Entrust — Privacy Policy

Last updated: 11 June 2026 · Effective from launch

Entrust ("the app", "we", "our", "us") is operated by Atreides Digital LLP (UEN: T26LL0643H), a limited liability partnership registered in Singapore with its registered office at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, your rights, and how to contact us. It is written to comply with Singapore's Personal Data Protection Act 2012 (PDPA) and applicable international data protection laws where relevant.

Quick summary: We collect only what is needed to make Entrust work. We never sell your data. We use industry-standard security. You can access, correct, or delete your data at any time by emailing admin@atreides-digital.com.

1. Who We Are

Atreides Digital LLP is the data controller responsible for your personal data under this Policy. You can contact us at admin@atreides-digital.com for any data protection matter, general enquiry, or to exercise your rights under this Policy or applicable law.

Data Protection Officer

Our Data Protection Officer (DPO) can be contacted at admin@atreides-digital.com. The DPO is responsible for ensuring our compliance with the PDPA and handling all data protection enquiries, requests, and complaints. We aim to respond to all DPO requests within 30 days, as required by the PDPA.

2. Data We Collect

We collect only the personal data necessary to operate Entrust. The data we collect falls into the following categories:

2.1 Account and identification data

Phone number — for account creation and login via one-time passcode (OTP).
Name and role (employer or helper) — provided during onboarding to identify household members.
Email address (optional) — for account recovery and important notifications.
Profile photo (optional) — uploaded by you to personalise your account.

2.2 Helper and employment data

If you are an employer using Entrust to manage compliance and tasks involving a domestic helper, you may choose to enter the following information about your helper. You are responsible for ensuring you have obtained your helper's consent before entering her personal data into the app.

Helper's name, nationality, date of birth, and contact details
Work Permit number and expiry date
Passport number and expiry date
Medical insurance policy details and bond information
Employment contract details, including salary amount and rest day arrangements
Photo of the helper (optional, uploaded by employer)
Salary payment records and rest day logs

Important on NRIC and identification numbers: The PDPC requires special care for NRIC, FIN, and passport numbers. We do not require you to enter these unless strictly necessary for compliance tracking. Where you choose to enter them, they are encrypted at rest and access is restricted. We do not use NRIC, FIN, or passport numbers for authentication or as passwords.

2.3 Household data

Tasks, schedules, recurring chores, and household routines you create within the app
Task completion status, including timestamps and any optional completion photos
Household notes, rules, and preferences entered by either party
Notes about other household members (such as children, elderly relatives, or pets) only to the extent you choose to include them in task or schedule descriptions

2.4 Technical and device data

Device push token — used to send task reminders and notifications.
Device type, operating system, and app version — for crash reporting and improving app performance.
IP address — collected automatically by our hosting infrastructure for security purposes (detecting unauthorised access attempts).
Anonymised usage data — feature engagement and aggregated usage patterns to improve the app.

2.5 What we do NOT collect

Payment or credit card data. All payments are processed exclusively by Apple App Store or Google Play. We never see, store, or process your payment card details. For billing-related concerns, please refer to Apple's privacy policy or Google's privacy policy.
Location or GPS data. Entrust does not track your location or your helper's location.
Microphone, camera, or contact list data, except where you actively choose to upload a photo to the app.

3. How We Use Your Data

We use your personal data only for the following purposes:

To authenticate your identity via SMS one-time passcode
To create and maintain your account, and to enable you to invite household members
To display tasks, household rules, and compliance reminders to authorised members of your household
To send push notifications for task reminders and compliance deadlines (work permit expiry, levy due dates, rest day logs)
To respond to your enquiries, support requests, and feedback
To detect, prevent, and respond to fraud, security incidents, and abuse
To improve the app through analysis of anonymised usage patterns
To comply with our legal obligations under Singapore law

We do not sell, rent, or share your personal data with third parties for advertising, marketing, or any commercial purpose unrelated to operating the app.

4. Consent

By creating an account and using Entrust, you consent to the collection, use, and disclosure of your personal data as described in this Policy.

You may withdraw your consent at any time by deleting your account or by emailing admin@atreides-digital.com. Withdrawal of consent may mean we are unable to continue providing the app to you. Where you withdraw consent, we will respond within a reasonable time and inform you of the consequences of withdrawal.

5. Children's Data

Entrust is designed for adult employers and adult domestic helpers. We do not knowingly collect personal data directly from children under 18.

However, employers may include information about children in the household (such as a child's name, school schedule, or care routines) within task descriptions, schedules, or household notes. If you enter information about a child, you confirm that you are the child's parent or legal guardian, or that you have obtained appropriate consent. We treat this information with the higher standard of protection required for children's data under PDPC's Advisory Guidelines on the PDPA for Children's Personal Data in the Digital Environment.

If we discover that we have collected personal data from a child under 13 without appropriate parental consent, we will delete it promptly. Contact admin@atreides-digital.com if you believe a child's data has been entered without consent.

6. Data Storage, Location, and Security

Your data is stored on Supabase, which uses Amazon Web Services (AWS) infrastructure. We configure our Supabase project to use the Singapore region (ap-southeast-1) where technically possible. Some processing may occur on AWS infrastructure outside Singapore.

Where personal data is processed outside Singapore, we ensure that overseas recipients are contractually bound to provide a standard of protection comparable to the PDPA, in accordance with Section 26 of the PDPA and the Personal Data Protection Regulations 2021.

Security measures we use

All data is transmitted over HTTPS (TLS 1.2 or higher)
Sensitive data such as passport, NRIC, and Work Permit numbers are encrypted at rest
Row-level security is enforced on our database — household data is accessible only to authorised members of that household
We use one-time passcodes (OTP) for authentication. We do not store passwords.
Access to backend systems is restricted to authorised partners of Atreides Digital LLP only
We follow PDPC's recommended practices for ICT systems

7. Third-Party Services

We use the following third-party service providers (data intermediaries) to operate the app. Each provider is contractually obligated to protect your data and use it only for the purposes we authorise:

Supabase — database and authentication (privacy policy)
Twilio — SMS delivery for one-time login codes (privacy policy)
Expo — push notification delivery (privacy policy)
Apple App Store / Google Play — payment processing, app distribution, and subscription management. We never see your payment details. Please refer to Apple's privacy policy and Google's privacy policy for billing.

8. Data Retention

We retain your personal data only for as long as is reasonably necessary to provide the app and to comply with our legal obligations.

Active accounts: Data is retained for as long as your account is active.
Account deletion: Upon deletion, personal data is permanently removed from our active systems within 30 days. Backup copies are purged within a further 60 days.
Legal retention: Some data (such as financial transaction records and tax-relevant data) may be retained for up to 5 years where Singapore law requires.
Anonymised data: We may retain anonymised, aggregated data (which cannot identify you) indefinitely for analytical and product improvement purposes.

9. Your Rights

Under the PDPA, you have the right to:

Access — request a copy of the personal data we hold about you
Correction — request that we correct any inaccurate or incomplete personal data
Withdrawal of consent — withdraw consent to the use of your personal data (subject to legal limitations and the consequences of withdrawal)
Deletion — request that we delete your personal data, subject to retention required by law
Portability — where reasonably possible, receive your data in a structured, commonly used electronic format

To exercise any of these rights, email admin@atreides-digital.com. We will respond within 30 days, as required by the PDPA. A reasonable fee may apply to data access requests, in line with PDPC guidelines.

10. Data Breach Notification

In the event of a data breach that is likely to result in significant harm to affected individuals, or that affects 500 or more individuals, we will:

Notify the Personal Data Protection Commission (PDPC) within 3 calendar days of becoming aware of the breach
Notify affected individuals within 3 business days where reasonable
Take immediate steps to contain the breach and prevent further harm
Where the breach affects a child's data, we will proactively notify the child's parent or guardian where their contact details are available

11. Limitation of Liability

Entrust provides reminders, organisational tools, and information features as a convenience only. The app does not constitute legal, compliance, financial, or professional advice. Users remain solely responsible for ensuring compliance with all applicable laws and regulations, including Ministry of Manpower (MOM) requirements concerning the employment of domestic helpers.

We do not guarantee the accuracy, completeness, or timeliness of any reminder, calculation, or information provided by the app. You should independently verify all compliance dates and deadlines with the relevant Singapore authorities.

To the maximum extent permitted by law, Atreides Digital LLP shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the app — including without limitation: disputes between employers and helpers, missed compliance deadlines, fines or penalties imposed by any government authority, loss of data, or loss of business. Our total aggregate liability arising from or in connection with the app shall not exceed the total amount you have paid to us in the 12 months immediately preceding the claim.

Nothing in this Policy excludes liability that cannot be excluded under Singapore law.

12. International Users

Entrust is designed primarily for users in Singapore. If you access the app from outside Singapore, you do so on your own initiative and are responsible for compliance with local laws.

Where you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under your local data protection laws (such as GDPR, UK GDPR, or CCPA). We will make reasonable efforts to honour valid requests under those laws to the extent they apply, but our primary regulatory framework is Singapore's PDPA. Contact admin@atreides-digital.com to make any such request.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in law, our practices, or app features. Material changes will be notified through the app or by email at least 14 days before they take effect. Continued use of the app after the effective date constitutes acceptance of the updated Policy.

14. Governing Law

This Policy is governed by the laws of Singapore. Any disputes arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

15. Contact Us

For any questions, requests, or complaints relating to your personal data or this Policy, please contact us:

Atreides Digital LLP
Email: admin@atreides-digital.com
Registered office: 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
UEN: T26LL0643H

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.

This Privacy Policy was drafted with reference to the Personal Data Protection Act 2012, the Personal Data Protection Regulations 2021, the PDPC's Advisory Guidelines on Key Concepts in the PDPA (revised May 2022), the PDPC's Advisory Guidelines on the PDPA for Selected Topics (revised May 2024), the PDPC's Advisory Guidelines on the PDPA for Children's Personal Data in the Digital Environment (March 2024), and the PDPC's Advisory Guidelines on the PDPA for NRIC and Other National Identification Numbers.