Privacy Policy

This policy explains what the RMS mobile app and its backend collect, why, who we share it with, how long we keep it, and the choices you have. RMS is operated by SyncMind C&S (“we”, “us”). If anything here is unclear, email us at rcm@syncmind.my.

1. Who this applies to

RMS is a business tool for car-rental operators. When you sign up you create an account as a company owner or join a company as a runner. This policy covers that account data and the rental records you enter, including information about your renters.

2. Information we collect

• Account details — your full name, username, and email address. Your password is stored only as a secure one-way hash (bcrypt); we never store or see it in plain text.
• Company & fleet data — your company name, and each car's nickname, brand/model, plate number, and road-tax/insurance expiry dates.
• Booking records — for each booking you enter: the renter's name and phone number, pickup place, rental period, price and deposit. You are responsible for entering renter data lawfully.
• Subscription data — if you subscribe, Google Play processes the payment and tells our server the subscription status and expiry so we can unlock features. We never receive your card or bank details.
• Basic technical data — a session token to keep you signed in, your last-login time, and standard server logs (e.g. IP address, timestamps) used for security and troubleshooting.

3. How we use it

• To provide the service — signing you in, managing your fleet, bookings, team and revenue views.
• To send you email you asked for or that is essential — account activation and password reset, join-request approvals, subscription notices, and (if you're an active user who hasn't opted out) document-expiry and booking reminders.
• To operate the subscription — verifying your Google Play purchase and unlocking the right plan.
• To keep the service secure and working — rate-limiting abuse and diagnosing errors.

4. Consent

By creating an account and entering data you consent to the processing described here. Where you enter a renter's personal data, you confirm you have the right to do so. You can withdraw consent by deleting your account (see section 8). Reminder emails include a one-click unsubscribe.

5. Who we share it with

We do not sell your data or share it for advertising. We use a small number of service providers (processors) strictly to run RMS:

• Google — Google Play Billing and Play Services process subscriptions and app distribution.
• Our hosting provider — the RMS backend and database run on a private server hosted in Malaysia/Singapore.
• Email delivery — transactional and reminder emails are sent through our mail service.

We may also disclose data if required by law or to protect the rights and safety of our users.

6. How we protect it

Passwords are hashed with bcrypt; traffic between the app and our server is encrypted over HTTPS; each company's data is isolated so one company cannot see another's. No system is perfectly secure, but we take reasonable measures to protect your information.

7. How long we keep it

We keep your account and rental records for as long as your account is active. If you delete your account, we remove your personal data as described in section 8. Standard server logs are retained for a limited period for security and then discarded.

8. Your rights & deleting your data

You may access, correct, or delete your personal data. You can edit most details in the app. To delete your account and associated data, use Account → Delete account in the app, or follow the steps at rcm.syncmind.my/delete-account.html. On deletion we remove your account and personal data (and, for an owner, the company's cars and bookings), except where we are legally required to retain certain records.

9. Children

RMS is a business tool intended for adults and is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as the app evolves. We'll post the new version here and update the effective date above. Significant changes may also be notified in the app.

11. Contact us

Questions or requests about your privacy? Email rcm@syncmind.my.