The CoveTech App (the “App”) is developed and published by Covetech Sdn Bhd, a company incorporated in Malaysia (Company No. 202601024431 (1686528-V)), with its registered address at 25, USJ20/6H, Subang Jaya, Selangor 47630, Malaysia (“Covetech”, “we”, “us”, or “our”).
The App is a property management platform available on the Google Play Store and Apple App Store. It powers property browsing and management services across Southeast Asia under the regional co-living companies that have subscribed to our software as a service (“Co-Living Company”).
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to it.
Scope of This Privacy Policy
This Privacy Policy applies to your use of the App in guest mode — that is, when you access the App to browse available property listings without having signed in with pre-designated login credentials.
In guest mode, you have not yet entered into a contractual relationship with any of Covetech’s regional co-living brands. Covetech acts as the data controller for all personal data processed during this phase of your use of the App.
Once you sign in using pre-designated login credentials issued to you under a tenancy agreement with one of the Co-Living Companies, your use of the App transitions to that Co-Living Company’s environment. From that point, the privacy policy and terms of use of the relevant Co-Living Company will apply to your use of the App, and Covetech ceases to be the data controller for your personal data. The relevant Co-Living Company’s privacy policy will be presented to you for acceptance upon your first successful login.
Data We Collect in Guest Mode
When you use the App in guest mode, we collect the following categories of data:
Location data. The App requests permission to access your device’s location in order to display available property listings near you. You may also choose to set your location manually without granting any location permission.
The App accesses your location only while it is actively in use (foreground access only). It does not access your location in the background.
When prompted, you may choose to grant precise location access (while using the App), approximate location access (while using the App), or one-time location access (for the current session only). You may also choose not to allow location access, in which case the App will use the location you set manually.
You may change or revoke your location permission at any time through your device settings. Revoking location permission does not affect your ability to browse listings using manually selected locations.
Usage and analytics data. We use Google Firebase Analytics to collect data about how you interact with the App. This includes:
device information (device model, operating system version, unique device identifiers);
app usage behaviour (screens viewed, features used, session duration); and
network information (IP address, connection type).
Crash and diagnostic data. We use Google Firebase Crashlytics to automatically collect crash reports and diagnostic data when the App encounters an error. This includes device model, operating system version, App version, and technical information about the nature of the crash. This data does not include any content you have entered or personal identifying information beyond your device details.
Locally stored preferences. The App stores certain preferences on your device using secure local storage (MMKV). In guest mode, this is limited to your location preference (whether auto-detected or manually selected) and basic app settings. This data is stored locally on your device only and is not transmitted to Covetech’s servers.
We do not collect your name, email address, contact details, payment information, or any other personally identifying information in guest mode. You are not required to create an account or provide any personal details to browse the App as a guest.
How We Use Your Data
We use the data collected in guest mode for the following purposes:
Location data — to display property listings relevant to your location or the location you have selected, and to enable you to browse available units in your chosen area.
Usage and analytics data — to understand how guests use the App, to improve the App’s functionality and user experience, and to identify and resolve technical issues.
Crash and diagnostic data — to identify, diagnose, and resolve software errors and to maintain the stability and performance of the App.
Locally stored preferences — to remember your location preference and app settings within the same session and across subsequent guest sessions on the same device, without requiring you to re-enter your preferences each time.
We do not use your data for targeted advertising, profiling, or automated decision-making.
Legal Basis for Processing
This Privacy Policy is issued in compliance with the Personal Data Protection Act 2010 of Malaysia (“Malaysian PDPA”). We process your data on the following bases:
Location data — with your consent, which you grant when you select any of the location permission options presented by your device (precise while using the App, approximate while using the App, or one-time access for the current session only). If you select “Don’t allow”, no location data is accessed and the App will rely on your manually selected location instead. You may withdraw consent at any time by revoking or changing the location permission in your device settings.
Usage and analytics data (Firebase Analytics) — on the basis of our legitimate interests in understanding how the App is used and improving its performance for all users.
Crash and diagnostic data (Firebase Crashlytics) — on the basis of our legitimate interests in maintaining the stability and integrity of the App.
Locally stored preferences — on the basis of our legitimate interests in providing you with a consistent and functional app experience.
Where you access the App outside of Malaysia other data privacy laws may apply in addition to the Malaysian PDPA. We will honour your rights under applicable local law to the extent they apply to our processing activities.
Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to any third party.
We share data with the following third-party service providers, strictly to the extent necessary to operate the App:
Google LLC — as the provider of Firebase Analytics and Firebase Crashlytics. Google processes analytics and crash data on our behalf as a data processor. Google may transfer this data to servers outside your jurisdiction. Google’s privacy practices are governed by the Google Privacy Policy (policies.google.com/privacy). Firebase data processing is covered by Google’s data processing terms.
Amazon Web Services, Inc. (AWS) — our backend infrastructure is hosted on AWS servers in Singapore. AWS processes data on our behalf as a data processor in accordance with its data processing addendum.
We may also disclose your data where required by applicable law, court order, or regulatory authority.
International Data Transfers
Analytics and crash data processed by Google Firebase may be transferred to and stored on Google’s servers, which may be located outside Malaysia and outside your country of residence. Google implements appropriate safeguards for such transfers in accordance with applicable data protection law.
Backend data is hosted on AWS servers located in Singapore.
Where your personal data is transferred outside Malaysia, we take reasonable steps to ensure it receives a standard of protection consistent with the requirements of the Malaysian PDPA.
Data Retention
Location data used to display listings is not persistently stored on our servers. Your location preference stored locally on your device via MMKV remains on your device until you clear the App’s data or uninstall the App.
Firebase Analytics data is retained by Google for a period of up to 14 months by default, in accordance with Google’s standard Firebase data retention settings.
Firebase Crashlytics data is retained by Google for 90 days from the date of the crash event.
Children’s Privacy
The App is not directed at children under the age of 13 (or such higher minimum age as may apply under your local law). We do not knowingly collect personal data from children. If you believe a child has provided personal data through the App, please contact us using the details in the Contact Us section below and we will take steps to delete such data.
Your Rights
Subject to the conditions and exceptions under the Malaysian PDPA and any applicable local data protection law, you have the right to:
request access to the personal data we hold about you;
request correction of any inaccurate personal data we hold about you;
withdraw consent for location access at any time by changing or revoking the relevant permission in your device settings; and
request that we cease or restrict processing of your personal data in certain circumstances.
If you are located outside of Malaysia, you may also have rights of erasure, data portability, and objection under your applicable local data protection law. We will honour such rights to the extent they apply to our processing activities.
To exercise any of the above rights, please contact us using the details in the Contact Us section below.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the App’s features, or applicable law. Any updated version will be posted within the App and at this page, with a revised “Last revised” date.
We encourage you to review this Privacy Policy periodically. Your continued use of the App after any update constitutes your acknowledgement of the revised Privacy Policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or wish to raise a complaint about how we handle your personal data, please contact us at: hello@covetech.co
If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority in your country of residence.