save are kept), but they can appear in our server logs.
• Calculator inputs — figures you enter in the calculators are used to work out the result. Some are sent to our server for that; they are not stored with your account.
• Push notification token — if you allow notifications in the app, your phone gives us a device token and we note whether it is an iPhone/iPad or Android. Signed-in devices are linked to your account; a signed-out device can still get general property news alerts.
• Server logs — like most websites, our servers record each request: IP address, browser or device type, the page or data requested, the time and the site that linked to us. We use them to keep the service running and secure, and to count visits.
• How you found us (website only) — your browser remembers how you first arrived: the campaign tags of the link, if it had any (for example "?utm_source=telegram"), the name of the website that sent you, if any, the page you landed on and the date. This is kept on your device and replaced after 90 days. If you create an account, we save it once with your account, so we can tell which of our posts and channels bring people in. The store badges on our homepage pass the same campaign tags, and nothing about you, to the app stores, so we can count app installs per campaign.
• Storage on your device — the website and apps keep your sign-in session (in a cookie on the website), your settings (such as light or dark mode) and some cached data on your device. We don't use advertising or cross-site tracking cookies. Clearing your browser data or uninstalling the app removes this storage.
• Messages to us — if you email us, your email and what you tell us.

The market data in the app (transactions, new launches, rents, news) comes from URA (including licensed URA REALIS data shown to members), HDB and other datasets on data.gov.sg, JTC, SLA, MAS, news publishers and developers' published materials, plus our own estimates. It is not personal data about you.

Why we use it

• To provide the service: your portfolio, estimated values, calculators, market pages and the tools you use.
• To sign you in, keep your account secure and prevent abuse.
• To send the alerts you choose — by push notification, by email if you turn email alerts on, and in the app — and general property news alerts to devices that allow notifications.
• To answer your questions and requests.
• To understand how the service is used in aggregate (for example how many people use a page) and to fix problems.
• To meet legal obligations.

We do not sell your personal data, we do not show third-party advertising, and we do not use your personal data to target ads.

Who else handles it

We use these service providers. They handle data only to do their job for us, under our instructions:

• Supabase — sign-in and the database that holds accounts, profiles and properties.
• Our cloud server provider — the servers that run the website and the app's database (portfolio history, notifications, device tokens), our backups and our logs.
• Resend — delivers the emails we send: sign-in codes and the email alerts you turn on.
• Twilio — sends one-time codes by SMS if you sign in with a mobile number.
• Google Firebase Cloud Messaging and Apple Push Notification service — deliver push notifications to Android and Apple devices.
• Map and photo hosts — map images load straight from OneMap (and, in 3D map views, OpenFreeMap) to your device, and photos in news stories load from the publisher's own website. Those services see your device's IP address and browser type, as any website does. We don't send them anything else about you.
• OneMap, run by the Singapore Land Authority — receives the addresses and postal codes that are looked up, to find their location.

Apart from this, we share personal data only when the law requires it, or with an organisation that takes over the PropDaddy service, which would have to treat it as this policy says.

Some of these providers store or process data outside Singapore. Where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA, as the PDPA's transfer rules require.

How long we keep it

• Account, profile, property and portfolio data: for as long as your account exists. When you delete your account it is removed from our live systems straight away.
• Backups: copies of our databases are kept for up to 30 days, then deleted. Data you delete disappears from the backups within that time.
• Server logs: up to 180 days, then deleted.
• Push notification tokens: until you sign out (the token is then no longer linked to you), and deleted once the push service tells us the app has been uninstalled.
• Our email and SMS providers keep delivery records (the address or number, the time and the message) for their own limited periods.
• Emails you send us: as long as needed to deal with them.

Delete your account and data

Signed in on the website or in the app, open Profile and use Delete my account. Deletion is immediate, cannot be undone, and removes your sign-in, profile, properties, portfolio history, notifications and the devices linked to your account. If a property is co-owned, the other owner's own record stays, with your details removed.

You can also email hello@propdaddy.sg from the email address on your account and we will delete it within 7 days. The delete your account page has the steps and the full list of what is deleted and kept.

How we protect it

Data travels over encrypted connections (HTTPS). Access to our databases and servers is limited to the people and systems that need it, and each signed-in request is checked so you can only reach your own data. No system is completely secure; if a data breach affects you, we will tell you and the Personal Data Protection Commission where the PDPA requires it.

Age

PropDaddy is for adults: you must be 18 or older to create an account. We don't knowingly collect personal data from anyone younger. If you think someone under 18 has given us their data, email hello@propdaddy.sg and we will delete it.

Your choices and PDPA rights

By creating an account and using PropDaddy, you consent to us collecting and using your personal data as this page describes. You can:

• Withdraw consent. The simplest way is to delete your account. For anything narrower, email us. Some features may stop working without the data they need.
• Turn alerts off. Change your alert settings in the app, or turn off notifications for PropDaddy in your phone's settings.
• Ask what we hold. You can ask for the personal data we hold about you and how it has been used in the past year.
• Correct it. Most details can be edited in the app under Profile; for anything else, ask us.

Use the in-app options where they exist, or email hello@propdaddy.sg from the email address on your account. We aim to reply within 30 days; if a request will take longer, we will tell you why and when to expect an answer.

Data Protection Officer

Our Data Protection Officer handles access, correction and deletion requests, consent withdrawal, and any question or complaint about how we handle personal data. Contact: hello@propdaddy.sg. If you are not satisfied with our answer, you can contact Singapore's Personal Data Protection Commission at pdpc.gov.sg.

Changes

When this policy changes we will update this page and the date at the top. If a change materially affects how we use data you have already given us, we will also tell you in the app or by email. Questions: hello@propdaddy.sg.