PropPilot Privacy Policy

PropPilot (Chinese product name: 房领航) is an offline-first property management application developed and operated by the PropPilot developer, based in Malaysia (“PropPilot”, “we”, “us”, or “our”). This policy explains how information is handled when you use PropPilot on Android, iOS, or the web.

Privacy contact: hzmobile.app@gmail.com

1. Scope and your responsibilities

This policy applies to the PropPilot app, Google Drive backup and restore, subscriptions, exported reports, and communications you initiate through the app. Third-party services remain governed by their own terms.

PropPilot is a record-keeping tool for landlords and property managers. If you enter information about tenants, emergency contacts, property-management personnel, or another person, you are responsible for having an appropriate legal basis, providing required notices, obtaining required consent, limiting access, and complying with applicable tenancy and privacy laws.

2. Information handled by PropPilot

Information stored primarily on your device

Depending on the features you use, the app may store:

Property names, unit numbers, addresses, management contacts, phone numbers, management fees, payment account or QR information, parking and security details, bill account numbers, barcodes, remarks, inventory, photographs, and contract documents.
Tenant and lease details, including names, phone numbers, email addresses, emergency contacts, identification-document images, lease dates, rent, deposits, utility deposits, and occupancy details.
Rent and expense records, payment status and dates, receipts, bank slips, categories, amounts, and notes.
Language, currency, display and backup preferences, local subscription-entitlement status, and reports you create or export.

This information is normally processed locally and is not sent to a server controlled by PropPilot. It leaves the device only when you choose a feature requiring another service, such as Google Drive backup, store billing, sharing, email, SMS, WhatsApp, calling, or an operating-system backup.

Google Account and Google Drive

If you connect Google Drive, Google Sign-In may provide your name, email address, Google user identifier, and profile-picture URL. They are used to identify the connected account and authorize backup and restore. Connecting Google is optional, does not create a separate PropPilot account, and never gives PropPilot your Google password.

A manual or automatic backup may upload the PropPilot database and included attachments—such as property and tenant data, financial records, photos, receipts, identification images, bank slips, QR images, inventory photos, and contracts—to the hidden appDataFolder area of your own Google Drive. Free and paid plans may back up different scopes as described in the app.

The backup uses your own Google storage.
PropPilot requests only drive.appdata access and cannot browse your ordinary Drive files.
The developer does not operate a backup server and has no routine access to the content in your private Drive app-data area.
Google stores and processes the data under Google’s own terms and privacy policy.

Automatic backup timing depends on the operating system, network, battery settings, Google services, account permissions, and available storage. A backup request does not guarantee that every item was uploaded; maintain an independent copy of important records.

Google API Limited Use disclosure: PropPilot’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only for the user-facing connected-account, backup, and restore features you request. It is not used for advertising, creditworthiness, lending, surveillance, or advertising profiles.

Subscriptions and purchases

Google Play or Apple’s App Store processes subscriptions. PropPilot may receive product and transaction identifiers or tokens, purchase and subscription status, renewal or expiry information, and limited diagnostic responses needed to provide, restore, and manage access. PropPilot does not receive or store complete payment-card or bank-account details.

Camera, photos, barcode scanning, and files

With permission, the app can use the camera to scan barcodes or capture selected property, receipt, bank-slip, inventory, or identification images; access photographs you select; and open documents you choose, including PDF contracts. PropPilot does not continuously access these sources. Barcode recognition is intended to occur on the device. Selected content stays local unless you back it up, export it, or share it.

Communications and sharing

At your request, PropPilot can prepare a call, SMS, WhatsApp message, email, file save, print action, or share sheet. The chosen service then handles the recipient and content under its own privacy terms. PropPilot does not send communications automatically and does not read your call history, messages, contacts, or email inbox.

Support emails may include your email address and information you choose to provide. Do not send unnecessary tenant IDs or other sensitive documents to support.

Device backups and data not intentionally collected

Your platform provider may include app data in Android, iCloud, computer, migration, or similar backups according to your settings. Those services are controlled by the platform provider. PropPilot does not intentionally collect location, address-book contacts, calendar events, audio, browsing history, or advertising identifiers. It currently contains no advertising, cross-app tracking, or developer-operated analytics or crash-reporting service.

3. Purposes and legal bases

Information is processed only as reasonably necessary to provide property, tenant, finance, inventory, document, reporting, subscription, connected-account, backup, restore, communication, support, security, fraud-prevention, and legal-compliance functions.

Where a legal basis is required, processing may rely on performance of a service you requested, consent, compliance with legal obligations, or legitimate interests in security, support, and fraud prevention. Optional permissions and Google access may be withdrawn, although the related feature may stop working.

4. Disclosure

We do not sell or rent personal information and do not share it for targeted or cross-context behavioural advertising. Information may be made available only to:

Google for Sign-In, Drive, Android platform backup, and Google Play Billing;
Apple for App Store billing, iCloud/device backup, and Apple platform services;
a communications, file, print, or sharing service you deliberately select;
technical providers that must process limited information to deliver operating-system, network, device, or distribution services;
authorities or relevant parties where reasonably necessary for law, valid legal process, safety, fraud investigation, or legal claims; or
a successor responsible for PropPilot following a merger, acquisition, restructuring, or sale, subject to notice and appropriate safeguards.

5. Retention and deletion

Local data remains until you delete it, clear app storage, or uninstall. Copies may remain in device backups until those backups expire or are deleted.
Google Drive backups remain until overwritten or deleted. Disconnecting Google stops future access but may not delete an existing backup. You can revoke access in Google Account settings and delete hidden app data through Google Drive’s Manage apps controls where available.
Store transactions are retained by Google or Apple under their legal, tax, anti-fraud, and account requirements. PropPilot keeps only local entitlement information needed to operate.
Support communications may be kept as reasonably necessary to resolve the request, maintain support records, prevent abuse, and comply with law, then deleted or anonymised as appropriate.

PropPilot does not create a separate server-side PropPilot account. Signing out does not delete local records, store transactions, or existing device/cloud backups.

6. Your choices and rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, obtain portability, withdraw consent, and complain to a data-protection authority, subject to legal exceptions.

View, correct, export, or delete records in PropPilot.
Remove camera, photo, or file permissions in device settings.
Sign out, disable automatic backup, revoke Google access, or delete hidden Drive app data.
Manage or cancel subscriptions through Google Play or Apple’s App Store.
Delete local data by deleting records, clearing storage, or uninstalling, subject to backup copies.

Email hzmobile.app@gmail.com with the subject “PropPilot Privacy Request” for information we actually hold. We may verify the request. Because we cannot access data stored only on your device or private Drive area, we may instead give you deletion instructions. PropPilot does not use personal information for automated decisions producing legal or similarly significant effects.

7. Security

Network requests to Google and app-store services use encrypted HTTPS/TLS connections. Local records rely on your device, operating-system, passcode, biometric, Google Account, and Apple Account security. No storage or transmission is completely secure. Protect your devices and accounts, limit sensitive data, keep independent backups, and remove access from lost or shared devices. Google Drive backups are not represented as end-to-end encrypted with a key known only to you.

8. International processing

Google, Apple, communication providers, and services you select may process information outside your country under their privacy policies and applicable safeguards. Support and privacy requests may be processed in Malaysia and through the email or infrastructure providers used to respond.

9. Children

PropPilot is intended for adults managing property and is not directed to children. A person under 18, or the minimum legal age locally, should not use it without a parent or guardian. Do not enter a child’s information without a lawful reason and all required authority and consent.

10. Third-party notices

11. Updates

We may update this policy for changes to features, practices, providers, or law. We will revise the date and provide reasonably prominent notice of material changes where required. Consent will be requested where required by law.

12. Contact

PropPilot Privacy
Malaysia
hzmobile.app@gmail.com

If we cannot resolve a concern, you may have the right to contact the privacy or data-protection authority in your jurisdiction.