Privacy Policy

1 Personal Data We Collect

1.1 Information You Provide

• Full name, contact number, and email address
• Profile photo
• PLRD security licence details and number
• Bank account information (for weekly payout processing)
• Medical certificate (required for guards aged 60 and above, per PLRD regulations)
• Business registration details (for employer accounts)

1.2 Singpass Myinfo Data

With your explicit consent, we retrieve verified identity attributes from Singpass Myinfo, including:

• Full name and NRIC/FIN (including full NRIC for PLRD notification purposes)
• Date of birth
• Residential address
• Nationality and residential status
• Sex

1.3 Automatically Collected Data

• Device information (model, OS version)
• App usage analytics and performance data
• Location data (only when required for shift attendance verification)
• IP address
• Crash and error logs
• Your device’s advertising identifier — only if you allow tracking (see Section 7)

1.4 Business Information from Public Job Posts

To help security officers find work, we may list security jobs that an agency has advertised publicly (for example, in an open job-posting group). For these listings we record only the business details in the advertisement: the agency’s name, the site, shift date and time, pay, requirements, and the business contact number given for applications. We do not keep the original post or the names of any other people mentioned in it. Each listing is clearly marked as listed by GuardLink, and the agency’s contact number is deleted when the listing expires. An agency can ask us to remove a listing at any time by emailing support@guardlinksecurity.app.

2 Why We Collect Your Data

We collect and use your personal data to:

• Verify your identity via Singpass Myinfo during onboarding
• Confirm PLRD licence validity and eligibility to work as a security officer
• Create and manage your GuardLink account
• Match security officers to available shifts posted by employers
• Enable employers to fulfil PLRD notification obligations
• Track shift attendance and confirm hours worked
• Process weekly payouts to guards via bank transfer
• Facilitate communication between guards and employers on the platform
• Let you contact agencies about jobs listed on GuardLink, and share your profile with them when you choose to
• Record which job-posting groups we have shared listings in, so the same job is not posted twice
• Improve platform security, performance, and user experience
• Measure how well our advertising works, so we can reach more security officers and agencies
• Detect and prevent fraud or non-compliant activity
• Comply with applicable Singapore laws and regulatory requirements

3 Who We Share Your Data With

We share your personal data only where necessary and with appropriate safeguards:

Employers on the Platform

Employers who confirm a shift with a guard can access that guard’s identity details (including full NRIC/FIN) solely for PLRD notification submission.

Agencies You Choose to Contact

When you tap “Contact agency on WhatsApp” on a listed job, we show you the exact message first. It contains your rank, full name, age (not your date of birth), your security courses, and a private link to your GuardLink profile. Nothing is sent unless you send it yourself from your own WhatsApp. Through that link:

• an agency that has signed up to GuardLink can see your name, rank, age, and courses;
• only an agency that GuardLink has verified can also see your masked NRIC/FIN (for example S****123A) and your PLRD licence number. Your full NRIC/FIN is never shown through this link.

You will be notified each time an agency views your profile. You can see every link you have shared, and revoke any of them, under Profile → Profiles I’ve shared. Links expire automatically after 30 days.

Messages you send to an agency on WhatsApp are handled by WhatsApp (owned by Meta) under WhatsApp’s own privacy policy. GuardLink does not see or store those messages.

Government Regulators

We may disclose data to the Police Licensing & Regulatory Department (PLRD), Ministry of Manpower (MOM), or other Singapore authorities when required by law.

Service Providers

• Google Cloud Platform (cloud infrastructure, Singapore region — asia-southeast1)
• Firebase (authentication, analytics, crash reporting)
• HitPay and other payment processors (for wallet top-ups and payout disbursement)
• Meta Platforms (Facebook) — to measure the performance of our advertising (see Section 7)

4 Data Storage & Security

Your personal data is stored securely on Google Cloud infrastructure located in Singapore (asia-southeast1 region). We implement the following safeguards:

• Encryption of data in transit and at rest
• Strict access controls limiting data access to authorised personnel only
• Regular security audits and monitoring
• Secure onboarding via Singpass Myinfo (a government-verified channel)

5 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Policy, and in accordance with Singapore law:

• While your account remains active on the platform
• Up to 7 years after account closure, for regulatory and legal compliance purposes
• Longer periods may apply if required by applicable Singapore law or regulatory direction
• Agency contact numbers from public job posts: deleted when the listing expires
• Profile-share links: expire after 30 days, or straight away if you revoke them
• Records of who viewed your shared profile: kept for 12 months, or deleted with your account

You can delete your account at any time inside the app under Profile → Delete Account, or by contacting us at support@guardlinksecurity.app. Note that some data may need to be retained to comply with legal obligations even after a deletion request.

6 Your Rights Under the PDPA

As a data subject under Singapore’s Personal Data Protection Act 2012, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request that inaccurate or incomplete data be corrected
• Withdrawal of consent — Withdraw consent to our use of your data at any time
• Data portability — Request your data in a portable format where applicable

To exercise any of these rights, contact our Data Protection Officer (see Section 10).

7 Cookies, Analytics & Advertising

The GuardLink platform uses the following technologies:

• Firebase Analytics — to understand how users interact with the app (for example, which screens are used and whether a shift booking was completed)
• Firebase Crashlytics — to detect and fix app crashes and errors
• Firebase Authentication — to manage secure login sessions
• Meta (Facebook) App Events and Meta Pixel — to measure whether our advertising leads people to install and use GuardLink

What Meta Receives

• App and website usage events (for example, that a shift was viewed or booked), your device type, and your operating system
• Your device’s advertising identifier — only if you allow tracking. On iPhone, we ask your permission first; you can decline and still use every part of the app.
• For employer (business) accounts only: when a wallet top-up is confirmed, the top-up amount, together with the account’s email address and phone number in a scrambled (hashed) form that cannot be turned back into the original. This lets Meta match the top-up to an ad you saw. A guard’s contact details are never sent to Meta.

Your Choices

• On iPhone, you can turn tracking on or off at any time in Settings → Privacy & Security → Tracking.
• On Android, you can reset or delete your advertising ID in your device settings under Google → Ads.
• On our website, you can block or delete cookies in your browser settings.

For how Meta and Google handle this data, see the Meta Privacy Policy and the Google Privacy Policy.

8 International Data Transfers

Our primary data infrastructure is located in Singapore. However, some third-party service providers (such as Firebase and Meta) may process certain data on servers located outside Singapore. Where such transfers occur, we ensure they are carried out in compliance with PDPA requirements and that appropriate data protection standards are maintained.

9 Updates to This Policy

GuardLink Technologies Pte. Ltd. reserves the right to update this Privacy Policy at any time to reflect changes in our practices or applicable law. We will notify users of material changes via the app or by email. Continued use of the platform after changes are posted constitutes acceptance of the revised Policy.

10 Contact Us & Data Protection Officer

For any questions, requests, or concerns regarding your personal data or this Privacy Policy, please contact our Data Protection Officer: