One privacy policy, for the site and every app.
Last updated: 29 July 2026.
This is the privacy policy for apps.paiseh.sg and for every PaisehSG app — the app-store listings link here. PaisehSG is a personal side project by an individual developer in Singapore, not a company with a data business. That shapes everything below.
Three commitments apply to the website and to every app, without exception:
- No advertising, and no selling or sharing of data for advertising. Ever.
- No third-party analytics or tracking SDKs.
- Local first. Where an app can keep your data on your device, it does. Servers exist only where a feature genuinely needs one.
This website
apps.paiseh.sg collects nothing. It is a set of static files — no account
system, no forms, no database, no analytics, no cookies. Every asset is served
from this domain, so visiting a page here does not tell any third party that
you did. One value is stored in your browser and never leaves it: your choice
of light or dark theme (literally the word light or dark).
The site is hosted on GitHub Pages. Like any web host, GitHub’s servers process the requests needed to deliver the page and may log request data such as IP addresses for security. That processing is GitHub’s, under GitHub’s Privacy Statement, and I neither receive nor have access to those logs.
The apps, in three tiers
Every app fits one of three data-handling patterns. Find your app below, and that section is the whole story for it.
Tier 1 — everything stays on your device
Gift Guide SG, Durian Guide, Dim Sum Guide, Dehydrate, Another Money Tracker.
These apps have no accounts and no PaisehSG server. What you enter — gift recipients and history, water intake, expenses — is stored on your device and stays there. Gift Guide SG even runs its AI generation on-device (Apple Foundation Models on iOS, Gemini Nano on Android), so gift questions and answers never leave the phone. Deleting the app deletes the data.
Two notes for completeness:
- Dim Sum Guide fetches its dish catalogue from Firebase. That is a read-only content download — nothing about you is stored, and no account exists.
- ACDC SG also belongs here: it has no accounts and stores nothing about you, but it queries live services to work — charger availability from LTA DataMall, geocoding from OneMap, and map tiles from Google Maps on Android or Apple Maps on iOS. Those providers see the network requests your device makes, under their own policies. If you grant location permission, your location is used on the device to centre the map and sort results; I run no server and never receive it.
Tier 2 — syncs through your cloud account
Tsk Do What?
Tasks sync between your iPhone, iPad and Mac through CloudKit — your own iCloud account, under Apple’s privacy policy. There is no PaisehSG account and no PaisehSG server; I cannot see your tasks, and deleting the app plus its iCloud data removes everything.
Tier 3 — apps with accounts and a backend
Nudge, Sprout, Speak Cantonese use Firebase (Google Cloud) as their backend, because their core features — reminders that arrive when the app is closed, sync across devices, a daily phrase — need one.
What they hold, and why:
- Account data (Nudge, Sprout): the email address you sign up with, for authentication.
- The content you put in: people, occasions and gift notes in Nudge; plants, photos and care logs in Sprout. Stored in Firestore so it can sync and drive reminders. Used for nothing else.
- Push notification tokens, if you enable notifications — a device token so a reminder or the daily phrase can reach you.
- Email address for reminder emails (Nudge), if you turn those on.
- Payments (Nudge and Sprout paid tiers): handled by Stripe. Your card details go to Stripe, never to me, and never touch Firebase.
- Speak Cantonese needs no account at all: phrases are fetched from a Cloud Function and cached on your device, so history works offline. If you report a bad phrase, the report you type is sent — that’s the only thing you can send.
Firebase and Stripe process this data as service providers under their own terms (Google, Stripe); neither is used for advertising here, and I do not share your data with anyone else.
Deleting your data: delete your account in the app where offered, or email me and I will delete it. Uninstalling removes the on-device cache.
What I never do
No selling or renting data. No advertising SDKs. No third-party analytics or tracking. No reading your content beyond what operating the service strictly requires (for example, investigating a bug you report). No collecting data an app doesn’t need for a feature you can see.
Children
None of the apps are directed at children under 13, and none knowingly collect personal data from them. If you believe a child has created an account, email me and I will delete it.
Your rights
Under Singapore’s PDPA — and the GDPR where it applies to you — you can ask for access to, correction of, or deletion of your personal data. For the on-device apps there is nothing on my side to ask about: your data is on your device. For the rest, email me and I will handle it directly; there is no form, no queue, and no legal department. You may also complain to your regulator — in Singapore, the PDPC.
Changes
If an app’s data handling changes, this page changes first and the date at the top moves. Material changes to Tier 3 apps are also announced in the app.
Contact
Write to support@paiseh.sg about this policy, any app, or any data request. This is a one-person project — the person reading that inbox is the developer.