1Who we are

Refundku is a personal tax-relief tracking app for Malaysian individual taxpayers. This notice covers the Refundku mobile app and web app (together, the "App"). It's prepared as a Notice under the PDPA's General Principle and Notice and Choice Principle — before we collect your data, you should know what for.

2What we collect

The App is built so it only asks for what a given screen actually needs. Here's everything, screen by screen:

Account

• Your email address and profile photo, via Google Sign-In.
• A display name and date of birth that you type in directly — we don't pull your name from your Google account. Your date of birth is used once, to confirm you're 18 or older, and is not shown anywhere in the App afterwards.

Tax & income data

• Annual income, PCB/MTD paid, and — if you use the itemised "Build it up" entry — your monthly salary, bonus, and other income sources, each tied to a specific Year of Assessment.
• Which reliefs apply to you: receipts you've assigned to a relief category, and yes/no answers for eligibility-based reliefs (for example, registered-disabled status for yourself, your spouse, or a child, or which price tier applies to a first-home loan).

Receipts and payslips

• Photos of receipts you scan are stored so you can review them later, alongside the merchant, amount, and date extracted from them.
• Payslip photos or PDFs you upload are sent for one-time extraction of financial figures only (gross salary, PCB) and are not retained after that extraction completes. The extraction is instructed to never read or return your name, IC number, address, or bank details — see §4 for how that extraction works.

3How we use it

In one line: to estimate your refund and keep your reliefs organised — nothing else. Specifically, to:

• Compute your estimated chargeable income, tax payable, and refund for the Year of Assessment you're viewing;
• Automatically read a scanned receipt or payslip and suggest a merchant, amount, and relief category for you to confirm or correct;
• Confirm you meet the App's minimum age of 18 before creating your account.

We do not sell your data, and we do not use your receipts or income figures for advertising.

4Who we share it with — Disclosure Principle

Your data isn't disclosed to anyone outside the processors below, each of which handles a specific, limited part of running the App:

5Keeping it secure — Security Principle

All traffic between the App and our servers is encrypted (HTTPS). Every table in our database enforces row-level security scoped to your account, so another signed-in user's queries can never return your rows, regardless of what the app's own interface allows.

6How long we keep it — Retention Principle

Receipts and income figures are kept for as long as your account exists, since a completed tax filing may need to reference a prior Year of Assessment. You can delete an individual receipt at any time from within the App. We don't yet have a self-service "delete my account" button — until we do, email us (§7) and we'll erase your account and all associated data by hand.

7Your rights — Access Principle

Under the PDPA, you can ask us to:

• Access a copy of the personal data we hold on you;
• Correct anything that's inaccurate or outdated;
• Delete your account and data, per §6.

8Children's privacy

Refundku is restricted to individuals aged 18 and over — enforced at sign-up by the date of birth you provide — since Malaysian individual income tax filing applies to adults. We don't knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we'll remove it.

9Changes to this notice

If this notice changes in a way that affects what we collect or why, we'll update the effective date at the top of this page. Continuing to use the App after a change means you accept the update.

1Acceptance

By creating a Refundku account, you agree to these terms and to the Privacy Policy above. If you don't agree, please don't use the App.

2Not tax advice

3Eligibility

You must be at least 18 years old to use Refundku. By creating an account, you confirm the date of birth you provide is accurate.

4Your account and your data

You're responsible for the accuracy of the income, receipts, and relief selections you enter — Refundku sorts and totals what you give it, but doesn't verify it against any external record. Keep your Google account secure, since it's how the App confirms it's you.

5Acceptable use

Use Refundku for your own tax planning. Don't attempt to access another user's data, submit receipts or payslips that aren't yours, or use the App's scanning features to process documents unrelated to Malaysian individual tax reliefs.

6Limitation of liability

The App is provided as-is. To the extent permitted by Malaysian law, we're not liable for penalties, interest, or losses arising from a filing based on the App's estimates — see §2. Nothing here limits liability for anything that Malaysian law doesn't allow us to limit.

7Termination

You can stop using the App at any time. We may suspend an account that we believe violates §5 or these terms, and will tell you why if we do.

8Governing law

These terms are governed by the laws of Malaysia. Questions about either document go to the same address as §7 of the Privacy Policy above.