Privacy Policy
In effect from 2026-08-12
Fiskal holds some of the most private information a person has — what they earn and what they spend. This policy explains, in plain language, exactly what we collect, where it is kept, who else can see it, and how you can get it back or delete it.
Who we are
Fiskal is operated by Nakhoda Technology, a business registered in Malaysia. Fiskal is a software tool for managing your own tax records. We are not the Inland Revenue Board (LHDN), we are not connected to them, and we never file anything on your behalf.
What we collect, and why
We collect only what the service actually needs. Everything below exists because a specific feature would not work without it.
Only one thing is required: your email address, because an account cannot exist without it. Everything else is voluntary — provide it and the matching feature works; leave it out and that feature simply is not used, with no other consequence.
Your account: your email address, and either a password (stored only as an irreversible scramble, never as text we could read) or a sign-in identifier from Apple or Google if you use those buttons. If you sign in with Apple and choose “Hide My Email”, we only ever see Apple’s forwarding address, not your real one.
Your tax profile: the answers you give in the opening questions — your first name, whether you are married, whether you or a family member is a person with disabilities, your children and their categories, which form you file, and the price band of your first home if you claim that relief. These decide which reliefs the app tracks for you.
Your receipts: the photograph, the merchant, the amount, the date, the year of assessment, and which relief you tagged it under. These are your evidence if LHDN ever asks.
Your figures: the income, deductions and statement amounts you enter, so the app can estimate your tax and refund.
Your subscription status, if you buy Premium: whether it is active and until when. Your card details are handled entirely by Apple or Google and never reach us — we could not see them if we wanted to.
Sensitive information and your explicit consent
Some tax categories reveal information Malaysian law treats as sensitive: OKU status and medical spending are health information, and zakat or religious-travel records can reveal religious belief. The app asks for your explicit consent, in plain language, the first time you touch any of these — before anything is stored. Saying no is respected: that category simply is not used, and everything else keeps working. Your consent is recorded with its date, and removing the entries — or deleting your account — withdraws it.
Your children’s details (their year of birth and, if you choose, their OKU status) are given by you as their parent or guardian, under the same explicit consent, and are used only to work out the child reliefs you claim.
Emails we send you
There are two kinds, and they are treated differently.
Emails the account needs: confirming your address, signing you in, resetting a password, telling you an account action happened, and the dormancy warning described below. These cannot be switched off while your account exists, because they are how the account works.
News about Fiskal: new features, changes to tax rules that affect you, and occasional offers on our plans. We have not sent any of these yet. When we do, every one will carry an unsubscribe link, and one click stops them for good.
Malaysia’s Personal Data Protection Act gives you the right to tell us to stop using your details for direct marketing at any time, and we must comply. You can do that with the unsubscribe link or by writing to privacy@nakhodatechnology.com. Stopping the news emails never affects your account or the emails the account needs.
We never give your email address to anyone else for their own marketing.
What we never collect
We do not ask for your MyTax password or log in to LHDN for you. We do not collect your identity card number, your location, your contacts, or the other photographs on your phone — the app only ever uses the pictures you deliberately take or choose for a receipt. We do not sell anyone’s data, we show no advertising inside Fiskal, and we never combine what you do here with data from other companies to target you elsewhere.
Where your data is kept
Your data is stored and processed in Singapore. This was a deliberate choice, not a default: our database and file storage (Supabase) run in Singapore, and our website servers (Vercel) are pinned to Singapore too. Malaysia’s PDPA allows transfers outside the country where the data is adequately protected, and keeping everything in one nearby region is how we keep that assessment simple and honest.
Who else can see it
A small number of companies help us run Fiskal. Each one only receives what its job requires:
Supabase — stores your account, your records and your receipt images.
Vercel — runs the fiskal.my website.
Resend — delivers our sign-in and verification emails. It sees your email address and the message, nothing else.
Sentry — tells us when something breaks. We deliberately strip out every piece of personal information before an error report leaves our servers: no name, no email, no account number, no IP address, and never the contents of what you typed. Sentry learns that something failed and where in the code — never whose data it was.
Apple and Google — handle sign-in if you use their buttons, and handle payment if you subscribe. They tell us only that a subscription is valid and until when.
RevenueCat — relays that subscription status between the app stores and us. It sees an account reference and the subscription state, never your tax data.
We will never sell your data or hand it to anyone else, except where Malaysian law requires it of us.
How long we keep it
While your account is open, we keep your records for as long as you need them. That is deliberate: LHDN expects supporting documents to be kept for seven years, so deleting your receipts on a schedule of our own would defeat the entire purpose of the app.
When you delete your account, we delete your data — your profile, your figures, your receipts and their images — and your login itself. This is immediate and complete, and we test it automatically to prove nothing is left behind. Copies may persist briefly in our provider’s encrypted backups before those are overwritten in the normal cycle.
We do not delete accounts for inactivity on any short schedule — your records wait for you, because you may genuinely need them years later. Only after eight years without a single sign-in (beyond LHDN’s own seven-year record-keeping window, so the records have outlived their audit purpose) will we email you a warning, and close the account 90 days later if we hear nothing.
We keep a small security log of sensitive actions — that an account was deleted, that data was exported, that a password was changed — with the time and an account reference, and no personal details at all. It is automatically erased after 24 months.
Your rights
Under Malaysia’s Personal Data Protection Act you can ask to see the data we hold about you, correct it, take it elsewhere, or have it deleted. Two of those are already buttons rather than requests:
Download everything: your account settings page gives you a complete file of what we hold, in one click.
Delete everything: the same page permanently closes your account and erases your data.
For anything else — a correction, a question, or a complaint — write to privacy@nakhodatechnology.com. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner of Malaysia.
How we protect it
Every piece of your data is fenced off in the database so that it can only ever be reached by your own signed-in session — not by another user, and not by the app on someone else’s phone. Receipt images are private files, reachable only through short-lived links issued to you. Sign-in sessions on your phone are encrypted using a key held in the phone’s own secure hardware. We run automated tests against the live system that try to reach one account’s data from another, and they must fail for the code to ship.
If a breach ever affects your personal data, we will notify the Personal Data Protection Commissioner within the law’s 72-hour deadline and, where there is a risk of significant harm to you, tell you plainly within 7 days.
Children
Fiskal is for adults managing their own tax and is not intended for anyone under 18.
Changes to this policy
If we change this policy in a way that affects you, we will say so in the app and on this page, and update the date at the top. We will not quietly broaden what we collect.