← Back

Privacy Policy

Last updated: 8 November 2026

This Privacy Policy explains how COMEQUEST TECHNOLOGIES PTE. LTD. ("ComeQuest", "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit comequest.co or use our iOS and Android applications (together, the "Service"). It is designed to comply with the Singapore Personal Data Protection Act 2012 ("PDPA").

1. Personal data we collect

  • Account information: name, email address, profile photo, and either a hashed password or an identifier from Sign in with Apple or Google. Passwords are never stored in readable form.
  • Phone number: the mobile number you verify by SMS code. It is used for account verification and, for property agents, to confirm your identity against the Council for Estate Agencies (CEA) public register. It is never shown to other users. A phone number cannot be used to sign in.
  • Singpass identity: if you verify with Singpass, we receive your legal name and NRIC/FIN number. We store your verified name. We never store your NRIC/FIN number itself — only a one-way, irreversible fingerprint of it, used to detect one person operating several accounts.
  • Property agent and provider information: CEA registration number and the agency the CEA register lists for you, business details, credentials, work email (if you verify one), a short self-introduction video and image, and transaction documents you upload to confirm a completed deal.
  • Requests and service content: the requests you post (including postal code, address and property details), photos and videos you upload, quotes, messages, reviews and ratings, and any reports or blocks you make.
  • Device and security information: device model, operating system, app version, a random identifier the app creates for your device, push-notification tokens, and, when you sign in or change sign-in details, your IP address and the type of client used. We use this to keep your account secure and to alert you to sign-ins from new devices.
  • Crash and diagnostic data: technical details of app crashes and performance, with email addresses, phone numbers and account identifiers removed or replaced by a non-reversible code.
  • Communications: emails you send us, information you include in support requests, and feedback you send from the app — your message, the contact email you choose to add, and any one screenshot you choose to attach. Screenshots are re-encoded on your device before sending, which removes photo metadata such as location.

The apps do not access your device's location, contacts, calendar or microphone. Location information is only what you type, such as a postal code. Camera and photo-library access are used only when you choose to add a photo or video. Face ID, Touch ID and fingerprint unlock stay on your device; we never receive biometric data. The Service does not process payments.

2. How we use personal data

  • To create and manage your account and provide the Service.
  • To match requestors with providers and facilitate communication between them.
  • To verify identities and credentials — Singpass, CEA registration and licences — so that users can trust who they are dealing with.
  • To keep accounts secure: sign-in and change alerts, detecting account takeover, and restoring a compromised account.
  • To keep the Service safe: reviewing reports, screening uploaded photos, videos and links for harmful content, and preventing fraud, spam and abuse.
  • To send service notices, including push notifications and emails about your requests, quotes and account, and, with your consent, product updates.
  • To improve the Service and diagnose problems.
  • To comply with legal obligations.

3. Sharing of personal data

We do not sell your personal data. We share it only as follows:

  • Between users: the information needed to facilitate a request. Providers see a requestor's name, profile photo, verification badges, and the request details including its area or postal code. Requestors see a provider's public profile — name, agency, credentials, verification status, ratings and introduction video. Messages and photos are visible to the parties in the conversation. Phone numbers are never shown to other users.
  • Service providers who process data on our behalf under confidentiality and data-protection obligations: Supabase (database, storage and hosting), Resend (email), Twilio (SMS verification codes), Apple and Google (sign-in, push notifications and, on Android, maps), hCaptcha (bot protection at sign-in), Sentry (crash reporting and in-app feedback), Anthropic (automated screening of uploaded media and reading of uploaded transaction documents), Google Safe Browsing (checking links), and OneMap (looking up Singapore addresses).
  • Verification sources: Singpass for identity, and the CEA public register, which we query with the registration number and verified mobile number that you give us.
  • Legal and safety: when required by applicable law, subpoena, or to protect the safety, rights, or property of users or the public.

4. International data transfers

Our database is hosted in Singapore. Some service providers, such as our email, crash-reporting and screening providers, may process personal data outside Singapore. When we transfer personal data outside Singapore, we take reasonable steps to ensure the receiving party provides a standard of protection comparable to that required under the PDPA.

5. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service. When you delete your account in the app, we delete your account and the personal data associated with it, with these exceptions:

  • Records of completed deals are kept where we are required to retain them; accounts with completed deals are closed through our support team.
  • The one-way fingerprint of your NRIC/FIN number is kept, without any link to your deleted account, so that we can detect a person who returns with a new account after deletion or a ban.
  • Records of actions taken by our staff are kept for accountability.
  • Reviews you wrote stay on the profiles of the agents you reviewed, with your name and any photos removed — they are shown as written by a “Former user” — so an agent’s rating does not change when a client leaves. Reviews others wrote about you are deleted.

Photos and videos attached to requests are removed after a request expires or is cancelled. We may retain other data for longer where required for legal, accounting, or dispute-resolution purposes.

6. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, alerts to you when your sign-in details change, and two-factor authentication for our staff. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Cookies and tracking

The comequest.co website does not use tracking cookies, advertising identifiers, or third-party analytics cookies. Essential technical cookies may be set by our hosting provider to deliver the site reliably. The ComeQuest apps do not track you across other companies' apps or websites, do not use advertising identifiers, and contain no advertising.

8. Your rights under the PDPA

Subject to applicable law, you may:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete personal data.
  • Withdraw any consent you have previously provided.
  • Delete your account at any time from your profile in the app.

To exercise these rights, email support@comequest.co.

9. Children

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided personal data to us, please contact us and we will take steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be notified through the Service or by email.

11. Contact us

For any privacy-related questions or to contact our Data Protection Officer, write to:

COMEQUEST TECHNOLOGIES PTE. LTD.
60 Paya Lebar Road, #06-28, Paya Lebar Square
Singapore 409051
Phone: +65 8065 0626
Email: support@comequest.co