Privacy Policy

Account and identity information, including your name, email address, phone number, role, organisation and property membership.

Property-service information, such as leases, payment records and transaction references, maintenance requests, messages, meetings, listings, visitor passes and access events.

Content you choose to upload, such as maintenance photos, documents, cheque images, visitor photos and vehicle details.

Optional location information in the Miftah Resident app when you ask to find or sort nearby properties. We do not use location in the background.

Camera access when you choose to capture an attachment, scan a cheque, photograph a walk-in visitor or scan a visitor pass.

Technical, diagnostic and security information needed to operate, protect and troubleshoot the service.

We use information to authenticate users, provide property and tenancy services, manage authorised payment and cheque records, manage maintenance and communications, operate visitor access, prevent abuse, support users and comply with legal obligations.

We do not sell personal information and we do not use personal information for third-party advertising.

Information is available to the property owner, manager or organisation that provides your Miftah account, according to your assigned role.

We use contracted service providers for cloud hosting and storage, Firebase phone authentication in Miftah Security, and Google Maps in Miftah Resident and Miftah Manager. These providers process information only to deliver their services and under their own applicable privacy terms.

We may disclose information when required by law, to protect people or property, or in connection with a lawful business reorganisation.

We retain information for as long as the account, tenancy or property-service relationship requires it and for applicable financial, contractual, security and legal retention periods.

Accounts are normally provisioned by a property or organisation administrator. You can ask that administrator to correct or delete your account, or use our public data-deletion request page. Some financial, lease or access records may need to be retained when the law or a legitimate security requirement applies.

We use encrypted network connections, access controls and secure on-device credential storage. No security measure can guarantee absolute protection.

Miftah is intended for adults and authorised property staff. It is not directed to children under 18.

We may update this policy as the service or legal requirements change. The effective date below identifies the latest version.