Legal

Privacy Policy

Last updated: 31 July 2026

This policy explains what personal data Cekap Apps Enterprise collects, why, and what we do with it. We handle personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and its amendments.

On this page

Who is responsible
What we collect
Why we use it
Data your customers give you
Who we share it with
How long we keep it
Your rights
How we protect it
If something goes wrong
Cookies
Contact

1. Who is responsible

Cekap Apps Enterprise (Registration no. 202603193101 (SA0656041-P)), trading as CekapApps, 2, Jalan Kemuning Prima 33/51E, Kemuning Utama, Seksyen 33, 40400 Shah Alam, Selangor, Malaysia, is the data user responsible for the personal data described here. Contact: hello@cekapapps.com.

2. What we collect

Category	Examples	Source
Account details	Name, business name, email, mobile number, password (stored only as a cryptographic hash)	You, at sign-up
Billing details	Business registration details, billing address, subscription plan, invoices and payment records	You, and our payment provider
Business content	Products, prices, sales, receipts, cash entries, students, classes, uploaded images	You, as you use the Service
Technical data	IP address, browser type, timestamps, error logs, audit records of actions taken in your account	Automatically

We do not store your card or bank details. Payments are processed by our payment provider; we receive only a confirmation and a reference. See our Payment Policy.

3. Why we use it

To provide the Service — create your account, run the software, store your records, send receipts and notifications you ask for.
To take payment — process subscriptions, issue invoices, and recover unpaid amounts.
To support you — answer your questions by email or WhatsApp.
To keep the Service safe — detect abuse, screen images uploaded to public catalogues, investigate incidents, and keep audit records.
To meet legal obligations — accounting and tax record-keeping.

We do not sell personal data, and we do not use your business data to train artificial-intelligence models for anyone else.

4. Data your own customers or students give you

When you record your customers' or students' details in our software, you are responsible for that data and for telling those people how you use it. We process it only on your instructions, in order to run the Service for you. You must have a lawful basis for collecting it.

We share personal data only with service providers who help us run the Service, and only as far as they need it:

Hosting and database — our cloud infrastructure provider, for running the application and storing data.
Payment provider — to take subscription payments.
Email delivery — to send transactional email such as password resets and receipts.
Image screening — automated screening of images uploaded to public catalogues, to keep unlawful content off our platform.

Some of these providers operate outside Malaysia, which means your data may be transferred abroad. Where that happens we take reasonable steps to ensure it remains protected to a standard comparable with the PDPA.

We will also disclose data where we are legally required to — for example in response to a valid order from a Malaysian authority or court.

6. How long we keep it

Account and business data — while your account is active, and for up to 90 days after closure, after which it is deleted.
Invoices and payment records — for seven years, as required for Malaysian tax and statutory record-keeping.
Backups — rolling backups are retained for a limited period and then overwritten.
Abuse reports and moderation records — kept while needed to protect the platform.

7. Your rights

Under the PDPA you may ask us to:

give you access to the personal data we hold about you;
correct anything that is inaccurate or out of date;
limit how we process it, or withdraw a consent you have given;
delete it, where we are not required to keep it.

Write to hello@cekapapps.com. We will respond within 21 days. You can also export most of your data yourself from inside the Service at any time.

8. How we protect it

Encryption in transit, hashed passwords, per-customer data isolation enforced at the database level, access limited to those who need it, and audit logging of sensitive actions. Full detail is in our Security Policy.

9. If something goes wrong

If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected customers as required under the PDPA, without undue delay.

10. Cookies

We use a small number of cookies that are necessary for the Service to work — chiefly to keep you signed in and to keep your session secure. We do not use advertising cookies or third-party tracking cookies on our application. Our public marketing pages may load web fonts from a third-party provider.

11. Contact

Questions, requests or complaints about privacy: hello@cekapapps.com, or WhatsApp +60 18-585 8552. If you are not satisfied with our response you may complain to the Personal Data Protection Department (JPDP), Malaysia.