Privacy Policy

**Last Updated: 21 April 2026**

ResitMudah ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

**Please read this Privacy Policy carefully. By using the App, you consent to the practices described in this policy.**

---

## 1. Information We Collect

We collect several types of information to provide and improve our services.

### a) Personal Data You Provide

**Receipt Images and Data:** When you use the App, you may provide us with photographs of your receipts. From these images, we collect and process data including, but not limited to:

- Store/Merchant Name

- Transaction Date and Time

- Total Transaction Amount

- Individual Itemized Purchases

- Any other textual information present on the receipt

**Account and Subscription Information:** When you subscribe to our premium plans, we collect billing information through our third-party payment processors (Google Play Store). We do not store your full payment card details on our servers. We may collect and store information about your subscription tier, purchase history, and subscription status.

### b) Information Collected Automatically

**Device Information:** We may collect information about the device you use to access the App, such as the device model, operating system version, unique device identifiers (including Advertising ID), IP address, and mobile network information.

**Usage Data:** We collect data on how you interact with the App, such as the features you use, time spent on the App, interaction with advertisements, and subscription-related actions.

**Advertising Data (Google AdMob):** When ads are displayed to free-tier users, Google AdMob may collect and process:

- Advertising ID (GAID)

- IP address

- User agent (app/browser identifier)

- Approximate location (based on IP address, not GPS)

- Ad interaction data (impressions, clicks, views)

- App usage behavior relevant to ad targeting

### c) Permissions and Access

To provide core functionalities, the App requests certain permissions:

| Permission | Purpose |

|------------|---------|

| **Camera** | To capture images of your receipts. We never capture photos without your explicit action. Images are processed locally or via encrypted API call, then stored only on your device unless cloud backup is enabled. |

| **Storage (Read/Write)** | To save receipt images and data locally on your device, and to access images you select from your device's gallery. We do not access other files on your device. |

| **Internet** | To facilitate cloud backup (if enabled), communicate with our third-party AI/OCR service, load advertisements (free tier only), and process subscription transactions. |

| **Notifications** | To send you alerts and reminders related to the App's functions and subscription status. |

| **Foreground Service** | To allow data processing (like receipt scanning) to continue even when the app is not in the foreground. |

---

## 2. How We Use Your Information

We use the information we collect for the following purposes:

- **To Provide the Core Service:** To store, organize, and display your receipt data within the App.

- **Text Extraction (OCR):** To use Artificial Intelligence (AI) and Optical Character Recognition (OCR) to automatically detect and extract text from your receipt images.

- **Subscription Management:** To manage your subscription plans, provide tier-specific features, process payments, and communicate about your subscription status.

- **Cloud Backup & Sync:** To securely back up your data to the cloud and sync it across your devices, if you choose to enable this feature.

- **Advertising:** To display advertisements through Google AdMob to **free-tier users only**. Premium subscribers (Basic, Premium, and Business tiers) will **not see any ads**.

- **To Improve the App:** To analyze usage patterns, diagnose technical problems, and fix bugs.

- **To Communicate with You:** To send you notifications related to the App's functionality, service-related announcements, subscription updates, and promotional offers (where permitted by law).

---

## 3. Legal Basis for Processing (For EEA/UK Users)

If you are in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using your information is:

| Purpose | Legal Basis |

|---------|-------------|

| Providing receipt scanning and management services | Performance of a Contract |

| Subscription billing and features | Performance of a Contract |

| Cloud backup (if enabled) | Performance of a Contract |

| **Personalized advertising (free tier)** | **Your Consent** (opt-in required) |

| Non-personalized advertising | Legitimate Interests |

| App analytics and improvement | Legitimate Interests |

| Security and fraud prevention | Legitimate Interests |

**For EEA/UK users:** You will be asked to grant explicit consent for personalized ads before any are served. You can withdraw consent at any time via your device settings or by upgrading to any paid subscription (which removes all ads).

---

## 4. How to Opt Out of Personalized Ads

Even if you are on the free tier, you can opt out of personalized advertising at any time:

**Option 1 – Device Settings (Android):**

1. Go to **Settings** → **Google** → **Ads**

2. Toggle on **Opt out of Ads Personalization**

**Option 2 – Reset Your Advertising ID:**

- In the same menu, tap **Reset advertising ID** to clear your ad profile

**Option 3 – Upgrade to Any Paid Subscription:**

- Basic, Premium, or Business tiers remove **all advertisements** (personalized and non-personalized)

---

## 5. Data Storage and Security

**Local Storage:** Your data is stored locally on your device by default. We use encryption on the device to protect this data.

**Cloud Storage:** If you enable cloud backup, your data will be stored on secure servers provided by our cloud service provider. All data transferred to and stored in the cloud is encrypted:

- **In transit:** TLS 1.2 or higher

- **At rest:** AES-256 encryption

**Data Retention:** We will retain your information only for as long as is necessary for the purposes set out in this policy. Subscription-related data will be retained as required by applicable financial regulations.

**Security Measures:** We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

---

## 6. How to Delete Your Data

You have multiple options to delete your data:

### Option 1 – Delete Within the App (Recommended)

1. Open the App → Go to **Profile** tab

2. Tap **Delete Account**

3. Confirm deletion – this removes all your receipt data and account information

### Option 2 – Delete Individual Receipts

- Go to any receipt → Tap **Delete** → Confirm

### Option 3 – Email Request

- Send an email to **ticherhaz@gmail.com** with the subject line "Delete My ResitMudah Data"

- Include the email address associated with your account

- We will process your request within **7 business days**

**Important Notes:**

- Deleting your account is permanent and cannot be undone

- Cloud backup data will also be deleted

- Subscription cancellations must be done via Google Play Store (separate from account deletion)

---

## 7. Data Sharing and Disclosure

**We value your privacy. We do not and will not sell your personal data to third parties.**

We may share your data only in the following specific circumstances:

### Service Providers

We employ trusted third-party companies to facilitate our Service ("Service Providers"):

|----------|---------|---------------|----------------|

| **Google Play Billing** | Process subscription payments | Purchase tokens (no full card details) | [Google Pay Privacy](https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice) |

### Other Disclosure Circumstances

- **For Legal Reasons:** We may disclose your information if required to do so by law or in response to valid requests by public authorities

- **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction (you will be notified)

---

## 8. Subscription Information

Our App offers the following subscription tiers:

|---------|------|-------|---------|----------|

| **Daily AI Tokens** | 1 | 5 | 20 | 100 |

| **Excel Export** | ❌ | ❌ | ✅ | ✅ |

| **Priority Support** | ❌ | ❌ | ❌ | ✅ |

| **Advertisements** | ✅ (personalized) | ❌ | ❌ | ❌ |

### Subscription Management

- Subscriptions are managed through the **Google Play Store**

- Payment will be charged to your Google Play Account at confirmation of purchase

- Subscriptions automatically renew unless auto-renew is turned off at least 24 hours before the end of the current period

- Your account will be charged for renewal within 24 hours prior to the end of the current period

- You can manage and cancel your subscriptions in your **Google Play Store account settings**

---

## 9. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:

| Right | Description | How to Exercise |

|-------|-------------|-----------------|

| **Access** | View all data we have collected | Within App → Profile → My Data |

| **Portability** | Receive your data in a portable format | Email ticherhaz@gmail.com |

| **Correction** | Edit or correct your receipt data | Edit any receipt directly in the App |

| **Deletion** | Delete your data (account or individual receipts) | Profile → Delete Account (or email request) |

| **Withdraw Consent** | Withdraw consent for personalized ads | Device Settings → Google → Ads → Opt out |

| **Subscription Cancellation** | Cancel your paid subscription | Google Play Store → Subscriptions |

**Response Time:** We will respond to all requests within **30 days** (or less where required by law).

---

## 10. Children's Privacy

Our App is not intended for children under the age of **13**. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately at ticherhaz@gmail.com. We will take steps to delete such information promptly.

---

## 11. International Data Transfers

Your information, including receipt images, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

**Safeguards:** We will ensure that any such transfers comply with applicable data protection laws (including GDPR) by:

- Using Standard Contractual Clauses (SCCs) where required

- Ensuring our service providers are Privacy Shield certified or offer equivalent protections

- Encrypting all data before transfer

---

## 12. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:

| Right | Description |

|-------|-------------|

| **Right to Know** | You can request details about what personal data we collect, use, and disclose |

| **Right to Delete** | You can request deletion of your personal data (see Section 6) |

| **Right to Opt Out** | You can opt out of the "sale" of personal data — **We do not sell your data** |

| **Right to Non-Discrimination** | We will not discriminate against you for exercising your rights |

**To exercise your CCPA rights:** Email **ticherhaz@gmail.com** with "CCPA Request" in the subject line. We will verify your identity before responding.

---

## 13. Data Breach Notification

In the event of a data breach that affects your personal information:

- We will notify you within **72 hours** of becoming aware of the breach

- Notification will be sent via **in-app alert** and/or **email** (if you have provided one)

- We will include: what data was affected, what we are doing to address it, and steps you can take to protect yourself

---

## 14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

1. Posting the new Privacy Policy on this page

2. Updating the "Last Updated" date at the top

3. Sending an **in-app notification** for significant changes

4. (If applicable) Sending an email to subscribed users

You are advised to review this Privacy Policy periodically for any changes. Continued use of the App after changes means you accept the updated policy.

---

## 15. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, our subscription plans, or to exercise your data rights:

**Email:** ticherhaz@gmail.com

**Response Time:** We will respond within 7 business days for general inquiries and within 30 days for data rights requests.

---

Search This Blog

ResitMudah

Privacy Policy

Popular posts from this blog

About Us

Terms and Conditions