Privacy Policy

This policy explains what personal data KiraLocum ("the App") collects, why, and what you can do about it. It's written to reflect what the App actually does, not a generic template. If something here doesn't match what you see in the App, tell us at the email above.

1. What KiraLocum is

KiraLocum is a personal earnings ledger for Malaysian locum doctors and dentists, with an optional built-in estimate of what to set aside for LHDN. It is not a job marketplace, does not file anything with LHDN on your behalf, and does not give tax advice.

2. Where your data is stored

From version 1.0.4 of the App, your records are stored on your own device. Unless you turn on KiraLocum Cloud (see below), your clinics, rate cards, sessions, payment accounts, expenses, goals, tax profile and profile details stay on your phone and are not sent to our servers. The only personal data we hold for every user is what's needed to sign you in (section 3.1).

KiraLocum Cloud is part of KiraLocum Plus. If you have Plus and keep KiraLocum Cloud switched on in Settings, your records are also stored on our servers so they stay in sync across your devices. You can switch it off at any time, and choose whether to keep or delete the copy on our servers.

Earlier versions. Before version 1.0.4, the App synced every user's records to our servers. If you used an earlier version and don't have Plus, that copy is kept as it was, unchanged and no longer updated, so that it can be restored if you get Plus. You can delete it at any time in Settings (Data & backup → Delete cloud copy) or by deleting your account.

Your own backup. In Settings (Backup) you can back up your records to your own iCloud Drive (iPhone) or Google Drive (Android), and restore them on a new or reset phone. The backup is kept in a private folder that only the App can see, in your Apple or Google account under their terms; it never passes through our servers and we have no access to it. On Android, voucher photos are included unless you switch off "Include voucher photos" (see 3.5). Automatic backups run about once a week when you open the App, unless you turn them off. To remove a Google Drive backup, use Google Drive's settings (Manage apps → KiraLocum → Delete hidden app data); an iCloud backup can be removed under your iCloud storage settings.

Device backups. If your phone's own backup is on (iCloud Backup on iPhone, Google backup on Android), your KiraLocum records are included in it, in your own Apple or Google account, under their terms. We have no access to these backups.

3. Information we collect

3.1 Account information. To sign you in we hold your email address and, if you sign up with email, your name and password (handled by our backend provider, Supabase, which stores only a salted hash of your password; we never see it in plain text). If you sign in with Apple or Google, we receive the name and email address they share with us (with Apple, this may be a private relay address).

3.2 Profile information. Title, full name and display name, if you choose to enter them. Earlier versions also let you enter a professional registration number (e.g. MMC/MDC number); the App no longer asks for it. Stored on your device, and on our servers only with KiraLocum Cloud.

3.3 Your records. Clinics, rate cards, shifts/sessions, payment accounts, expenses, tags and monthly goals that you create in the App. Stored on your device, and on our servers only with KiraLocum Cloud.

3.4 Tax profile information. If you use the tax estimator: your residency status, whether you have salaried employment income, your estimated annual salary, PCB (monthly tax deduction) already paid, zakat/fitrah paid, and the tax reliefs you claim. This is used only to compute an on-device estimate of what to set aside for LHDN. It is stored on your device, and on our servers only with KiraLocum Cloud. It is never transmitted to LHDN or any tax authority, and the App never files anything on your behalf.

3.5 Payment vouchers and receipts. Photos you capture or choose for a shift or expense stay on your device: on iPhone in a "KiraLocum" album in your photo library (and, if you choose, a Vouchers folder in the Files app); on Android in the App's own private storage and, unless you switch it off, in your own Google Drive backup (see section 2). The images themselves never reach our servers. The App keeps a reference to each photo and a checksum (SHA-256) so it can tell you if a photo has gone missing or changed; with KiraLocum Cloud, that reference and checksum (not the photo) are synced too.

3.6 Calendar data. If you enable calendar sync, the App reads events from all calendars on your device within a rolling window, looking for titles or locations matching keywords you configure (e.g. "locum"), and offers matches as draft sessions for you to confirm. Nothing is saved automatically. The App writes only to its own dedicated "KiraLocum" calendar on your device; it never edits or deletes events in your other calendars. Calendar data is not uploaded to our servers, except as the sessions you choose to keep when KiraLocum Cloud is on.

3.7 Notifications. If you enable reminders (the weekly goal reminder, day-of, 1-hour and 12-hour shift reminders, or unclosed-shift reminders), the App schedules local notifications on your device. They do not use a push notification server and are not visible to us.

3.8 Purchases. If you buy KiraLocum Plus, the purchase is handled by the Apple App Store or Google Play. Our subscription provider, RevenueCat, receives your account's user ID and your purchase history so the App knows whether Plus is active. We never receive your payment card details.

4. How we use your information

We use the information above solely to operate the App for you: signing you in, checking whether you have Plus, computing totals and the tax estimate on your device, reminding you about your goals and shifts, and, with KiraLocum Cloud, keeping your records in sync across your own devices. We do not use your data for advertising, and we do not sell or share your data with anyone for their own purposes.

5. Who processes data for us

• Supabase (our backend and database provider), hosted in the ap-southeast-1 (Singapore) region, acting as our data processor. It holds your sign-in details for every user, and your records only with KiraLocum Cloud (or a copy from an earlier version, see section 2), under row-level security so only your own account can read or write them.
• RevenueCat, our subscription provider, acting as our data processor for purchase status (section 3.8).
• Apple and Google, for Sign in with Apple / Google Sign-In if you use them, and as the operating system's own calendar, photo, camera and notification APIs. We do not send your calendar or reminder data to Apple or Google beyond what those APIs inherently require.
• Apple's App Store and Google Play, for purchase and subscription processing if you buy KiraLocum Plus.

We do not use any third-party analytics, advertising, or tracking SDKs in the App as of this policy's date.

6. Data retention

Records on your device stay there until you delete them, delete your account, or remove the App. Data on our servers stays until you delete it: your cloud copy via Settings (Data & backup → Delete cloud copy), or everything via Delete account. Deleted data is removed from our live database straight away; encrypted backups held by our providers are cleared within 90 days. Malaysian tax law (LHDN) generally expects business records to be kept for seven years. This is informational guidance shown in the App, not something we enforce on your data.

7. Your rights

Under Malaysia's Personal Data Protection Act 2010 (as amended), you may:

• Access the personal data we hold about you.
• Correct inaccurate data (most of this you can edit directly in the App).
• Delete your cloud copy in Settings (Data & backup → Delete cloud copy), keeping the records on your device.
• Delete your account and data in Settings (Delete account), which permanently removes your account and all associated records from our servers and from the device you delete it on. This cannot be undone. Voucher photos stay on your device, since they were never uploaded to us, and a backup in your own iCloud or Google Drive stays there until you remove it. Records on another device you've used stay there until you remove the App from it.
• Withdraw consent to calendar access, photo access or notifications at any time, via the App's own settings or your device's system settings.

For any request you can't complete in the App, email kiralocum@gmail.com.

8. Data security

Records on your device are protected by your device's own security (passcode, biometrics and encryption). Data in transit to our servers is encrypted (HTTPS/TLS), and data on our servers is protected by row-level security scoped to your own user ID. We handle your personal data in line with Malaysia's Personal Data Protection Act 2010. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of the data involved.

9. International data transfer

Data we hold on our servers (sign-in details for everyone; records with KiraLocum Cloud) is stored in Singapore (ap-southeast-1). By using the App, you consent to this transfer, which is within the same region as Malaysia and subject to Supabase's own data protection commitments. RevenueCat may process purchase status outside Malaysia under its own data protection commitments.

10. Children's privacy

KiraLocum is a professional tool intended for licensed medical and dental practitioners and is not directed at, or intended for use by, children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above. Continued use of the App after a change constitutes acceptance of the revised policy.

12. Contact

Questions, requests, or concerns about this policy or your data:
HARITHECH SOLUTION (SSM RA0139220-H)
kiralocum@gmail.com