Privacy Policy

Last updated: 4 June 2026

This Privacy Policy explains how ResitGo (“we”, “us”, or “the Owner”) collects, uses, and protects personal data in connection with ResitGo (the “Service”). We handle personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA).

1. Roles

As an account holder (for example, a tuition centre), you decide what information about your students and business you enter into the Service. For that information, you are the data user and we process it on your behalf solely to provide the Service. For your own account details, we are the data user.

2. Information we process

Account information — the email address and login credentials used to access the Service.
Business information — your centre’s name, address, logo, and receipt settings.
Student and payment information — the student, class, payment, and receipt records you enter to run your centre.

We do not use analytics or tracking tools, and we do not send automated marketing, WhatsApp, or email messages. The receipt-sharing feature is triggered by you, not automatically.

3. How we use information

We use the information only to operate and secure the Service: to authenticate you, store and display your records, generate receipts, and keep each account’s data isolated from others.

4. Data isolation and security

Each record is tied to the account that created it, and access is restricted by row-level security so that one account cannot read or modify another account’s data. While we take reasonable measures to protect personal data, no method of transmission or storage is completely secure.

5. Hosting and processors

The Service runs on third-party infrastructure (including Supabase for database and authentication, and Vercel for hosting). These providers process data on our behalf to operate the Service and may store data on servers located outside Malaysia.

6. Disclosure

We do not sell personal data. We may disclose information where required by law, or to the service providers described above strictly to operate the Service.

7. Retention

We retain records for as long as your account is active or as needed to provide the Service. Because receipts and payments are financial records, you are responsible for retaining them for any period your own legal or tax obligations require.

8. Your rights

Subject to the PDPA, you may request access to or correction of the personal data we hold about you. Requests about student records held by a tuition centre should be directed to that centre, which controls those records.

9. Changes

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision.

10. Contact

For privacy questions or requests, contact the Owner at resitgo.support@gmail.com.