Privacy Policy

Effective Date: 24 October 2026

NEAST SDN BHD (Registration No. 1647311-V) ("NEAST", "we", "our" or "us") respects your privacy and protects your personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it and the choices you have. It covers the NEAST, NEAST Owner and NEAST Merchant mobile apps, our website at neast.my (including the Waitlist and delete account pages), the management company portal at management.neast.my and its invite pages, and the NEAST Admin portal used by NEAST staff (together, the "Services").

This Privacy Policy is available in English and Bahasa Malaysia.

1. Information We Collect

What we collect depends on how you use the Services.

Account and contact details

Name, mobile phone number and email address
If you sign in with Google or Apple: the account identifier and the email address Google or Apple share with us
Merchants and management company staff: a sign-in email and a password. NEAST staff: a username and a password. We store passwords only in hashed form

Identity documents

Your MyKad (IC) number or passport number, the document type and, for a passport, its expiry date
Tenants enter these in the NEAST app to complete their profile. Owners and Tenants enter them on a management company invite page so we can match them to their record. Management companies enter them for the owners and tenants of the units they manage.
We do not collect photos or scans of identity documents.

Tenancies, properties and payments

Tenancy details: property name and address, rent amount, rent due date, rent months, tenancy start and tenancy end
Tenancy agreements and management agreements uploaded by you or a management company
An owner's name, email address and phone number that a Tenant enters when the owner is not on NEAST
Property photos that Owners upload
Bank name, account number and account holder name of Owners and management companies, for payouts, settlements and Alliance payouts
Records of rent payments, wallet top-ups, payouts, settlements and Alliance payouts, and receipts uploaded as proof of a payment
Merchant business details: business name, registration number and registration document, and a contact name, phone number and email address

Merchant sales, NEAST Points and coupons

Sales a Merchant records for you: the amount, receipt number, a photo of the receipt and any coupon used
NEAST Points, rewards and coupons you earn, redeem or use

Camera and photos

The apps use your camera only when you scan a QR code (to connect a tenancy to a property, open a management company invite, or record a sale or coupon at a Merchant) or take a photo to upload, such as a tenancy agreement, a property photo or a receipt. Photos and files on your device are uploaded only when you choose them.

Location

With your permission, the NEAST app uses your device's location to show nearby Merchants and deals. We store the last location your device reported (latitude, longitude and time) and use it to tell you about new Merchants near you. The NEAST Owner and NEAST Merchant apps do not use your location. You can turn location access off at any time in your device settings.

Device and usage information

Push notification token and device platform (iOS or Android)
The days on which you use the NEAST app
IP address, which we use to limit repeated verification code requests and sign-in attempts and to protect the NEAST Admin portal

We do not use advertising identifiers, advertising cookies or third-party analytics.

Waitlist and messages

When a Merchant joins the Waitlist: name, phone number, email address, business name, state, purpose, note and referral code
Emails and messages you send us

2. How We Use Your Information

We use your information to:

Create your account, sign you in and verify your phone number with a one-time code sent by SMS
Match you to the tenancy or unit a management company set up, and connect tenancies to properties
Collect rent, process wallet top-ups, and make payouts, settlements and Alliance payouts
Record Merchant sales, award NEAST Points, and issue and redeem coupons
Work out your TENT score from your rent payment history
Send notifications about your account, tenancies, payments, rewards and new Merchants near you
Answer your questions and handle refunds and disputes
Prevent fraud and abuse, keep the Services secure, and meet our legal, tax and accounting obligations

We do not sell your personal data.

3. Who Can See Your Information

Owners: when your tenancy is connected to an Owner's property, that Owner sees your name, the tenancy details, the tenancy agreement you uploaded and the status of your rent payments.
Management companies: for a unit it manages, a management company sees the details it entered about you, whether you have claimed its invite, the tenancy and the status of your rent payments.
Merchants: when a Merchant scans your NEAST QR code to record a sale, the Merchant sees your name and a partly hidden phone number. Merchants do not see your email address or ID number.
Referrers in Alliance Earnings see totals for the Merchants they referred, never individual sales or customers.
NEAST staff see the information they need to review tenancies, make payouts, support you and prevent fraud.

4. Service Providers

We share personal data with these providers only so they can run the Services for us:

Fiuu, our payment gateway, processes wallet top-ups. We send your name, email address, phone number and the amount. You enter your card or online banking details on Fiuu's payment page, and NEAST never receives or stores them.
Bulk360 (360.my) sends SMS verification codes to your phone number.
Amazon Web Services hosts our servers, database and uploaded files in its Singapore region.
Cloudflare delivers our websites and API and protects them from attacks. It processes IP addresses and request details.
Google Firebase Cloud Messaging and the Apple Push Notification service deliver push notifications to your device's push token.
Google and Apple sign you in when you choose Sign in with Google or Apple.
Google Maps shows Merchant locations on maps in the NEAST app.
Expo delivers updates to the mobile apps.
Our bank processes the transfers for payouts, settlements and Alliance payouts.

We may also disclose personal data to government authorities, courts or regulators when the law requires it.

5. Push Notifications

With your permission, we send notifications about:

Your account and security
Tenancies, rent payments and payouts
NEAST Points, rewards and coupons
New Merchants near you (NEAST app)
Service announcements

You may turn notifications off at any time in your device settings.

6. Cookies and Browser Storage

Our websites do not use advertising or analytics cookies. The management company portal and the NEAST Admin portal keep your sign-in session in your browser's storage until you sign out. The mobile apps keep your sign-in session in your device's secure storage.

7. Data Retention

We keep personal data only for as long as we need it for the purposes in this Privacy Policy.

Records of tenancies (including the payout bank details recorded on each tenancy), rent payments, wallet top-ups, payouts, settlements, Alliance payouts, Merchant sales, NEAST Points and coupons, and the files attached to them such as tenancy agreements and receipts, are financial records. We keep them for as long as Malaysian tax and accounting law requires, including after you delete your account.

Waitlist entries are kept so we can follow up with you. You can ask us to remove yours at any time.

8. Deleting Your Account

You can delete your NEAST or NEAST Owner account in the app under Account, Delete Account, or on our website.

Delete account: neast.my/delete-account

When you delete your account, we immediately:

Close the account, so it can no longer be used to sign in, and free your phone number so you can use it to sign up again
Remove your push notification tokens and your Google or Apple sign-in, and revoke NEAST's access to your Apple ID
Sign you out on every device

We keep the closed account record, including the personal data on it such as your name, email address, ID number and, for NEAST Owner accounts, bank details, together with the financial records described in Data Retention, for as long as Malaysian tax and accounting law requires.

Records a management company keeps about you on NEAST, such as the name, phone number and ID number it entered for a unit, belong to that company. Ask the management company to change or remove them.

If your account has no phone number because you signed up with Google or Apple, delete it in the app under Account, Delete Account, or email us from the email address on that account and we will delete it for you. To close a NEAST Merchant account, email us from its email address.

9. Data Security

We protect your personal data with reasonable administrative, technical and organisational measures, including:

Encrypted connections (HTTPS) between the apps, websites and our servers
Access controls and permissions for NEAST staff and management company staff
Passwords stored only in hashed form
One-time codes that expire, with limits on attempts
Security monitoring

No method of electronic storage or internet transmission is completely secure, so we cannot guarantee absolute security.

10. Your Rights

Under the PDPA, you may:

Ask for access to the personal data we hold about you
Ask us to correct personal data that is inaccurate, incomplete or out of date
Withdraw your consent, which may mean we can no longer provide some Services to you
Ask us to stop using your personal data for direct marketing
Delete your account as described in Deleting Your Account

Email us to make a request. We may need to verify your identity first, and we will reply within 21 days as the PDPA requires.

11. Children's Privacy

The Services are not intended for children under the age of 13 without parental or guardian consent.

If we become aware that personal data has been collected from a child without appropriate consent where required, we will take reasonable steps to remove it.

12. International Data Transfers

Our servers and uploaded files are hosted by Amazon Web Services in Singapore. Some of the providers in Service Providers, such as Google, Apple, Cloudflare and Expo, may process data in other countries. We will take reasonable steps to ensure your information remains adequately protected.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes take effect once published in the apps or on our website, with a new effective date.

Continued use of the Services after an update means you accept the revised Privacy Policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:

NEAST SDN BHD

Registration No.: 1647311-V

Email: [email protected]

Website: www.neast.my

Malaysia

By installing, accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal data as described in it.

Last Updated: 24 October 2026