Privacy Policy

Effective Date: April 2026 · Last Updated: 2026-04-16 · App Version: 1.0.0

Overview

Mudah Tani ("the App") is a mobile gardening application developed for urban gardeners across the Nusantara region, including Malaysia, Indonesia, Singapore, and Brunei. This privacy policy explains how we collect, use, and protect your information when you use our iOS and Android applications.

In short: We collect minimal data. Analytics are anonymous. You can opt out anytime.

1. Information We Collect

1.1 Account Information (Optional)

If you create an account, we collect:

Email address — for authentication and password recovery
Display name — shown to family team members
Profile photo — optional, stored securely

Account creation is optional. The App works fully in offline/anonymous mode without an account.

1.2 User-Generated Content

When you use the App, you may create:

Garden plans — crop selections and planting schedules
Task completions— records of gardening tasks you've done
Progress photos — images of your garden and plants
Yield entries — harvest weight and notes
Team data — family team membership and shared garden activities

This content is stored locally on your device (SQLite database) and, if you have an account, synced to our cloud service for backup and team sharing.

1.3 Anonymous Usage Analytics

We collect anonymous usage events to understand how people use the App and improve it:

Events are identified by an anonymous UUID — not linked to your email, name, or device
8 event types and 5 user properties are tracked
No personal identifiable information (PII) is included in analytics events

1.4 Device Information

We do not actively collect device information. The App uses:

Device locale — to display content in Bahasa Malaysia, Bahasa Indonesia, or English
Device timezone — for scheduling reminders at the correct local time
Camera/photo library access — only when you choose to take or attach photos (permission requested)

1.5 Pre-launch Email Signup (Website Only)

If you submit your email through the "Notify me at launch" form on the home page of mudahtani.my, we collect the following — separate from any in-app data:

Email address — to email you when Mudah Tani launches on the App Store / Google Play
Locale (en / ms / id) of the page you signed up from — so the launch announcement is sent in your language
SHA-256 hash of your IP address — for spam-prevention rate-limiting (5 signups per hour per network). We never store the raw IP.
Truncated User-Agent string — for the same spam-prevention purpose

How we email you: we send these emails through Resend, a transactional email provider, which processes your email address only to deliver our messages. See Resend's privacy policy. Every email includes a one-click unsubscribelink (and an RFC 8058 list-unsubscribe header that your mail app may show as an "Unsubscribe" button). Unsubscribing removes you from all future pre-launch emails immediately.

Legal basis: consent (you submitted the form after reading the disclosure linking to this page). Retention: until launch + 90 days, OR sooner if you unsubscribe or ask to be removed (email support@mudahtani.my). When you unsubscribe we keep a minimal suppression record — just your email address — so we don't accidentally contact you again. Storage: Supabase (project region ap-southeast-1).

2. How We Use Your Information

Provide App functionality (account info, user content)
Sync data across devices (account info, garden data)
Family team collaboration (display name, shared garden data)
Send task reminders (notification preferences, task schedules)
Improve the App (anonymous analytics only)
Respond to support requests (email address)

We do not use your data for advertising, selling to third parties, profiling, or location tracking.

3. Data Storage and Security

Local data: On your device using SQLite (encrypted by device OS)
Cloud data: Hosted on secure cloud infrastructure (PostgreSQL)
Authentication: Encrypted credentials with Row-Level Security (RLS) policies
Sensitive tokens: Stored in platform-native secure storage (iOS Keychain / Android Keystore)
All cloud communication uses HTTPS/TLS encryption

4. Data Sharing

We do not share your personal data with third parties, except:

Cloud infrastructure provider — data processor, not controller
Apple/Google — standard platform services for app distribution and push notifications
Law enforcement — only if required by applicable law in your jurisdiction or valid court order

We will never sell your personal data.

5. Your Rights and Choices

Analytics Opt-Out

You can opt out anytime: More > Settings > Analytics
When opted out, zero analytics data is sent
Opting out does not affect App functionality

Account and Data

View your data: All your garden data is visible in the App
Export your data: Use the export feature to download your garden logs and yield records
Delete your account: Contact support@mudahtani.my
Delete local data: Uninstalling the App removes all local data

PDPA (Malaysia) Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

Access your personal data
Correct inaccurate personal data
Withdraw consent for data processing
Request deletion of your personal data

To exercise these rights, contact us at support@mudahtani.my.

UU PDP (Indonesia) Rights

Under Indonesia's Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi / UU PDP), you have the right to:

Obtain information about the collection, processing, and sharing of your personal data
Access and obtain a copy of your personal data that we hold
Correct inaccurate or incomplete personal data
Delete your personal data (right to erasure), subject to legal retention obligations
Withdraw consent at any time for data processing based on consent
Object to processing of your personal data for direct marketing purposes
Restrict processing in certain circumstances
Data portability — receive your data in a structured, commonly used format
Lodge a complaint with the relevant supervisory authority if you believe your rights have been violated

Cross-border data transfer: Your data is processed and stored on cloud infrastructure which may be located outside Indonesia. By using the App, you consent to this transfer. We ensure that adequate data protection safeguards are in place in accordance with Article 56 of UU PDP.

Data controller: Mudah Tani is the data controller (Pengendali Data Pribadi) responsible for your personal data. For any requests related to your rights under UU PDP, contact us at support@mudahtani.my.

PDPA (Singapore) Rights

Under Singapore's Personal Data Protection Act 2012 (PDPA), you have the right to:

Access your personal data held by us
Correct inaccurate or incomplete personal data
Withdraw consent for the collection, use, or disclosure of your personal data
Request data portability — receive your data in a commonly used format
Request deletion of your personal data, subject to legal and business retention requirements

We do not transfer your personal data outside Singapore without ensuring adequate protection in accordance with the PDPA. To exercise these rights, contact us at support@mudahtani.my.

Other Jurisdictions

If you are located in Brunei, the Philippines, or any other jurisdiction with applicable data protection laws, we are committed to respecting your privacy rights. We apply the same data protection standards to all users regardless of location — minimal data collection, anonymous analytics, no selling of personal data, and the ability to access, correct, or delete your data on request. Contact support@mudahtani.my to exercise any applicable rights under your local laws.

6. Children's Privacy

Mudah Tani is rated 4+ and does not knowingly collect personal information from children under 13. Family team features are managed by the team creator (parent/guardian).

7. Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
Local data: Retained on your device until you uninstall the App.
Analytics data: Retained indefinitely in anonymised, aggregated form.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the App or via email. The "Last Updated" date at the top indicates when this policy was last revised.

9. Contact Us

If you have questions about this privacy policy or your data:
Email: support@mudahtani.my