HonestAbove — Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how HonestAbove PTE. LTD. (UEN 202415853R) ("HonestAbove", "we", "us"), a company registered in Singapore, collects, uses, and protects your information when you use the HonestAbove mobile application (the "App") and related services. HonestAbove PTE. LTD. is the data controller responsible for your personal data, and handles it in line with Singapore's Personal Data Protection Act (PDPA).

By using the App, you agree to this Policy. If you do not agree, please do not use the App.

Contact: info@honestabove.com

1. Information we collect

Information you give us

• Account details — your name/display name, email address, and (if you provide it) phone number, used to create and secure your account and to contact you about orders.
• Delivery information — the delivery address and contact details you enter for an order.
• Content you create — posts, photos, comments, and messages you choose to share in the App's social feed, and chats you send to the AI concierge.
• Private messages and group chats — direct messages you send to other users, and messages in event group chats. These are not public, but they are not end-to-end encrypted: they are stored on our servers, and our moderation team can access them where needed to investigate a report, prevent harm, or comply with law. Every such access is logged.
• Identity verification recordings — if you take part in an event that requires verification, the short video you record for that purpose, plus the decision made on it.
• Inquiry details — information you submit when requesting a yacht charter, travel itinerary, or made-to-order item (e.g. headcount, preferred dates, preferences).

Information collected automatically

• Usage and device data — basic app interaction and device information needed to operate the App, keep it secure, and fix problems.
• Order and wallet history — your purchases, store-credit (balance) movements, and refunds.
• Date of birth — if you give it, used only to enforce the minimum age on age-restricted events.
• Card fingerprint (event seats only) — a non-reversible identifier supplied by Stripe, stored solely so that a banned person cannot rebook a seat with the same card. It is not a card number and cannot be used to charge you.

Information from connected services

• Payments — card payments are processed by Stripe and Apple Pay. We do not store your full card number; Stripe handles card data under its own security standards and privacy policy.

Precise location (GPS) — only in two situations, never in the background

• Sailing check-in. When you tap "I'm at the marina" to check in for an event, we read your device location once, at that moment, to confirm you are at the departure point. This is what releases your seat hold. We do not read it before or after, and never in the background.
• Delivery drivers. The driver app reads location while a delivery is in progress, so the order can be tracked to your door. This applies to driver accounts only.
• In both cases your device asks for permission first, and you can refuse — in which case check-in has to be handled by staff at the pier instead.
• We do not use GPS for anything else: not for the social feed, not for advertising, and not to build a movement history.

Approximate location from your IP address

• We do derive an approximate region from your IP address — country, or province/state within mainland China. We use this in two ways, both visible to other users:
• On content you publish (posts, comments, and each message you send in a chat) we record the region you were connecting from at the moment you sent it. This is a fixed record attached to that content; it does not change afterwards.
• On your profile we show the country you most recently connected from. While you are online this appears as your current country; otherwise it is shown as your most recent one.
• This applies to every account equally, including staff and administrator accounts. Other users see your region on the same terms you see theirs.
• We show country level only on your profile. We do not display your city, and we do not build or retain a history of your movements.
• Your IP address is sent to our geolocation provider (ipwho.is) to perform this lookup. We store only the resulting place name; we do not store your raw IP address alongside your posts or messages.
• This is a signal, not proof. IP-based region can be inaccurate, and it can be changed with a VPN or proxy. We present it as information, never as a verified location.
• If you do not want your region shown, you can stop using the App; we cannot serve the App without processing your IP address, as it is technically required to deliver any internet request.

We do store your IP address in one other case: when you accept our Terms of Service, we record the IP address and timestamp of that acceptance as proof of consent.

2. How we use your information

• To create and manage your account and authenticate you.
• To process orders and payments, settle weight-based items, issue refunds to your original payment method or your store credit, and arrange delivery.
• To power features you ask for, including AI concierge recommendations and the social feed.
• To send you transactional and service notifications (e.g. order status). You can control push notifications in your device settings.
• To provide customer support and respond to inquiries.
• To show the approximate region of accounts and content, so you can judge for yourself whether someone is where they say they are.
• To keep the App safe — preventing fraud, abuse, and violations of our Terms, including reviewing reported private messages.
• To meet legal and accounting obligations.

3. Photos and notifications (App permissions)

• Photo library / camera — only used when you choose to add a photo to a post or your profile. We access photos you select; we do not scan your library.
• Push notifications — used for order updates and service messages. You can turn these off any time in iOS Settings.

4. The AI concierge

When you chat with the AI concierge, your messages are processed by our AI provider (Anthropic, the Claude API) to generate responses. We may store a short summary of your stated preferences (e.g. dietary notes, budget level, favourite items) to personalise future help. This is tied to your account, is never shared with other users, and you can ask us to clear it at info@honestabove.com.

5. How we share information

We do not sell your personal data. We share it only with:

• Service providers that operate the App on our behalf — payment processing (Stripe/Apple Pay), backend hosting and authentication (Supabase), AI processing (Anthropic), push delivery (Expo/Apple), and IP-to-region lookup (ipwho.is). Each handles data only to provide their service.
• Delivery partners, limited to the information needed to deliver your order.
• Legal and safety — when required by law, or to protect the rights, safety, and property of HonestAbove, our users, or the public.

6. Social / user-generated content

Content you post in the social feed may be visible to other users, together with the approximate region you posted from. Please do not share sensitive personal information publicly. We moderate content and act on reports of objectionable material; see our Terms of Service for the rules and our zero-tolerance policy.

Blocking. You can block any other user at any time. Blocking stops that person from messaging you and removes their content from your view. This applies to every account on the platform, including staff and administrator accounts — we do not exempt any account from being blocked, and we do not remove a block on your behalf without your own confirmation. You can unblock someone yourself at any time in Settings.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the App, comply with legal, tax, and accounting requirements, resolve disputes, and enforce our agreements. When no longer needed, we delete or anonymise it.

8. Your choices and rights

• Access and correction — view and update your profile in the App, or contact us.
• Delete your account — you can delete your account and associated personal data from within the App (Me → Account → Delete account), or by emailing info@honestabove.com. Deletion takes effect after a seven-day grace period: during those seven days simply signing in again cancels it and restores your account, and we do not lock you out in the meantime. After seven days the data is permanently deleted. Some records (e.g. transaction and tax records) may be retained where required by law.
• Notifications — manage push notifications in your device settings.
• Store credit — store credit is in-app value. It can be spent in the App, and credit that arose from a refund can be returned to your original payment method on request (see the Terms of Service, §3). It cannot be purchased, and it is not a cash account.

9. Children

The App is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

10. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No method is 100% secure, but we work to protect your information and to notify you and the authorities of any breach as required by law.

11. International transfers

Our service providers may process data outside Singapore. Where they do, we rely on those providers' safeguards and contractual protections consistent with the PDPA.

12. Changes to this Policy

We may update this Policy from time to time. We will post the new version here and update the "Last updated" date. Continued use of the App after changes means you accept the updated Policy.

13. HA Business (our merchant app)

HA Business is a separate, invite-only app for merchants who list their goods on HonestAbove. It is not available to shoppers, and an account only works after we switch it on for a specific phone number or email.

What we collect in HA Business, in addition to the sign-in details above:

• Business contact — the phone number or email we invited, and the business name shown on the account.
• Stock records — the items a merchant records: brand, model, condition, materials, and for vehicles the registration month, COE expiry and mileage.
• The merchant's own cost or asking price. This is business information, not personal data. It is visible only to that merchant and to HonestAbove. It is never shown to shoppers, and one merchant can never see another merchant's items or prices.
• Photos of goods — taken in the app or chosen from the phone's library. Photos are re-encoded before upload, which removes camera metadata including any GPS coordinates. Photos of an item that is listed are shown publicly on HonestAbove.

HA Business asks for camera and photo-library access only to photograph goods. It does not use location, contacts, or advertising identifiers, and it does not track merchants across other apps or websites.

Merchants can delete their account from inside HA Business at any time. Deletion follows the same 7-day process described in section 8: signing in again within those 7 days restores the account, and after 7 days the account and its personal data are permanently deleted. Listings that were already sold are kept as transaction records, as required for accounting and tax.

14. Contact

Questions or requests about your data:

HonestAbove PTE. LTD. (UEN 202415853R) — info@honestabove.com