← Back to Home

Privacy Policy

Last updated: 5 November 2026

VroomLah is a product of Grepnetics, a company registered in Singapore.

1. Who we are

VroomLah is a product of Grepnetics, a company registered in Singapore. Grepnetics is responsible for the personal data described in this policy and handles it in line with the Personal Data Protection Act 2012 of Singapore (PDPA) and other applicable laws.

You can contact our Data Protection Officer at info@grepnetics.com.

2. Personal data we collect

  • Account details: name, email address, optional phone number and sign-in information (for example from Google sign-in).
  • Vehicle details: make, model, year, registration number and odometer readings.
  • Records you add: service and fuel records, receipts and their images, costs and notes.
  • Appointment and message details: workshops you contact, appointment times, services requested, and messages exchanged through VroomLah or our WhatsApp line.
  • Workshop details: business name, address, opening hours, services, staff names and roles, and reviews.
  • Technical data: device, browser, IP address, pages used and error logs.
  • Cookies and similar technologies (see our Cookie Policy).

3. How we use it

  • to create and run your account and provide VroomLah’s features;
  • to keep your service history, send maintenance reminders and manage appointments;
  • to read receipts you upload or send so we can suggest record details;
  • to pass appointment requests, messages and feedback requests between you and the workshops you choose;
  • to keep the service secure, prevent fraud and abuse, and fix problems;
  • to improve VroomLah using aggregated or de-identified information;
  • to send service messages about your account, and marketing messages only where you have agreed;
  • to meet legal and regulatory obligations.

4. Consent

By using VroomLah you consent to the collection, use and disclosure of your personal data as described here. You may withdraw consent at any time by contacting info@grepnetics.com. If you withdraw consent, we may not be able to continue providing some or all of the service.

5. Who we share it with

  • Workshops you choose to interact with — for example when you request an appointment, send a message or leave a review. Each workshop handles that data as an independent organisation and is responsible for its own compliance with data-protection laws.
  • Service providers who help us run VroomLah, such as cloud hosting, email delivery, messaging, sign-in and receipt-reading providers, under contracts that require them to protect the data.
  • Authorities or others where required by law, or to protect our rights, users or the public.
  • A buyer or successor if our business is sold or reorganised.

We do not sell personal data.

6. Marketing

We only send marketing messages with your consent, and you can opt out at any time. For Singapore telephone numbers we check the Do Not Call Registry before sending marketing messages where required.

7. Access and correction

You may ask to access the personal data we hold about you, or to correct it, by contacting info@grepnetics.com. We will respond within 30 days, or tell you within that time when we will be able to respond. We may charge a reasonable fee for access requests where the law allows.

8. Retention and deletion

We keep personal data only for as long as it is needed for the purposes above or required by law. When you close your account we delete or anonymise your personal data within a reasonable time, except where we must keep it for legal, accounting or dispute-resolution reasons.

9. Protection

We use reasonable security arrangements, including encryption in transit and at rest and access controls, to protect personal data. No system is completely secure, and we cannot guarantee the security of information sent over the internet.

10. Transfers outside Singapore

Some of our service providers may process data outside Singapore. When that happens we take steps to ensure the data receives a standard of protection comparable to the PDPA.

11. Data breaches

If a data breach is likely to cause significant harm, or affects a significant number of people, we will notify the Personal Data Protection Commission and affected individuals as required by law.

12. Children

VroomLah is not intended for anyone under 18 and we do not knowingly collect their personal data.

13. Changes and contact

We may update this policy from time to time and will tell you about material changes by email or in the app. Questions or requests: info@grepnetics.com. See also our Terms and Conditions and Cookie Policy.