This policy covers Red Permit — the electronic permit-to-work (ePTW) app for construction sites, for iPhone and Android — and the servers behind it. Red Permit is provided by Redfluent Pte. Ltd. (“we”, “us”), a company in Singapore. It explains what we collect, why, who can see it, how long we keep it, and what you can do about it.
For LorryGo and our websites, see the Privacy Policy. To delete your Red Permit account, see Delete your Red Permit account.
1. Who is responsible for your data
- Your employer (the company that sets up the project and your account) decides how Red Permit is used and is the organisation responsible for the project’s data under Singapore’s Personal Data Protection Act 2012 (PDPA).
- Redfluent runs Red Permit for your employer as its data intermediary. We handle the data only to provide and support the service and keep it working. We do not sell your data and we do not use it for advertising.
2. What we collect
Your account
- Your email address, name, company, and job title or badge number.
- Your employer’s administrator enters your job title or badge number.
When you sign a permit
- Your handwritten signature, stored as an image and as pen strokes (the path your finger or pen drew).
- Your precise location (GPS) at the moment you sign, as reported by your phone. It is not rounded or made approximate.
- The date and time of the signature, taken from our server.
Permit content
- What is filled in on the permit form, and any remarks.
- Site photos and sketches added to a permit.
- Appointment letters (files) that your employer’s administrator uploads.
People who do not have an account
- A permit can name people who do not use Red Permit themselves, such as watchers and people entering the work area. Someone on the permit enters their name, ID number, company and signature.
- The ID field accepts free text. Please enter a company badge or worker ID number only, not an NRIC number. Whatever is typed there is stored as entered.
Crash diagnostics
- Crash reports, with personal details redacted, so we can find and fix faults.
What we do not collect or do
- No advertising and no tracking of you.
- No third-party analytics software in the app.
- We do not sell your data.
3. Why we use it
- To issue work permits and let the right people review and approve them.
- To show who signed, when and where, so each signature can be trusted as evidence.
- To email the next person who has to sign when it is their turn.
- To keep the records that regulations require.
4. Who can see it
- Your employer: its administrators and the people involved in a permit. Other people on the same permit can see the permit and the signatures on it.
- Redfluent, which runs Red Permit.
- Service providers that process data for us: Cloudflare (storage and hosting) and Resend (sends the notification emails).
- Authorities, only when the law or a court order requires it.
- We do not sell your data and we do not use it for advertising.
5. Where it is stored
Data is stored on Cloudflare’s global network and in Redfluent’s own storage. Cloudflare’s network spans many countries, so we do not promise that your data stays in Singapore or in any one region.
6. How long we keep it
| Data | Kept for |
|---|---|
| DataSigned permits and their signature records (signature, location, time) | Kept forAt least 5 years, in line with the Ministry of Manpower (MOM) specification for electronic permit-to-work records. |
| DataYour login, profile and saved signature | Kept forWhile your account is open. Deleted straight away when you delete your account in the app, or within 7 days if you ask us by email. |
7. Deleting your account
- In the app, open Account and tap Delete account. Or email us — the steps are on the account deletion page.
- Your login, profile and saved signature are deleted straight away when you delete the account in the app, or within 7 days when you ask us by email.
- Signatures you have already placed on permits stay on those permits as legally required safety records. They may still show your name, signature, and the time and place of signing. We do not promise that your name is removed from them.
8. Your choices and rights
- You can ask what personal data we hold about you, ask us to correct it, or ask us to delete it. Records we must keep (section 6) stay until the period ends.
- Your employer is responsible for the project’s data, so we may need to involve it to deal with a request about a project’s permits.
- People named on a permit without an account can use the same contact below.
9. Contact
- Data Protection Officer, Redfluent Pte. Ltd.: ai@redfluent.com
- If you are not satisfied with our response, you can contact the Personal Data Protection Commission of Singapore (pdpc.gov.sg).
10. Changes to this policy
If we change this policy we update the date at the top. If we start collecting a new type of data, we update it first.