Legal

Privacy Policy

This policy explains what data RentTrack collects, why, who we share it with, and how you can delete it. We aim to keep it plain-spoken.

Effective date: 18 May 2026 Last updated: 18 May 2026

1. Who we are

RentTrack is a mobile app for property owners (landlords) to track rental income, expenses, and tenancy details across multiple rental properties. The app is built and operated by ThriveTech (Malaysia).

Throughout this policy, "we", "us", and "our" mean ThriveTech as the operator of RentTrack. "You" means the landlord using the app.

2. What data we collect

2.1 Account information

When you sign in with Google or Apple, we receive a verified email address and a display name from the identity provider. We store these in our backend so we can identify you across devices and across sign-ins.

If you choose Apple's "Hide My Email" option, the email address we receive will be an Apple relay address ending in @privaterelay.appleid.com. We treat it exactly the same as a normal email.

2.2 Data you enter into the app

• Properties — name, address, monthly rental amount.
• Tenant name — when you record one against a property.
• Tenancy dates — start and (optional) end date.
• Rental payments — monthly status (paid / unpaid), amount, date paid.
• Expenses — amount, date, category (e.g. Maintenance, Cukai Taksiran, Repair, Insurance, Loan), and any notes.
• Reminder preferences — your toggles and lead-time settings, stored on-device only.
• Display preferences — currency and date format, stored on-device only.

This data is private to your account. Other RentTrack users cannot see any of it.

2.3 Technical data automatically collected

Google Firebase, which we use for authentication, automatically collects a small amount of technical information needed to operate the service. This typically includes a Firebase Installation ID, the device's operating system version, and the app version. We do not use this for advertising or for tracking you across other apps.

2.4 What we do not collect

• We do not collect photos, files, or media from your device.
• We do not access your camera.
• We do not collect your precise or approximate location.
• We do not collect contacts, calendar entries, or messages.
• We do not use third-party advertising SDKs.
• We do not sell your data to anyone, under any circumstances.

2.5 Features we may add in the future

We may add the following capabilities later. If we do, we will update this policy before the feature ships, and where required we will request your permission at the moment of use:

• Push notifications. We may send rent-due and tenancy-expiry reminders through Firebase Cloud Messaging. This would require storing a per-device push token associated with your account.
• Usage analytics. We may add Google Analytics for Firebase to understand which screens are used most. If we do, we will disclose what events we record.
• Photo attachments. Optional photo uploads for receipts or property images (you would explicitly grant photo access).
• Location. Optional location features (e.g. nearby properties), with explicit permission at point of use.

3. Why we collect this data

• To run the app. Without your email + display name we cannot give you an account. Without the property and payment data you enter, the app cannot show you a dashboard or report.
• To keep your data secure. Authentication and session management require us to receive and verify identity tokens from Google and Apple.
• To support you if you write to us about an issue.

4. Who we share it with

We share data only with the third parties that operate the infrastructure RentTrack runs on:

• Google — when you sign in with Google, your email + name are received from Google's identity service. Subject to Google's privacy policy.
• Apple — when you sign in with Apple, your email (real or relay) + optional name are received from Apple's identity service. Subject to Apple's privacy policy.
• Firebase / Google Cloud — provides authentication token verification and (in future) push notification delivery. Subject to Firebase's privacy policy.
• Cloudflare — routes API traffic between the app and our server (CDN + DNS). May see request metadata (IP, user agent). Subject to Cloudflare's privacy policy.

We do not share your data with advertisers, data brokers, or analytics services beyond what is listed above.

5. Where we store your data

Your account, properties, payments, and expenses are stored in a Microsoft SQL Server database operated by us. The server is hosted in Malaysia.

Some technical information processed by Firebase and Cloudflare may be transmitted to and processed on servers outside Malaysia (typically the United States, Singapore, or other Google/Cloudflare edge regions). Those providers contractually commit to industry standard protections.

6. How long we keep your data

We keep your data for as long as you have an active RentTrack account. If you delete your account through the app, we delete your account record, your properties, payments, expenses, and any reminder settings. Backups may retain a copy for up to 30 days before being rotated out.

7. Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and equivalent rights in other jurisdictions, you have the right to:

• Access the personal data we hold about you — you can see all of it in the app at any time.
• Correct the data — you can edit your properties, tenant names, payments, and expenses directly in the app.
• Delete your account and all associated data — see section 8.
• Withdraw consent at any time by deleting your account.
• Make a complaint to us or to the Personal Data Protection Department of Malaysia.

8. How to delete your account

You can delete your RentTrack account at any time:

1. Open the RentTrack app.
2. Go to the More tab.
3. Tap your profile, then choose Delete account.
4. Confirm.

Deletion removes your account, properties, rental payment records, expenses, reminder preferences, and any saved sign-in tokens. The operation is immediate and cannot be undone.

If you cannot access the app for any reason and want your account deleted, email us at howardoi8888@gmail.com from the email associated with your account, asking for deletion. We will action it within 30 days.

9. Children

RentTrack is designed for adult property owners and is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, please email us and we will delete it.

10. Security

We protect your data with industry-standard measures:

• All network traffic between the app and our server uses HTTPS (TLS).
• Sign-in is via Google or Apple — we never see or store your passwords for those accounts.
• On your device, session tokens are kept in the platform's secure storage (iOS Keychain / Android Encrypted Shared Preferences).

No system is perfectly secure. If we ever become aware of a breach affecting your data, we will notify you and the relevant authority as required by law.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If the change is material — for example, adding a new category of data we collect — we will notify you in the app before the change takes effect.

12. Contact us

Questions, requests, or complaints about this policy or your data:

ThriveTech (Malaysia)
Email: howardoi8888@gmail.com