Privacy Policy

1. Scope and responsibilities

This notice explains how KutipYuran handles personal data when you visit our website, create an account, use the platform or contact support. KutipYuran handles account administration, platform security, support and its own subscription billing. Coaches and business operators decide why they collect their families’ records and use KutipYuran to manage those records. Contact the relevant business about its class administration; you may also contact KutipYuran for help routing a privacy request.

2. Data we collect and its sources

You or your business may provide names, account email addresses and phone numbers, business details, branches and classes, parent-child relationships, child names and enrolment information, invoice amounts, payment status, transaction references and uploaded payment proof. We also keep authentication records, reminder consent and opt-out records, relevant WhatsApp connection and message records, support communications, and technical security or audit logs.

Information comes from account holders, parents, authorised business users, their imports and linked payment or communication services. Group discovery retrieves available group metadata for the connected business; it does not automatically enrol WhatsApp group participants as parents or children.

3. Why we use personal data

We use data to create and secure accounts; link parents to their children; manage branches, invoices and payment reviews; provide authorised messaging; administer subscriptions; answer support requests; investigate misuse; and maintain reliable records. We use payment-provider confirmations to reconcile payments. A payment screenshot alone does not verify a payment.

Required registration and billing details enable access and essential records. If you do not provide required details, we may be unable to create your account, link a family, process the payment or provide the requested feature. Optional information may be left blank where the form permits it.

4. Children’s and family records

Parent accounts are intended for parents or guardians managing their children’s records. Businesses and guardians should provide accurate information and have the authority to register children. Parent access is limited to the family linked to that account; authorised business users can access the records within their permitted workspace. Do not upload unnecessary sensitive information about a child.

5. Sharing and service providers

Data is made available to the relevant business owner, authorised assigned staff and the linked parent where needed to provide the service. Infrastructure, payment and communication providers process the information necessary for their functions. For example, CHIP receives the details required to process a KutipYuran subscription payment, and WhatsApp processes messages sent through its service. Those providers’ own privacy terms also apply to their services.

We may disclose information where required by law, to respond to a lawful request, or to protect accounts and investigate suspected abuse. We do not sell personal data. When a provider processes information outside Malaysia, applicable cross-border data protection requirements must be considered and appropriate safeguards applied.

6. Reminders and your choices

Businesses are responsible for recording the appropriate permission for their reminders. Private fee follow-ups use linked invoice and guardian records and check payment status and opt-out settings. General group notices must not disclose private invoice links or lists of unpaid families. You may ask the business to stop private reminders; supported STOP replies are recorded as opt-outs. Essential account or transaction communications may still be needed.

You can contact us to ask about access to your personal data, corrections, withdrawal of consent, deletion, or other rights available under applicable law. We may verify your identity and involve the relevant business before acting. Some requests may be limited by legal record-keeping duties or the rights of others, and we will explain relevant limitations.

7. Security and retention

We use access controls, protected authentication, encrypted stored integration credentials, scoped workspaces and operational logs to help protect data. No online service can promise absolute security. Keep your password and OTP private and tell us if you suspect unauthorised access.

Records are retained for as long as necessary for the service, legitimate operational needs and applicable legal or accounting requirements. Account closure may not immediately remove invoices, payment history, audit records or backup copies that must be retained or are awaiting routine expiry. Contact us to request a review of retention or deletion for your records.

8. Cookies and linked websites

The application uses essential session cookies to keep you signed in and protect account requests. Blocking these cookies may prevent sign-in or secure actions. External payment and WhatsApp pages may use their own cookies and have their own privacy notices.

9. Contact and changes

For privacy enquiries, contact KutipYuran on WhatsApp at +60 11-3336 2167. State that your message is a privacy request and identify the business or account involved. Do not send passwords, OTPs or full card details. We will review the request and explain any information needed to respond.

We will update this notice when the service or our data handling changes. The updated date is shown below. This notice is available in English and Bahasa Melayu.