Privacy Policy
This Privacy Policy explains how Novabranch Pte. Ltd. ("we", "us", or "our") collects, uses, and protects your personal information when you use the NovaUnit mobile application and associated web services (collectively, the "Service").
By registering for or using NovaUnit, you agree to the collection and use of information as described in this policy.
1. Who We Are
NovaUnit is developed and operated by Novabranch Pte. Ltd., a company incorporated in Singapore. If you have any questions about this policy, you may contact us at:
Email: privacy@novabranch.co
Website: novabranch.co
2. Information We Collect
We collect the following personal information when you register and use NovaUnit:
- Account information: Full name, email address, phone number (optional), unit number, and building name
- Service request content: Descriptions, categories, and any photos or videos you attach to a service request
- Facility booking data: Facility name, booking date and time slot, fees and deposit amounts, and booking status
- Community noticeboard posts: Post content, category, photos, contact number (if provided), and unit identifier. Posts are visible to all verified residents of your building.
- Announcement read status: We record which residents have read each building announcement. This information is visible to your building's management team.
- Communications: Messages and follow-up comments exchanged between you and your building management team within the app
- Device information: Firebase Cloud Messaging (FCM) token used to deliver push notifications to your device
- Crash and diagnostic data: If the app crashes or encounters an error, Firebase Crashlytics collects crash reports including device model, OS version, app version, and the sequence of actions leading to the crash. This data does not include personal information beyond an anonymised user identifier.
- Usage data: App interactions collected by Firebase Analytics, including screens viewed and features used
We do not collect payment information, government identification numbers, or sensitive personal data as defined under the Personal Data Protection Act (PDPA) of Singapore.
3. How We Use Your Information
We use your personal information solely to provide and improve the NovaUnit Service:
- To create and manage your resident account
- To process and track service requests submitted by you
- To facilitate facility bookings and manage booking availability
- To display community noticeboard posts to verified residents of your building
- To facilitate communication between you and your building's management team
- To send push notifications about updates to your service requests, bookings, and building announcements
- To verify your identity and unit during registration
- To diagnose crashes and technical errors through Firebase Crashlytics
- To improve app performance and user experience through aggregated, anonymised analytics
We do not use your personal information for advertising, profiling, or any purpose unrelated to the operation of the Service.
4. Data Sharing and Disclosure
Your personal data is shared only as necessary to operate the Service:
- Your building's management team: Your name, unit number, phone number, service request content, booking details, and announcement read status are visible to the authorised management agent for your building. They use this information solely to respond to and manage your requests.
- Other verified residents (community posts only): Content you post on the community noticeboard — including post text, photos, and any contact number you choose to provide — is visible to all verified residents of your building.
- Firebase (Google LLC): We use Firebase for authentication, database storage, file storage, push notifications, analytics, and crash reporting (Crashlytics). Firebase processes data in accordance with Google's Privacy Policy.
- No other third parties: We do not sell, rent, or share your personal data with any other third parties for commercial purposes.
We may disclose your information if required to do so by law or in response to a valid legal request from a competent authority.
5. Data Isolation Between Buildings
NovaUnit is a multi-tenant platform. Each building operates as a separate, isolated environment. Residents of one building cannot access the data of residents or management teams of any other building. Management agents can only access data belonging to the building(s) they are authorised to manage.
6. Data Retention
We retain your personal information for as long as your account remains active or as necessary to provide the Service. You may delete your account at any time from the Profile tab in the app — your personal data will be removed from our systems within 30 days of deletion, except where retention is required by law. Uploaded photos and videos attached to service requests and community posts are deleted upon account deletion.
7. Your Rights
Under the Personal Data Protection Act (PDPA) of Singapore, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete personal data
- Withdraw consent to the use of your personal data at any time (subject to legal and contractual restrictions)
- Request deletion of your personal data
To exercise any of these rights, please contact us at privacy@novabranch.co. We will respond within 30 days.
8. Push Notifications
NovaUnit sends push notifications to your device to inform you of updates to service requests and building announcements. You may disable push notifications at any time through your device's notification settings. Disabling notifications does not affect your ability to use the app.
9. Children's Privacy
NovaUnit is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Security
We implement industry-standard security measures to protect your personal data, including:
- Encrypted data transmission (HTTPS/TLS)
- Firebase Security Rules restricting data access to authorised users only
- Role-based access control separating resident data from management data
- Firebase App Check to prevent unauthorised API access
While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
11. Third-Party Services
NovaUnit uses the following third-party services to operate:
- Firebase (Google LLC) — Authentication, Firestore database, Cloud Storage, Cloud Functions, Cloud Messaging, Analytics, and Crashlytics. Firebase Privacy Policy →
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will notify you through the app or by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Novabranch Pte. Ltd.
Singapore
privacy@novabranch.co
novabranch.co