Data Privacy Notice
Last updated: 20 June 2026
This Data Privacy Notice describes, in plain terms, the categories of personal data BajetKita handles and the basis on which it is processed. It is intended to align with the spirit of Malaysia's Personal Data Protection Act (PDPA), written for BajetKita in our own words rather than copied from another source.
Categories of Data Handled
- Profile setup data (name, household type, dependents, salary/cycle day)
- Income source records (amount, frequency, owner)
- Bills (category, amount, due date, payment status)
- Payment records (what was paid, when, and how much)
- Budget categories and monthly spending limits
- DSR (Debt Service Ratio) inputs and calculated outputs
- Authentication email and basic profile information from Firebase
Purpose of Processing
This data is processed solely to provide the budgeting, bill-tracking, and financial-readiness features you use within BajetKita — for example, calculating your monthly balance, showing bill due dates, and estimating your DSR against Malaysian bank affordability rules.
Where Data Is Stored
By default, your data is stored locally on your own device (browser storage). If you create an account and use the Cloud Sync feature, a copy is stored in our cloud database under a path scoped only to your account — no other user can read or write to it.
Data Sharing
BajetKita does not sell or share your personal financial data with third parties for marketing purposes. Data is only processed by the infrastructure providers required to run the app (such as our authentication and cloud database provider) under their own data-processing safeguards.
Your Rights Under PDPA Principles
- Right to access the personal data we hold about you.
- Right to correct inaccurate or outdated personal data.
- Right to request deletion of your account and associated data.
- Right to withdraw consent for cloud backup at any time by simply not using that feature.
Data Retention
Data is retained for as long as your account remains active, or until you request deletion. Local device data is retained until you clear it yourself or uninstall/clear your browser storage.
Ownership
BajetKita is a company-led product. The formal legal owner of this notice will be confirmed and published here as the company's legal structure is finalised.