Privacy Policy 3XA PTE. LTD. Last updated: 12 July 2026 ​ This Privacy Policy explains how 3XA PTE. LTD. ("3XA", "we", "us") collects, uses, shares and protects your personal data when you use the 3XA mobile application (the "App") and related services, which let travelers discover and book homestays, activities and experiences offered by hosts. ​ By creating an account or using the App, you agree to the collection and use of your information as described in this policy. ​       1. Information we collect ​ Information you provide to us ​ Category Details Account information First and last name, email address, password (stored by our authentication provider, never visible to us in plain text), gender, and age. If you sign in with Google, we receive your name and email address from your Google account. Profile information Profile picture, if you choose to add one. Host verification information If you apply to become a host: your name, phone number, date of birth, a photo of a government-issued identity document, and links you provide (e.g. social media profiles). We use this solely to verify your identity as a host. Listing information If you are a host: listing names, descriptions, photos, prices, availability, and the location of your listing. Booking information, the listings you book, dates and time slots, number of guests, and amounts paid. Messages you exchange with other users through the App's messaging feature. Reviews Ratings and written reviews you leave on listings. ​ Payment information ​ Payments are processed by Stripe. Your card details are collected and processed directly by Stripe and are never stored on our servers. We receive only confirmation of payment and the transaction amount. Stripe's handling of your data is described in the Stripe Privacy Policy. ​ Information collected automatically ​ Like most apps, the App and the third-party services it is built on (Google Firebase) may automatically collect basic technical information such as device type, operating system, IP address, and app diagnostic data, used to operate and secure the service. ​        2. How we use your information ​ To create and manage your account and sign you in. To let you browse listings, make bookings, and process your payments. To let hosts create and manage listings, availability and time slots. To verify the identity of hosts and help keep the marketplace safe. To enable messaging between guests and hosts. To send booking confirmations and service emails to you and your host/guest. To display reviews and ratings. To convert listing addresses to map coordinates and back (geocoding). To prevent fraud, enforce our terms, and comply with legal obligations. ​ We do not sell your personal data, and we do not use your data for third-party advertising. ​       3. How your information is shared ​ With other users, as needed to provide the service. Your name and profile picture are visible to users you message and to hosts/guests you have bookings with. Hosts' names appear on their listings. Your identity document and date of birth are never shown to other users. ​ With service providers who process data on our behalf: Google Firebase / Google Cloud (authentication, database, file storage, hosting of our backend) Stripe (payment processing) Google Maps Platform (geocoding of listing locations) Email delivery services (booking confirmation emails) ​ For legal reasons, if required by law, regulation, legal process, or to protect the rights, safety and property of 3XA, our users, or the public. ​ In a business transfer, if 3XA is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data. ​       4. Data retention ​ We keep your personal data for as long as your account exists and as long as needed to provide the service. Booking and payment records may be kept for longer where required for accounting, tax or legal purposes. Host verification documents are kept only as long as needed to verify your identity and meet our legal obligations, after which they are deleted. ​       5. Your rights and choices Access and correction — you may request a copy of the personal data we hold about you, or ask us to correct inaccurate data. Deletion — you may request deletion of your account and associated personal data at any time by submitting our account deletion request form (also available from the Profile screen in the App), or by contacting us at the email address below with the subject line "Account deletion request". We will verify the request via your registered email address and delete your account and personal data within 30 days, except for records we are legally required to keep (such as payment records). ​ Withdrawal of consent — you may withdraw consent to our processing of your data by deleting your account.   If you are in a jurisdiction that grants you additional rights (for example under the EU/UK GDPR), you may also have rights to data portability, restriction of processing, and to lodge a complaint with your local supervisory authority.          6. Security ​ We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access-controlled cloud infrastructure provided by Google Cloud and Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your personal data against unauthorized access, alteration and loss.          7. Children   The App is not directed at children. You must be at least 18 years old to create an account and use the service. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we will delete it.         8. International data transfers   Our service providers (Google and Stripe) may store and process data on servers located outside your country of residence. Where personal data is transferred internationally, we ensure it receives a comparable standard of protection, consistent with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable laws.         9. Changes to this policy   We may update this Privacy Policy from time to time. We will post the updated version at this page and update the "Last updated" date above. Material changes will be communicated through the App. Continued use of the App after changes take effect constitutes acceptance of the revised policy.        10. Contact us   For questions about this policy, or to exercise any of your rights (including account and data deletion requests): 3XA PTE. LTD. Email: 3xaapp@gmail.com