Privacy Policy

Miri Property Living is the tenant portal operated by Miri Property Hunter. Account and tenancy information may be entered by management or provided by you when using the portal.

The records supported by this portal include your name, registered phone number, account identifier, date of birth where supplied, identity number, verification selfie and review status, property and room assignment, tenancy dates, rent, deposit, agreement version and acceptance record, bills and recorded payments, payment references or notes, service requests, reward records and referral information.

Identity verification uses an identity number and one selfie. A verification selfie is also used as the account photo. The portal does not currently provide a document-scanning or facial-recognition feature.

If you submit a referral, the friend's name and phone or email contact are recorded. Only provide another person's information with their permission. Payment evidence sent to management through WhatsApp is handled through that channel; the payment schema can also hold an evidence-file reference, but this does not mean that a tenant file-upload feature is available on every payment page.

Portal information is used to manage tenant accounts, confirm identity, administer rooms and tenancies, record agreement acceptance and payments, respond to service requests, review referrals and rewards, and communicate with tenants. Management records determine what appears in your account.

Public room listings describe available properties and rooms. Your private tenancy, identity and payment information is not part of those listings.

Accounts are invitation-only and are opened by management. Tenants sign in with their registered phone number and password. The system maps the phone number to an internal account identifier for Supabase authentication; this is not an SMS or OTP login service.

Supabase provides account authentication. Session information is stored in the browser to maintain your sign-in under the existing session rules. Signing out clears the session and asks OneSignal to unlink this device from the signed-in tenant. Browser notification permission is not automatically reset by signing out.

Keep your password private. For changes to registered information or access problems, contact management; a profile phone-number change does not by itself promise to change your login identifier.

Tenancy records link your account to a property and room, rental period, rent, deposit and status. Agreement records include the accepted version, acceptance time and tenant account identifier.

Bills and payment records may include amounts, rental periods, due dates, payment dates, methods, references, notes, evidence references and management review information. Submitting payment proof is not the same as management confirming payment. Existing records may remain relevant after a tenancy ends.

Push notifications are optional and use OneSignal. When you enable them, OneSignal handles browser/device subscription identifiers and associates the subscription with your tenant account identifier so management can send a notification to the intended tenant.

You can deny or disable notifications in browser or device settings. The portal's main account functions do not require push permission. Management can currently send manual updates; this notice does not mean that every rent, payment, service or reward event automatically triggers a notification.

Service requests record the category, description, linked tenancy, submission time, status and management response. Avoid including information that is not needed to explain the issue.

Service photo uploads are currently not switched on. The page explicitly explains this; it does not upload a service photo when you send a text request.

Authorised management uses portal records to administer your tenancy. Supabase processes account, database and storage information for the portal; OneSignal processes information needed for notifications. Hosting and font-delivery services receive the technical requests needed to load the website.

WhatsApp buttons open an external WhatsApp service. The message and files you choose to send there are handled through WhatsApp and by the recipient, rather than by the portal's service worker. The portal does not automatically send your identity photo or account records when a contact link is opened.

For questions about other recipients, disclosures or the service providers' handling of your information, contact Miri Property Hunter. This notice does not assert that no data is collected or that no data is shared.

The production portal uses HTTPS, account authentication and role-based access controls. Verification selfies are stored in a private Supabase storage bucket and displayed through temporary signed URLs. Selfies are re-encoded before upload to remove source-image metadata.

The PWA's offline cache contains only a generic offline page, its style/script and a public brand icon. It does not store your tenant pages, payments, identity information, agreements, session tokens or private API responses. Existing browser session storage is separate from that offline cache.

No online service can guarantee absolute security. Use a secure device, sign out on shared devices, and report suspected account misuse to management.

Portal records remain in the system until managed through an authorised process. The current portal does not automatically expire all records or provide a self-service account-deletion button. Ending a tenancy, signing out or uninstalling the PWA does not automatically delete tenancy or payment records.

Specific retention periods, any legally required retention and the handling of deletion requests need to be confirmed by Miri Property Hunter for the relevant record type. Contact management for these details; this notice does not promise immediate or automatic deletion.

Use the dedicated privacy email listed below to request access to, correction of, or deletion of personal information, or to raise a privacy concern. Management may need to confirm your identity before dealing with an account-related request. Explain which information or account your request concerns, but do not send your password.

Some details can be edited in Account. Saved birthdays and reviewed identity details have restrictions and may require management correction. Requests concerning tenancy or payment records require review; do not assume that uninstalling the App or changing notification permission erases those records.

The portal uses Supabase for authentication, database and private file storage; OneSignal for web push; Google Fonts for the website font; and WhatsApp when you choose an external contact link. The website is developed and published using Lovable hosting tooling. Each provider's own privacy terms apply to the services it operates.

No location permission or location-tracking feature was found in the current portal implementation. Identity photo selection can use your device's file picker or camera with the permissions supplied by your browser or device.

For privacy-related enquiries, access, correction, or deletion requests, please contact Miri Property Hunter using the dedicated privacy email below. Do not send passwords or unnecessary identity documents in an initial enquiry.

Email: jrtan870120@gmail.com