Privacy Policy
Last Updated: April 28, 2026
1. Introduction
Homie AI ("we", "us", "our") is committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and its subsequent amendments. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have.
By using our services — including contract analysis, AI chat, tenant profile, WhatsApp integration, and property search — you acknowledge that your personal data will be handled as described in this Policy.
2. Information We Collect
We collect the following categories of personal data:
Account Information
Your name, email address, and profile picture, collected when you sign in via Google. Used to manage your account, enforce usage quotas, and provide a personalised experience.
Contract Documents
Rental contract files (PDF or images) you upload, the extracted text from those files, and the AI-generated analysis reports. If you enable Privacy Mode, identifiable information (NRIC, phone numbers, names) is anonymised locally in your browser before the text reaches our servers.
AI Chat Records
Messages you send in the AI Consultant feature and the full conversation history of each session.
Tenant Profile
Information you voluntarily provide about yourself, including nationality, visa or pass type, monthly budget, and property preferences. Collected only if you choose to complete your tenant profile.
WhatsApp Integration Data
If you connect a WhatsApp account to Homie AI: your WhatsApp account identifier, inbound and outbound messages processed by our AI agent, and any media files shared in those conversations. Collected only if you actively enable the WhatsApp integration.
Legal Consultation Requests
The content of consultation requests you submit through the platform, which are forwarded to our legal referral partners via email.
Usage Data
Records of features used, number of analyses performed, and quota consumption. Used to prevent abuse and maintain service quality.
3. How We Use Your Data
We use your personal data only for the purposes for which it was collected, in accordance with PDPA Section 18 (Purpose Limitation):
- To provide AI-powered analysis of your tenancy agreements.
- To power the AI Consultant chat feature.
- To match your tenant profile with relevant property listings (search feature).
- To operate the WhatsApp AI agent if you have enabled it.
- To forward legal consultation requests to our referral partners.
- To maintain account security and enforce usage quotas.
- To communicate service updates or changes to this Policy.
We do not sell your personal data to third parties. We do not use your contract content or chat messages to train AI models.
4. AI Processing Disclosure
In compliance with the PDPC Advisory Guidelines on Artificial Intelligence (March 2024)
Homie AI uses Google Gemini (operated by Google LLC, servers located in the United States) as its primary AI model to analyse the contract text you upload and to respond in the AI Consultant chat. Your contract text and chat messages are transmitted to Google's API over an encrypted connection for AI inference processing.
Google acts as a data intermediary in this process. Under our API agreement with Google, your data is not used to train Google's own models.
The data attributes that influence AI analysis outputs include: the text of your contract clauses, the language of the contract (Chinese or English), and the clause categories identified during analysis.
5. Third-Party Service Providers
We work with the following third-party service providers (data intermediaries under PDPA) to operate our platform:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Google LLC (Gemini API) | AI analysis & chat | Contract text, chat messages | United States |
| Google LLC (OAuth 2.0) | Sign-in authentication | Account information | United States |
| Supabase Inc. | File storage | Contract PDFs, WhatsApp media | United States |
| MongoDB Inc. (Atlas) | Database | All user data records | United States |
| Resend Inc. | Email notifications | Email address, notification content | United States |
6. Cross-Border Data Transfers
All third-party providers listed above are located outside Singapore, primarily in the United States. In accordance with PDPA Section 26, we have entered into Data Processing Agreements (DPAs) with each provider, requiring them to protect your personal data to a standard comparable to the PDPA.
By using Homie AI, you acknowledge that your personal data may be transferred to and processed in countries outside Singapore.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 90 days after deletion |
| Contract files (PDF / images) | 12 months from upload, then auto-deleted |
| Analysis reports | Duration of account, deleted on account closure |
| AI chat records | Duration of account, deleted on account closure |
| WhatsApp messages | 30-day rolling window, then auto-deleted |
| Legal consultation requests | 6 months, then auto-deleted |
| Tenant profile | Duration of account, deleted on account closure |
8. Your Rights
Under the PDPA, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right of Correction: Request correction of inaccurate or incomplete data.
- Right to Withdraw Consent: Withdraw consent for data processing at any time. Note that withdrawing consent may affect your ability to use certain features.
- Right to Deletion: Request deletion of your account and associated personal data.
To exercise any of these rights, email us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. Requests may be subject to identity verification. Data we are legally required to retain may not be deleted on request.
9. Data Protection Officer
In accordance with PDPA Section 11, we have designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the PDPA and handling data protection enquiries.
To contact our DPO, email: [email protected] with the subject line "Data Protection Enquiry".
10. Data Breach Notification
In the event of a data breach that is likely to cause significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of becoming aware of the breach, as required by PDPA Section 26D. We will also notify affected users as soon as practicable.
Given that contract uploads may contain NRIC numbers and financial information, any breach involving such data will be treated as a notifiable breach requiring immediate action.
11. Sensitive Data in Uploaded Contracts
Rental contracts you upload may contain sensitive personal data, including NRIC numbers, bank account details, passport numbers, and financial information. We recommend enabling Privacy Mode, which anonymises such identifiers locally in your browser before the document text reaches our servers.
Regardless of whether Privacy Mode is used, contract text transmitted to our servers is processed by Google Gemini API as described in Section 4, and stored securely as described in Section 7.
12. Contact Us
For any questions about this Privacy Policy, data protection matters, or to exercise your rights under the PDPA, contact us at:
Please include a clear description of your enquiry in the subject line (e.g. "Data Rights Request", "Data Protection Enquiry", or "Privacy Question").