Privacy policy

This policy explains what personal data Nomster collects, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers the Nomster apps for iPhone and Android, the Nomster web app, Nomster for Business, and this website.

We follow Singapore's Personal Data Protection Act 2012 (PDPA). We have tried to write it in plain English. If anything is unclear, email us at hello@nomsterapp.com.

1. Who we are

Nomster is run by Nomster Pte. Ltd., a company registered in Singapore (UEN 202648990Z), with its registered office at 68 Circular Road, #02-01, Singapore 049422. You can reach us at hello@nomsterapp.com, and about privacy and your data at privacy@nomsterapp.com. In this policy, "Nomster", "we", "us" and "our" all mean Nomster Pte. Ltd. We decide how and why your personal data is used, so we are responsible for it under the PDPA.

2. What we collect

Account details. When you sign in with Apple, Google or Facebook, that service shares your name, email address and profile picture with us, and we create an account ID. We never see your password for those services. If you use Sign in with Apple and choose "Hide My Email", we only get Apple's relay address.

Location. Only if you allow it, and only while you use Nomster (never in the background). We use it to show places, deals and Off-Peak Slots near you and to sort results by distance. A few features keep something:

• Checkpoint reports: we keep where the report was made, so others know it came from the checkpoint.
• "Show that I visited" on a review: we check your location once and keep only how far you were from the place, not where you were.
• Alerts for offers near you: if you turn these on, we keep an approximate location (rounded to about 1 km) for up to 3 days, or until you turn the alerts off.

Things you add. Reviews, ratings, photos, lists, saved places, plans, polls, trips, messages to friends and groups, and checkpoint reports. Before a photo is stored we remove its hidden data, including its location, and keep only the day it was taken.

Questions to Nomster AI. Your question is sent to our AI provider to get an answer. We keep a count of how many questions you asked, not the questions themselves.

Bookings and rewards. Off-Peak Slot bookings (the business, the time, how many people, and whether you turned up), Nomster Coins, your level, and perks you redeem.

Payments. Whether you have Nomster Pro, which plan, and when it renews or ends. Pro bought in the iPhone or Android app is paid to Apple or Google; on the web, cards are handled by Stripe. We never see or store your full card number. For card payments Stripe tells us the card brand and last 4 digits, and we keep a scrambled check of the card so the same card can't start a second free trial.

Business accounts. If you run a business on Nomster: the business name, outlets and addresses, phone or WhatsApp number, booking link, photos, menus, deals, and the documents and short video you send to show that you run the business. We also keep the business plan, ad bookings, ad credit and Off-Peak fees.

How you use Nomster. Which places, deals and banners you open and tap, so we can show businesses how their pages perform and improve Nomster. We count your searches to keep monthly allowances fair, but we don't keep what you searched for.

Device data. A notification token if you allow notifications, the app version, and a random code made by the app, of which we only store a scrambled copy. We use that code to stop abuse, such as many accounts on one phone collecting the same reward.

This website. If you use a form on nomsterapp.com we keep what you send: your email for the launch list; your name, email, message and optional screenshot for support; your name, business name, email, optional phone and message for business enquiries; and your email and optional note for account deletion. To stop spam, we keep a scrambled copy of your internet (IP) address with each form for 30 days. This website does not use cookies, advertising or analytics tools.

What we don't collect. Contacts, health data, browsing history, advertising IDs or crash logs. We don't use advertising or tracking tools, we don't build advertising profiles, and we don't sell your personal data.

3. Why we use it

• To run your account and the features you use, including showing nearby results.
• To handle bookings, coins, rewards, perks and Nomster Pro, and to bill businesses for their plan, ads and Off-Peak fees.
• To keep Nomster safe and fair: checking photos and reviews before others see them, handling reports, preventing fraud, and enforcing the Off-Peak no-show rule.
• To answer you when you contact us, and to send service messages such as booking codes, receipts, trial reminders and account emails.
• To understand what works and improve Nomster.
• To meet our legal duties, such as keeping tax and accounting records.

We only send marketing messages if you agree, and you can stop them at any time. If you join the launch list on this website, we will email you when the Nomster apps are available in the App Store and Google Play, and not for anything else.

4. Who we share it with

Other people on Nomster see what you choose to share: your name and picture, your reviews, photos and public lists, and your messages in plans and groups you join. Plans, polls and trips you share by link can be opened by anyone who has the link.

Businesses see your name, the booking and whether you turned up when you book an Off-Peak Slot with them, and your name when you redeem a perk or voucher with them.

Service providers who work for us under contract and may only use your data to provide their service to us:

We don't use analytics companies. The tap counts in section 2 stay in our own database.

When the law requires it, or when needed to protect someone's safety, prevent fraud, or protect our rights.

If Nomster changes hands, for example in a merger or sale, your data may move to the new owner, who must keep protecting it as this policy describes.

5. Data outside Singapore

Our main database is in Singapore. Some of the providers above store or process data in other countries, such as the United States. When that happens, we take steps under the PDPA to make sure your data gets a standard of protection comparable to Singapore's, for example through the provider's contract terms.

6. How long we keep it

• Your account: for as long as it is open. When you delete it, we delete your profile, saved places and lists, plans you made, your messages in friends' plans, coins and rewards history, alerts and notification settings, and your reviews and photos straight away.
• Kept without your name after deletion: Off-Peak bookings on a business's records, checkpoint reports and simple tap counts, because businesses and other people rely on them.
• Payment records: as long as tax and accounting law requires (generally 5 years in Singapore), plus the scrambled card check that stops repeat free trials.
• Approximate location for nearby-offer alerts: up to 3 days.
• Website forms: the scrambled IP address is deleted after 30 days. The launch list is kept until we have told you the apps are out, then deleted within 12 months. Support messages, business enquiries and deletion requests are deleted 24 months after we close them.
• Business accounts: for as long as the business is on Nomster, then as long as tax law requires for bills.

7. Your choices and rights

• Turn location, notifications and nearby-offer alerts on or off in Nomster or in your phone's settings.
• See and change your details in the app.
• Delete your account at any time, straight from the app: Profile → Delete account. It happens straight away and we email you a confirmation. If you pay for Pro through the App Store or Google Play, cancel it there first. If you no longer have the app, use the form at nomsterapp.com/delete-account or email privacy@nomsterapp.com, and we will confirm by email and finish within 30 days.
• Under the PDPA you can ask us for a copy of the personal data we hold about you and how we have used it in the past year, ask us to correct it, or withdraw your consent. Email privacy@nomsterapp.com. We will reply within 30 days. Withdrawing consent may mean we can no longer provide some features, and we will tell you what that means first.
• If you are unhappy with how we handled your data, please tell us first. You can also contact Singapore's Personal Data Protection Commission (pdpc.gov.sg).

8. Children

Nomster is not for children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, email privacy@nomsterapp.com and we will delete it. If you are under 18, please check with a parent or guardian before buying anything.

9. Security

Data is encrypted in transit (HTTPS). Access to personal data is limited to the people who need it to run Nomster, using individual accounts. Payment details stay with Apple, Google and Stripe. No system is perfectly secure, but if a data breach affects you in a way that matters, we will tell you and the Personal Data Protection Commission as the PDPA requires.

10. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top shows when it was last updated.

11. Contact us

Data controller: Nomster Pte. Ltd. (UEN 202648990Z), 68 Circular Road, #02-01, Singapore 049422

Data protection contact (PDPA), privacy questions and data requests: privacy@nomsterapp.com

General enquiries: hello@nomsterapp.com