Privacy policy
Your client list is yours. We hold it in Singapore, never sell it, and give you a one-click export and a one-click delete.
Who we are
Propoa is operated by Propoa Pte. Ltd. (UEN 202635624D), a company incorporated in Singapore. This policy explains what we do with personal data in the app, and it is written to the Personal Data Protection Act 2012 (PDPA).
If you have a question, a request, or a complaint about personal data, write to privacy@propoagroup.co. That address reaches the person responsible for data protection here, and we aim to respond within 30 days.
Two kinds of data, two different roles
This app holds personal data about two different groups of people, and our responsibilities are not the same for each.
For your own account details, we are the organisation responsible - we decide what to collect and why, and this policy governs it.
For everything you record about your clients, you are responsible. It is your book of business, collected under the consent your clients gave you. We hold it on your behalf, act on your instructions, and do not use it for our own purposes. Obtaining valid consent from your clients, honouring their withdrawal of it, and complying with your obligations as a CEA salesperson - including the Do Not Call registry - remain yours.
What we collect about you
- Your name and email address, and how you sign in - either a password or a Google account. Passwords are handled by our authentication provider and never reach us.
- Your CEA registration number, the salesperson and estate agency name on it, its expiry date, and the registration document you upload so we can verify you are licensed.
- Your birth year, used only to calculate statutory contributions on your earnings.
- Your plan, subscription status, trial dates and referral code.
- Settings you choose - default start and end addresses for route planning, transport cost rate, tax set-aside percentage, message templates and reminder preferences.
- Your device's push notification token, so reminders can reach your phone.
- Anything you post or vote on in the feedback board.
- Basic usage analytics: which screens you open and when, tied to your account ID only. Your email address is not sent to our analytics provider, and we tell it not to record or geolocate your IP address.
What you record about your clients
You choose what goes in. Only a name is required; everything else is optional.
- Contact details.
- Property requirements and budget.
- Personal context you choose to note, which may include a date of birth.
- Whether they consented to marketing and to data processing, when, and how you obtained that consent.
- A record of your dealings with them - viewings, transactions, key dates, and documents you upload.
Why we use it
- To run the app: showing you your own data, sending the reminders you set, and calculating your earnings.
- To verify that you hold a current CEA registration, because we only offer this app to licensed salespersons.
- To take payment for a subscription and to operate the referral programme.
- To keep the service secure, diagnose faults, and stop abuse.
- To understand which features are used, so we build the right things next.
- To contact you about the service itself - security notices, changes to this policy, and problems with your account.
Permissions the app asks for
Android asks you before any of these, and the app works without them - each one unlocks a feature rather than gating the product.
- Contacts: so you can import someone from your phonebook as a client. We read your contacts on the device to show you the list; only the specific people you tap are ever sent to us.
- Calendar: so your existing appointments show up next to your viewings. If you connect a Google Calendar, we only read it - we never create, edit or delete anything in it, and stop reading it the moment you disconnect. Imported events, from Google or your device, stay on your device in the app's local storage and are not uploaded to us.
- Propoa's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Notifications: so viewing and follow-up reminders reach you.
AI-assisted client entry
The app can turn a pasted message - typically a WhatsApp enquiry - into a filled-in client form so you don't retype it. When you use it, the text you pasted is sent to an external AI processing provider, which returns the structured fields for you to check and correct.
This only happens when you paste something in and ask for it. We never send a stored client record, and nothing is sent in the background. We do not keep the pasted text after the draft comes back, and it is not used to train any model.
Data from a connected Google Calendar is never sent to it. Imported calendar events stay on your device and never reach our servers, so this feature only ever sees the text you paste in.
Whether the consent you hold from your client covers sending their message to an overseas processor is your judgement to make before you paste it. If you would rather not, the app still fills in what it can without AI.
Who else sees it
We do not sell personal data, and we do not share it for anyone else's advertising. We use the service providers listed below to run the app, each of them limited to that purpose.
We will also disclose data where the law requires it, or where it is necessary to investigate a serious breach of our terms.
| Provider | What for | Where |
|---|---|---|
| Cloud infrastructure and hosting | Hosting, database and document storage - where everything in your account lives | Singapore (database and files), with global edge servers |
| Identity and authentication | Sign-in, passwords and account security, including signing in with a Google account if you use one | United States |
| Payment processing | Taking subscription payments - receives your name and email address so a payment can be matched to your account. Card and bank details go to them, never to us | Singapore |
| Email and push notification delivery | Payment receipts and other account emails, and reminders pushed to your device - receives your email address and what the message says | United States |
| AI text processing | AI-assisted client entry - only text you paste in yourself, and only when you ask for it | United States |
| Product analytics | Which screens are used, so we know what to build next. Receives your account ID, not your name, email or IP address | United States |
| Calendar integration | Reading your calendar, only if you connect it | United States |
| Public data and mapping services | Singapore addresses, routes, school and HDB data - property lookups, not people | Singapore |
| Third-party messaging service | Operational alerts to our own team - normally just an account identifier, plus the subject line of any feedback you send, and your email address if you ask us to delete your account | Outside Singapore |
Where it is stored
Your account data, your client records and your uploaded documents are stored in Singapore, on our cloud hosting provider's infrastructure.
Some of the providers above operate outside Singapore, as noted in the table. Where personal data is transferred out of Singapore, we rely on those providers' contractual data-protection commitments to keep it protected to a standard comparable to the PDPA.
How long we keep it
For as long as your account is open. You can ask us to delete it at any time - from More in the app, or Settings on the web.
Deletion is scheduled rather than instant: your account is kept for 30 days after you ask, so that signing in during that time can call it off. We do this because an account deleted by accident, or in a moment of frustration, is otherwise impossible to get back.
Once those 30 days are up, the deletion is checked by a member of our team and then carried out - everything in the account, including clients, viewings, deals, documents and your sign-in, is removed. The check is there to catch our own mistakes rather than to reconsider yours; it takes days rather than weeks, and we will not ask you to justify the request. If you would like confirmation once it has been done, write to us at the address below.
After that, the only things that remain are our hosting provider's server request logs, kept for a short period and containing no client data, and a count of referral rewards already issued against your code, kept without any personal details so the annual cap still holds.
Your choices
- Access and export: Settings has a one-click export of everything in your account as a single file. It is yours, and it moves with you if you change agency.
- Correction: every field in the app is editable by you directly. If something you cannot reach is wrong, write to us.
- Withdrawal of consent: you can withdraw consent for our processing at any time by deleting your account. Because the app cannot function without holding your data, withdrawing consent and closing the account are the same act. The deletion completes 30 days after you ask, and you can cancel it by signing in before then.
- Notifications: turn reminders off in Settings, or revoke the permission in Android.
- Complaints: write to us first. You also have the right to complain to the Personal Data Protection Commission of Singapore.
Keeping it safe
Traffic is encrypted in transit. Every request is authenticated, and the database is queried in a way that scopes each agent to their own rows - your client list is not reachable by another agent. Uploaded documents are stored privately and served only through short-lived links to their owner. Passwords are held and hashed by our authentication provider, and never reach our servers.
No system is perfect. If a breach occurs that is likely to result in significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.
Children
This app is for licensed CEA salespersons and is not directed at children. We do not knowingly collect personal data from anyone under 18. If your client records happen to include a family member's date of birth, that data is yours and is covered by the consent you obtained.
Changes to this policy
We will update this page when what we do changes, and the effective date at the top will move with it. If a change materially affects how we handle your data, we will tell you in the app rather than relying on you to re-read this page. This version took effect on 23 August 2026.
Contact us
Propoa Pte. Ltd. (UEN 202635624D), Singapore. Data protection queries: privacy@propoagroup.co.
See also how to delete your account.