Privacy Policy

1. What this policy covers

It covers the naise app on iPhone and Android and the website naise.app. naise is in early access: you can create an account, collect naise coins, set your ride extras and check whether your area is covered. Rides are not open yet.

When we add features that use new kinds of data (for example booking rides, payments or location), we will update this policy and tell you in the app before they start.

2. The data we collect

Data you give us

Account details: your name and email address. If you sign up with email, your password is stored only as a one-way hash; we can't read it.
Sign in with Apple or Google: the identifier Apple or Google gives us for your account, your email address (which may be an Apple private relay address) and your name if you share it. We never see your Apple or Google password.
Postal codes you enter to check whether your area is covered, and your request to be told when it is.
Your ride extras (for example Focus mode or Cool cabin), saved for your first ride.
Messages you send us, for example to support.

Data created when you use naise

Your rider number and the date you joined.
Your naise coin balance and history, and the welcome card or other rewards you receive and reveal.
Records that you accepted our Terms of Service and this Privacy Policy, with their versions.

Data from your device

A random identifier the app creates when it's installed, your device platform, operating system version and app version.
A push notification token, only if you allow notifications.
Your IP address and basic request details in our server logs, used to keep the service secure.

On naise.app

The website uses Google Analytics, which sets cookies to measure visits: pages viewed, your browser and device type, and an approximate location derived from your IP address. You can block these cookies in your browser settings without affecting the site.

What we don't collect today

The app does not access your precise location, contacts, photos or microphone, and does not take payment details. If that changes, we will ask for permission first.

3. How we use your data

To create your account, sign you in and keep it secure, including sending the codes that confirm your email or reset your password.
To provide the app's features: your rider badge, naise coins and rewards, ride extras and the area check.
To prevent fraud and abuse, such as fake accounts, repeated sign-up attempts or misuse of rewards.
To send service messages about your account and, if you allow notifications, news about naise such as when rides open in your area.
To understand how naise is used, in aggregate, so we can improve it.
To meet our legal obligations and respond to lawful requests.

We do not sell your personal data, and we do not use it for third-party advertising. We don't send marketing emails today; if we start, you will be able to opt out at any time.

When you create an account, you agree to this policy and consent to us using your data as described here. You can withdraw your consent at any time by contacting us or deleting your account. If you withdraw consent we need to provide the service, we may not be able to keep providing it to you.

We share personal data only with service providers that help us run naise, under contracts that limit them to processing it for us:

Amazon Web Services: hosts our servers and database, in Singapore.
Resend and Amazon Simple Email Service: deliver our emails, such as sign-in codes.
Apple and Google: provide Sign in with Apple and Sign in with Google when you choose them.
Singapore Land Authority (OneMap): looks up the area of a postal code you enter. We send only the postal code.
Expo: delivers push notifications to your device, if you allow them.
Vercel and Google Analytics: host and measure the naise.app website.

We may also disclose data when the law requires it, to protect the rights, property or safety of naise, our users or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your data.

6. Data stored outside Singapore

Our main servers are in Singapore. Some service providers, such as our email and website providers, may process data in other countries, including the United States. When data leaves Singapore, we make sure it is protected to a standard comparable to the PDPA, as the PDPA requires.

7. How long we keep data

We keep your account data while your account is open.
When you delete your account in the app, it is closed straight away, your remaining naise coins are forfeited and your sessions are ended. Within 30 days we delete or anonymise your personal details.
Some records are kept in anonymised form so our totals stay correct (for example rider numbers and the coin ledger), and some may be kept longer where the law requires it.
Server logs are kept for a limited time, normally no longer than 90 days, unless needed to investigate abuse.

8. How we protect data

Data travels between the app and our servers over encrypted connections (HTTPS). Passwords are stored only as one-way hashes, sensitive tokens are encrypted, and access to our systems is restricted to the people who need it. No service can be completely secure, so please keep your sign-in details private and tell us straight away if you think your account has been misused.

9. Your choices and rights

Access: ask us what personal data we hold about you and how it has been used.
Correction: ask us to correct data that is wrong or incomplete.
Withdraw consent or delete your account: you can delete your account at any time in the app (Account, then Delete account), or by emailing us.
Notifications and cookies: turn off push notifications in your phone's settings, and block website cookies in your browser.

To make a request, email privacy@naise.app. We may need to confirm your identity first, and we aim to reply within 30 days. If you're not satisfied with our response, you can contact Singapore's Personal Data Protection Commission (PDPC).

10. Age

naise is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you believe someone under 18 has created an account, contact us and we will delete it.

11. Changes to this policy

We will update this policy when our service or the law changes. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.

12. Contact us

For questions about this policy or your personal data, contact our Data Protection Officer at privacy@naise.app. You can also write to [Company legal name] Pte. Ltd. (UEN [UEN]), [Registered address], Singapore [postal code].