Privacy Policy

In effect from 2026-08-06

Fiskal holds some of the most private information a person has — what they earn and what they spend. This policy explains, in plain language, exactly what we collect, where it is kept, who else can see it, and how you can get it back or delete it.

Who we are

Fiskal is operated by Nakhoda Technology, a business registered in Malaysia. Fiskal is a software tool for managing your own tax records. We are not the Inland Revenue Board (LHDN), we are not connected to them, and we never file anything on your behalf.

What we collect, and why

We collect only what the service actually needs. Everything below exists because a specific feature would not work without it.

Your account: your email address, and either a password (stored only as an irreversible scramble, never as text we could read) or a sign-in identifier from Apple or Google if you use those buttons. If you sign in with Apple and choose “Hide My Email”, we only ever see Apple’s forwarding address, not your real one.

Your tax profile: the answers you give in the opening questions — your first name, whether you are married, whether you or a family member is a person with disabilities, your children and their categories, which form you file, and the price band of your first home if you claim that relief. These decide which reliefs the app tracks for you.

Your receipts: the photograph, the merchant, the amount, the date, the year of assessment, and which relief you tagged it under. These are your evidence if LHDN ever asks.

Your figures: the income, deductions and statement amounts you enter, so the app can estimate your tax and refund.

Your subscription status, if you buy Premium: whether it is active and until when. Your card details are handled entirely by Apple or Google and never reach us — we could not see them if we wanted to.

What we never collect

We do not ask for your MyTax password or log in to LHDN for you. We do not collect your identity card number, your location, your contacts, or the other photographs on your phone — the app only ever uses the pictures you deliberately take or choose for a receipt. We do not sell anyone’s data, and we do not run advertising.

Where your data is kept

Your data is stored and processed in Singapore. This was a deliberate choice, not a default: our database and file storage (Supabase) run in Singapore, and our website servers (Vercel) are pinned to Singapore too. Malaysia’s PDPA allows transfers outside the country where the data is adequately protected, and keeping everything in one nearby region is how we keep that assessment simple and honest.

Who else can see it

A small number of companies help us run Fiskal. Each one only receives what its job requires:

Supabase — stores your account, your records and your receipt images.

Vercel — runs the fiskal.my website.

Resend — delivers our sign-in and verification emails. It sees your email address and the message, nothing else.

Sentry — tells us when something breaks. We deliberately strip out every piece of personal information before an error report leaves our servers: no name, no email, no account number, no IP address, and never the contents of what you typed. Sentry learns that something failed and where in the code — never whose data it was.

Apple and Google — handle sign-in if you use their buttons, and handle payment if you subscribe. They tell us only that a subscription is valid and until when.

We will never sell your data or hand it to anyone else, except where Malaysian law requires it of us.

How long we keep it

While your account is open, we keep your records for as long as you need them. That is deliberate: LHDN expects supporting documents to be kept for seven years, so deleting your receipts on a schedule of our own would defeat the entire purpose of the app.

When you delete your account, we delete your data — your profile, your figures, your receipts and their images — and your login itself. This is immediate and complete, and we test it automatically to prove nothing is left behind. Copies may persist briefly in our provider’s encrypted backups before those are overwritten in the normal cycle.

We keep a small security log of sensitive actions — that an account was deleted, that data was exported, that a password was changed — with the time and an account reference, and no personal details at all. It is automatically erased after 24 months.

Your rights

Under Malaysia’s Personal Data Protection Act you can ask to see the data we hold about you, correct it, take it elsewhere, or have it deleted. Two of those are already buttons rather than requests:

Download everything: your account settings page gives you a complete file of what we hold, in one click.

Delete everything: the same page permanently closes your account and erases your data.

For anything else — a correction, a question, or a complaint — write to privacy@fiskal.my. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner of Malaysia.

How we protect it

Every piece of your data is fenced off in the database so that it can only ever be reached by your own signed-in session — not by another user, and not by the app on someone else’s phone. Receipt images are private files, reachable only through short-lived links issued to you. Sign-in sessions on your phone are encrypted using a key held in the phone’s own secure hardware. We run automated tests against the live system that try to reach one account’s data from another, and they must fail for the code to ship.

If a breach ever affects your personal data, we will notify the Commissioner within 72 hours of becoming aware of it, and tell you within 7 days where there is a risk of significant harm.

Children

Fiskal is for adults managing their own tax and is not intended for anyone under 18.

Changes to this policy

If we change this policy in a way that affects you, we will say so in the app and on this page, and update the date at the top. We will not quietly broaden what we collect.