Privacy Policy

01Introduction

Welcome to HABY PTE. LTD. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information when you visit our website or use our internal mobile application HABY Projects. By accessing our services, you agree to the terms of this Privacy Policy.

"We", "us", and "our" refer to HABY PTE. LTD. (UEN 201632816G), 804B Keat Hong Close, #12-36, Keat Hong Pride, Singapore 682804. "You" refers to the user of our services. HABY Projects is an internal workspace used by HABY employees and authorised collaborators; accounts are created and provisioned by an administrator and the application is not open to public self-registration.

02Data we collect

We collect only the minimum information needed to operate the website and the HABY Projects mobile application.

Website — when you visit haby-pte.com, our hosting provider may log standard technical information such as IP address, browser user agent, and the pages you request. If you contact us by email using the address published in section 13, we receive whatever you choose to send us (typically your name and email address).

HABY Projects mobile application — when an administrator creates your account and you sign in to the application, we collect and store only the following:

• Email address — used as your sign-in identifier and to contact you about workspace matters.
• Display name and avatar initials — used so teammates can identify you in tasks, comments, and the team roster.
• Workspace role — Admin, Project Manager, Developer, QA Tester, or similar, used to determine what features and content you can access.
• Project and task content you author — project titles, descriptions, tags, deadlines, task status, comments, and activity log entries you create inside the workspace.
• Authentication credentials — your password is never stored by us in plain text; authentication is handled by Google Firebase Authentication, which stores a one-way salted hash of your password.

What we do NOT collect from the mobile application: location, contacts, calendar, photos, camera, microphone, files outside the app, SMS, phone state, advertising identifier, web browsing history, or any data from other apps on your device. The application does not display advertising and does not embed analytics SDKs that track individual user behaviour.

03How we use data

The data we collect is used strictly for the following purposes:

• To authenticate authorised team members signing in to the HABY Projects workspace.
• To display project assignments, task assignments, deadlines, and comments to the relevant teammates.
• To record an activity log inside the workspace so the team has transparency over who created or modified what.
• To respond to your questions and support requests when you contact us by email.
• To comply with legal obligations to which HABY PTE. LTD. is subject.

We do not sell or rent your personal data. We do not use it to build advertising profiles. We do not share it with marketing partners.

04HABY Projects mobile application

HABY Projects is the internal Android application of HABY PTE. LTD., distributed through Google Play and used by HABY employees and authorised collaborators to manage projects and tasks across our software development and consumer electronics teams. The application has four primary roles: Admin, Project Manager, Developer, and QA Tester.

• Android permissions requested — the application declares only two permissions in its manifest: INTERNET and ACCESS_NETWORK_STATE. Both are install-time permissions used solely to communicate with Google Firebase servers and to detect whether the device is online. The application does not request, and will never receive, any runtime permission — no camera, no microphone, no location, no Bluetooth, no contacts, no calendar, no storage, no photos, no SMS, and no phone state.
• Authentication — sign-in is handled by Google Firebase Authentication using email and password only. The application does not offer or use Google Sign-In, Apple Sign-In, phone-number authentication, or any social provider.
• Data storage — workspace data is stored in Google Cloud Firestore in the asia-southeast1 (Singapore) region. Data in transit is protected by TLS; data at rest is encrypted by the cloud provider.
• Push notifications — the application does not implement push notifications. No Firebase Cloud Messaging tokens are generated or stored for end users.
• Analytics & crash reporting — the application does not embed third-party analytics or crash-reporting SDKs (no Firebase Analytics, no Crashlytics, no Sentry, no Mixpanel, no Amplitude). We do not track individual user behaviour.
• Advertising — the application does not display advertising of any kind and does not collect, derive, or transmit the Android Advertising ID.

05Data storage & security

HABY Projects workspace data and authentication records are stored on Google Cloud infrastructure: Firebase Authentication for sign-in identities and Cloud Firestore for project, task, comment, and activity-log content, both provisioned in the asia-southeast1 (Singapore) region. Data is encrypted in transit (TLS 1.2+) and at rest by Google Cloud's default disk encryption.

Access to the production Firebase project is restricted to a small number of administrators using individual Google accounts protected by two-factor authentication. Firestore security rules enforce role-based access so that, for example, a Developer cannot read or modify another user's profile or another workspace's data.

While we use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is one hundred percent secure, and we cannot guarantee absolute security.

06Your rights

Depending on your jurisdiction (Singapore PDPA, GDPR, or comparable frameworks), you may have the following rights with respect to your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing — request limitation of how we process your data.
• Right to data portability — request transfer of the data we have collected to another organisation or to you directly.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint — with the Personal Data Protection Commission of Singapore or your local data protection authority.

To exercise any of these rights, please contact us using the details in section 13. We will respond within thirty (30) days.

07Cookies & tracking

Our website uses cookies and similar tracking technologies to operate the service and to remember your preferences. Cookies are small files placed on your device that may include an anonymous unique identifier. We use:

• Strictly necessary cookies — required for the website to function (e.g. session and security cookies).
• Preference cookies — remember your choices such as language and theme.
• Analytics cookies — help us understand aggregated usage patterns; you can opt out at any time.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, you may not be able to use some portions of our service.

08Third-party services

The HABY Projects mobile application relies on a single third-party processor:

• Google LLC (Firebase) — Firebase Authentication and Cloud Firestore, operated by Google Cloud in the asia-southeast1 (Singapore) region. Firebase processes authentication credentials and stores workspace content on our behalf. See Google's privacy practices at policies.google.com/privacy and Firebase data handling at firebase.google.com/support/privacy.

The application does not integrate with payment processors, advertising networks, analytics SDKs (including Firebase Analytics and Crashlytics), social-login providers, or any other third party. Our website may use a basic web analytics service to count aggregate page views; it does not identify individual users.

Google, acting as our data processor, has access to your personal data only to provide the Firebase services on our behalf and is bound by Google Cloud's data-processing terms.

09Data retention

Your account in HABY Projects is retained for as long as your account is active. When an administrator removes your account (or you request removal from your administrator), your personal profile data — email, display name, avatar initials, role, and authentication identity — is erased or anonymised within thirty (30) days.

Project, task, comment, and activity-log entries that you authored remain inside the workspace so that the team retains a coherent history of the work; in those records your name is replaced with a placeholder indicating that the original author has been removed.

We may retain certain records for longer where required by Singapore law (for example, statutory corporate or tax record-keeping obligations).

10Children's privacy

Our services are not directed to anyone under the age of thirteen (13). We do not knowingly collect personally identifiable information from anyone under the age of thirteen. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to remove that information from our servers.

11International transfers

HABY PTE. LTD. is based in Singapore, and the HABY Projects workspace is primarily provisioned in the Google Cloud asia-southeast1 (Singapore) region. Google's authentication infrastructure and some operational metadata may be processed in other regions where Google operates data centres. Where personal data is transferred outside Singapore, we rely on Google Cloud's contractual data-processing terms and standard contractual safeguards, in line with the PDPA and applicable cross-border transfer requirements.

12Policy updates

We may update this Privacy Policy from time to time. When we do, we will post the new Privacy Policy on this page and update the "Effective Date" at the top. For material changes, we will provide additional notice (such as an in-app banner or email). You are advised to review this Privacy Policy periodically. Continued use of our services after a change becomes effective constitutes your acceptance of the revised Policy.

13Contact

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to lodge a complaint, please contact us: