Privacy Policy

In effect from 2026-10-12

Fiskal holds some of the most private information a person has — what they earn and what they spend. This policy explains, in plain language, exactly what we collect, where it is kept, who else can see it, and how you can get it back or delete it.

Who we are

Fiskal is operated by Nakhoda Technology, a business registered in Malaysia. Fiskal is a software tool for managing your own tax records. We are not the Inland Revenue Board (LHDN), we are not connected to them, and we never file anything on your behalf.

What we collect, and why

We collect only what the service actually needs. Everything below exists because a specific feature would not work without it.

Only one thing is required: your email address, because an account cannot exist without it. Everything else is voluntary — provide it and the matching feature works; leave it out and that feature simply is not used, with no other consequence.

Your account: your email address, and either a password (stored only as an irreversible scramble, never as text we could read) or a sign-in identifier from Apple or Google if you use those buttons. If you sign in with Apple and choose “Hide My Email”, we only ever see Apple’s forwarding address, not your real one.

Your tax profile: the answers you give in the opening questions — your first name, whether you are married, whether you or a family member is a person with disabilities, your children and their categories, which form you file, and the price band of your first home if you claim that relief. These decide which reliefs the app tracks for you.

Your receipts: the photograph or PDF, the merchant, the amount, the date, the year of assessment, and which relief you tagged it under or which Business Book or Rental record it belongs to. These are your evidence if LHDN ever asks.

Your figures: the income, deductions and statement amounts you enter, so the app can estimate your tax and refund.

Your Business Book, if you use it: the businesses you run, where their money sits, and every money-in and money-out record. The section “Your Business Book” below explains exactly what it holds, why, where, and for how long.

Your Rental, if you use it: your properties, their tenancies, and every rent, deposit and cost record. The section “Your Rental” below explains exactly what it holds, why, where, and for how long.

Your subscription status, if you buy Premium: whether it is active and until when. Your card details are handled entirely by Apple or Google and never reach us — we could not see them if we wanted to.

Sensitive information and your explicit consent

Some tax categories reveal information Malaysian law treats as sensitive: OKU status and medical spending are health information, and zakat or religious-travel records can reveal religious belief. The app asks for your explicit consent, in plain language, the first time you touch any of these — before anything is stored. Saying no is respected: that category simply is not used, and everything else keeps working. Your consent is recorded with its date, and removing the entries — or deleting your account — withdraws it.

Your children’s details (their year of birth and, if you choose, their OKU status) are given by you as their parent or guardian, under the same explicit consent, and are used only to work out the child reliefs you claim.

Emails we send you

There are two kinds, and they are treated differently.

Emails the account needs: confirming your address, signing you in, resetting a password, telling you an account action happened, and the dormancy warning described below. These cannot be switched off while your account exists, because they are how the account works.

News about Fiskal: new features, changes to tax rules that affect you, and occasional offers on our plans. We have not sent any of these yet. When we do, every one will carry an unsubscribe link, and one click stops them for good.

Malaysia’s Personal Data Protection Act gives you the right to tell us to stop using your details for direct marketing at any time, and we must comply. You can do that with the unsubscribe link or by writing to privacy@fiskal.my. Stopping the news emails never affects your account or the emails the account needs.

We never give your email address to anyone else for their own marketing.

What we never collect

We do not ask for your MyTax password or log in to LHDN for you. We do not collect your identity card number, your location, your contacts, or the other photographs on your phone — the app only ever uses the pictures or files you deliberately take or choose for a receipt. We do not sell anyone’s data, we show no advertising inside Fiskal, and we never combine what you do here with data from other companies to target you elsewhere.

Your Business Book

Business Book is where you keep the books of a business you run yourself. It holds only what you enter:

Your businesses: the name, what the business does, when it started, whether it is registered with SSM and its registration number, and its business activity code — each only if you give it.

Where the money sits: a name you choose for each bank account, e-wallet, selling-platform balance or cash, and the balance and date it started from. We never ask for an account number.

Your records: for every money in and money out, the date, the amount, the category, how much of it was for the business, your answers to Fiskal’s questions about it, your note, the name of whoever paid you or whom you paid if you type one, and how many receipts you attached. The receipts themselves, photos or PDFs, are covered under “Your receipts” above.

If you type the name of a client, supplier or worker, write only what your books need. It is kept with your record and protected in the same way as the rest of your data.

Your Business Book is kept on our server for every account, free or paid — in the same database in Singapore as the rest of your data, fenced off so that only you can reach it. The Fiskal app also keeps a copy on your phone, so your books open even without a connection. That copy belongs to your account alone: before anyone else can use Fiskal on the same phone, the app asks them to erase it.

Why we keep it on our server: so your books are the same on your phone and on the website, so they survive a lost or replaced phone, and so your plan’s limits apply the same everywhere. We use your Business Book only to run it for you — never for anything else.

If you kept business books in Fiskal before Business Book existed, they are copied into Business Book once, on our server. Your old books are left exactly as they were.

Malaysian tax law requires everyone carrying on a business to keep their records for seven years from the end of the year the income relates to (Income Tax Act 1967, section 82). So Fiskal never deletes your business records on a schedule of its own: they stay for as long as your account is open.

When you delete a record, it disappears from your books, but we keep it, marked as deleted, so that it cannot come back from another phone and your books can always show what was recorded. We also keep a history of every change — what a record said before and after, and when. Both are in the file you get when you download your data, and both are erased with your account.

Your Rental

Rental is where you keep the records of property you let out. It holds only what you enter:

Your properties: a name you choose, what kind of place it is, its address if you give it, your share, when it was first rented out, and who looks after the building.

Your tenancies: a name for each tenant, used only as a label, the rent and its due day, when the tenancy started and ends, and the deposits you hold. We never ask for a tenant’s IC or passport number, phone number or email.

Your records: rent received (the months it was for, how it was paid, and a bank reference if you type one), deposits received, returned or kept, other money in, and costs (what each was for, your answers to Fiskal’s questions, who you paid if you type it, and your note), and how many receipts you attached. The receipts themselves, photos or PDFs, are covered under “Your receipts” above.

Your tenants are other people. Type only what your records need: a first name, or a label such as “Room 2”, is enough.

Your Rental is kept on our server for every account, free or paid, in the same database in Singapore as the rest of your data, fenced off so that only you can reach it. The Fiskal app also keeps a copy on your phone, so it opens even without a connection. That copy belongs to your account alone: before anyone else can use Fiskal on the same phone, the app asks them to erase it.

Why we keep it on our server: so your records survive a lost or replaced phone, and so your plan’s limits apply the same everywhere. We use your Rental records only to run Rental for you, never for anything else. Rental’s reminders are worked out on your phone; nothing about them is sent anywhere.

If you typed rental figures in Fiskal before, the years you typed keep them. Properties from your old register come in only if you choose to bring them in.

Fiskal never deletes your rental records on a schedule of its own: they stay for as long as your account is open. A record you delete is kept, marked as deleted, with the history of its changes. Both are in your download, and both are erased with your account.

Where your data is kept

Your data is stored and processed in Singapore. This was a deliberate choice, not a default: our database and file storage (Supabase) run in Singapore, and our website servers (Vercel) are pinned to Singapore too. Malaysia’s PDPA allows transfers outside the country where the data is adequately protected, and keeping everything in one nearby region is how we keep that assessment simple and honest.

Who else can see it

A small number of companies help us run Fiskal. Each one only receives what its job requires:

Supabase — stores your account, your records and your receipt images.

Vercel — runs the fiskal.my website.

Resend — delivers our sign-in and verification emails. It sees your email address and the message, nothing else.

Sentry — tells us when something breaks. We deliberately strip out every piece of personal information before an error report leaves our servers: no name, no email, no account number, no IP address, and never the contents of what you typed. Sentry learns that something failed and where in the code — never whose data it was.

Apple and Google — handle sign-in if you use their buttons, and handle payment if you subscribe. They tell us only that a subscription is valid and until when.

RevenueCat — relays that subscription status between the app stores and us. It sees an account reference and the subscription state, never your tax data.

We will never sell your data or hand it to anyone else, except where Malaysian law requires it of us.

How long we keep it

While your account is open, we keep your records for as long as you need them. That is deliberate: LHDN expects supporting documents to be kept for seven years, so deleting your receipts on a schedule of our own would defeat the entire purpose of the app.

When you delete your account, we delete your data — your profile, your figures, your receipts and their images, your Business Book and your Rental records with their deleted records and their history of changes — and your login itself. If you delete it in the app, Fiskal’s data on that phone is erased too. This is immediate and complete, and we test it automatically to prove nothing is left behind. Copies may persist briefly in our provider’s encrypted backups before those are overwritten in the normal cycle.

We do not delete accounts for inactivity on any short schedule — your records wait for you, because you may genuinely need them years later. Only after eight years without a single sign-in (beyond LHDN’s own seven-year record-keeping window, so the records have outlived their audit purpose) will we email you a warning, and close the account 90 days later if we hear nothing.

We keep a small security log of sensitive actions — that an account was deleted, that data was exported, that a password was changed — with the time and an account reference, and no personal details at all. It is automatically erased after 24 months.

Your rights

Under Malaysia’s Personal Data Protection Act you can ask to see the data we hold about you, correct it, take it elsewhere, or have it deleted. Two of those are already buttons rather than requests:

Download everything: your account settings page gives you a complete file of what we hold, in one click.

Delete everything: the same page permanently closes your account and erases your data.

For anything else — a correction, a question, or a complaint — write to privacy@fiskal.my. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner of Malaysia.

How we protect it

Every piece of your data is fenced off in the database so that it can only ever be reached by your own signed-in session — not by another user, and not by the app on someone else’s phone. Receipt images are private files, reachable only through short-lived links issued to you. Sign-in sessions on your phone are encrypted using a key held in the phone’s own secure hardware. We run automated tests against the live system that try to reach one account’s data from another, and they must fail for the code to ship.

If a breach ever affects your personal data, we will notify the Personal Data Protection Commissioner within the law’s 72-hour deadline and, where there is a risk of significant harm to you, tell you plainly within 7 days.

Children

Fiskal is for adults managing their own tax and is not intended for anyone under 18.

Changes to this policy

If we change this policy in a way that affects you, we will say so in the app and on this page, and update the date at the top. We will not quietly broaden what we collect.