Privacy Policy

Almond AI Pte. Ltd. (UEN 202507208W), trading as “Almond” (“Almond”, “we”, “us” or “our”), is committed to protecting your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”). This Policy explains what personal data we collect, why we collect it, who we share it with, and the choices and rights you have.

This Policy applies to almond.sg, the Almond mobile experience, and any Almond order, installation, servicing or account you hold with us. It should be read together with our Terms of Service and the specific terms for the work you’ve booked (renovation, appliances, aircon, smart home, or services/maintenance, linked above).

1. Personal data we collect

We collect personal data directly from you, and automatically as you use our site and services:

• Account & contact data: name, email, mobile number, delivery/installation address, unit number.
• Order & service data: items purchased, scopes booked, floor plans or room photos you upload for a design or quote, warranty claims, appointment slots.
• Service history: the visits we’ve made to your home, the service reports from those visits, and your invoices. You can see these in My Account.
• Saved items & plans: products you save, and plans you make in Home Plan or Almond Studio (including saved versions). If you’re signed in, we keep these in your Almond account.
• Payment data: processed by our payment processor (Stripe) and PayNow; Almond does not store your full card number. We retain the order amount, payment status and a payment reference only.
• Sign-in data: if you sign in with Google or Apple, we receive your name, email and a unique identifier from that provider under Firebase Authentication; we do not receive your Google/Apple password.
• Communications: messages you send us via WhatsApp, email, live chat or our AI assistant, and call/SMS records where you’ve booked a service appointment.
• Technical data: IP address, device/browser type, pages visited, and the cookies and browser storage described in Section 3.

2. How we collect and the basis for collection

We collect data when you create an account, place an order, book a service, use our 3D planner or configurators, contact support, or otherwise interact with our site. We rely on your consent, or on the PDPA’s deemed-consent and legitimate-interest exceptions where it would be reasonable to expect us to process the data (e.g. contacting you about an order you placed). You may withdraw consent at any time by emailing hello@almond.sg, subject to Section 8 below.

2A. Do Not Call (DNC) Registry & marketing preferences

Under the PDPA’s Do Not Call provisions, we will not send marketing messages to a Singapore telephone number by voice call, text or fax unless you have given clear consent, or unless we have checked that number against the national DNC Registry within the preceding 30 days and it was not listed.

• Order confirmations, appointment reminders, service updates and warranty notices relating to a job you’ve booked are not marketing messages, we will always send these regardless of your DNC or marketing preference, since they’re necessary to deliver the service you asked for.
• Promotional messages (new products, sales, servicing-plan renewal offers) are only sent if you’ve opted in at checkout, in your account settings, or by another clear affirmative action.
• You can withdraw marketing consent at any time, reply STOP to any marketing SMS/WhatsApp message, use the unsubscribe link in any marketing email, update your preferences in My Account, or email hello@almond.sg. We action opt-outs within 30 days as required by the PDPA.
• Registering your number on the national DNC Registry stops marketing calls/messages from organisations generally, but does not withdraw any separate consent you’ve given Almond directly, you should still contact us to update your Almond-specific preference.

3. Cookies, browser storage & tracking technologies

We group the cookies, browser storage and tags we use into three categories. When you first visit, a banner asks which optional categories you allow. No analytics or advertising cookies are set until you allow them, but Google Analytics does load with its storage denied (see below). Your choice is saved in a first-party cookie called almond_consent, and you can change it at any time from the cookie settings on this site.

• Necessary (always on): your cart is kept in your browser’s local storage on your device. If you’re signed out, your saved items and plans are kept there too. When you sign in, your sign-in session tokens are kept in local storage, and your saved items and plans are stored in your Almond account instead (see Section 4). At checkout our backend may set a cart-identity cookie so your basket carries through to payment. We also store your consent choice. These can’t be switched off without breaking the cart, sign-in or checkout.
• Bot protection (necessary): our contact, commercial quote and aircon survey forms use Cloudflare Turnstile to check that a submission comes from a person, not an automated script. When you open one of these forms, Cloudflare receives technical signals from your browser (such as your IP address, browser and device characteristics) to run the check. It is used only for security, is not used for analytics or advertising by us, and is processed by Cloudflare per its own privacy policy.
• Attribution (set before you choose): a first-party cookie called almond_attr, kept for 90 days, records how you first reached us: campaign (UTM) tags in the link, the page you landed on, the external site that referred you, and any referral code. It contains no name, email, phone or address. We set it before you make a cookie choice so we can credit referrals and campaigns correctly. Ad click identifiers (from Google or Meta ad links) are only stored in it if you allow Marketing.
• Analytics (Google Analytics, GA4), only if you allow it: measures page views, traffic sources and on-site behaviour in aggregate. We use Google Consent Mode: Google’s tag loads on every visit with analytics and advertising storage denied, and until you choose it may send Google cookieless measurement pings (for example, that a page was viewed) without setting or reading any analytics or advertising cookie. Analytics cookies are only set once you allow Analytics. Data is processed by Google per its own privacy policy and may be transferred outside Singapore (see Section 6).
• Marketing (Meta Pixel & Google Ads), only if you allow it: with your consent, we use these tools to measure how our Facebook, Instagram and Google ads perform. The Meta Pixel does not load at all unless you allow Marketing, and Google’s advertising signals stay denied until you do. These tools can place a cookie and share an online identifier with Meta or Google. We do not share your name, email, phone or address with them. When you allow Analytics or Marketing, the product and value details of product-view (view_item), Find-your-fit completion (sizer_complete), add-to-cart, checkout and purchase events (such as the item, SKU, category, quantity and amount) are sent to Google, and to Meta when Marketing is allowed. Governed by Meta’s and Google’s own privacy policies.

You can also block or delete cookies and site data in your browser settings, and opt out of Google Analytics using Google’s browser add-on. Refusing Analytics or Marketing does not affect your ability to browse, order or check out. Clearing your browser’s site data will empty a cart that is stored only on your device.

4. How we use your personal data

• To create your account, process orders and payments, and schedule installation/servicing.
• To communicate with you about an order, appointment, warranty claim or support request, or to reply to an enquiry you send through our contact or commercial quote forms. The first-visit details in the almond_attr cookie (Section 3) are attached to enquiries, leads and orders you submit, so we know which campaign or referral brought you.
• To operate the 3D planner, AI design assistant, AI room renders and product configurators you choose to use.
• When you’re signed in, to keep your saved items and plans (Home Plan and Almond Studio versions) in your account, so they’re there on any device you sign in on.
• To show your service history (visits, reports and invoices) in My Account.
• To detect fraud, secure our systems, diagnose errors and meet legal and regulatory obligations.
• With your consent, to measure and improve our site (analytics).
• With your consent, to measure our advertising.
• To send you marketing communications, only with consent as described in Section 2A.

5. Who we share your data with

We disclose personal data only where necessary to deliver our services:

• Stripe (payment processing) and our PayNow banking partner.
• Firebase Authentication (Google) for Google and Apple sign-in.
• Cloudflare (Turnstile bot protection on our enquiry and booking forms), as described in Section 3.
• Sentry (error monitoring, data hosted in Germany): when something breaks on the site, technical details such as the page, browser, device and error are sent so we can fix it.
• OpenAI, Anthropic and Google (AI assistant): messages you type into our AI assistant are processed through Almond’s AI gateway using models from these providers to generate a reply.
• OpenAI and fal.ai (AI image generation): if you ask for a photoreal AI render in our 3D planner, an image of your planned room and your chosen style are sent to one of these providers to generate the render.
• Vetted installation, renovation and servicing partner teams performing the job you booked, limited to the contact and job details they need to complete it.
• Google (Google Analytics and Google Ads) and Meta (Meta Pixel), only in the categories you allow, as described in Section 3.
• Regulators, auditors or law enforcement, where required by law.

We do not sell your personal data.

6. Overseas transfer of data

Some of the service providers above (Stripe, Google/Firebase, Meta, Cloudflare, Sentry in Germany, OpenAI, Anthropic and fal.ai) process data on servers outside Singapore. Where we transfer personal data overseas, we require the receiving party to provide a standard of protection comparable to the PDPA, whether by contract, certification (e.g. Google and Meta’s own binding corporate rules/standard contractual clauses) or another mechanism recognised under the PDPA.

7. Data retention

We retain personal data only as long as it’s needed for the purpose it was collected for , typically the duration of your account plus the period needed to honour warranties, resolve disputes, and meet tax/accounting retention requirements under Singapore law, after which it is deleted or anonymised.

8. Your rights, access, correction and withdrawal

You can request access to, or correction of, the personal data we hold about you, and withdraw any consent you’ve given, by emailing hello@almond.sg or through My Account. We will respond within the timeframes required by the PDPA. Withdrawing consent may mean we can no longer provide a service that depends on that data (e.g. we can’t schedule an installation without your address), we’ll tell you if that’s the case before acting on your request.

9. Data security

We use industry-standard technical and organisational measures, encryption in transit, access controls, and never storing full card numbers ourselves, to protect personal data against unauthorised access, collection, use, disclosure or disposal.

10. Data breach notification

If a data breach occurs that is likely to result in significant harm to affected individuals, or affects 500 or more individuals, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA’s mandatory breach notification obligations.

11. Children’s privacy

Our services are directed at adults able to enter into a contract in Singapore. We do not knowingly collect personal data from children without the consent of a parent or guardian.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top of this page reflects the latest revision; material changes will be highlighted on our site.

13. Contact us / Data Protection Officer

Questions, requests or complaints about this Policy or your personal data can be directed to our Data Protection Officer at hello@almond.sg or +65 6429 6869.