Privacy Policy
Dasar Privasi

1. Personal data we collect

We do not collect your card number or online banking credentials. We do not collect precise location. We do not knowingly collect sensitive personal data (such as health, religion or political opinions) unless you choose to include it in your own documents.

2. App permissions

• Camera – used only when you open the Smart Scanner to capture a document or QR code.
• Photos and files – used only when you choose an image or file to upload, scan or attach.
• Google Drive (limited access) – MyPortfolio can open only the files you select or create through the app. It cannot see the rest of your Drive.
• Internet – needed to sync your account and use online features.
• Notifications – optional, for reminders and updates. You can turn them off in your phone settings.

3. How we use your data

• To create and secure your account and let you sign in.
• To store and organise your profile, evidence links, training, CPD and e-learning records.
• To provide OCR and AI Services you request, such as drafting APEL.A, APEL.C, APEL.Q or JPK-PPT portfolios, PLO/CLO similarity reports, CVs and job-requirement matches.
• To process your RM5 Premium unlock and AI token purchases, and to show your Premium Member status.
• To share your profile or portfolio with an institution or employer, only when you choose to (for example by QR code).
• To respond to support requests and send important service notices.
• To fix bugs, prevent misuse and improve the Service.
• To meet legal, tax and regulatory obligations.

We do not sell your personal data, and we do not use your portfolio content to build advertising profiles.

4. How the AI Services handle your data

• AI runs only when you start an AI Service. Free accounts cannot use AI Services.
• Our AI Services are powered by Claude AI from Anthropic. Before text is sent to our AI provider, personal identifiers that are not needed (such as identity card numbers, phone numbers and addresses) are masked.
• The AI is instructed to use only facts from your own records. Results are drafts for you to review and edit.
• The AI does not make decisions about you. It does not grade, accept or reject any application. All recognition decisions are made by authorised institutions and human assessors.
• Our AI provider processes the text to return a result and is not permitted by us to use your content to advertise to you.

5. Who we share data with

We share personal data only with service providers that help us run MyPortfolio, under appropriate confidentiality and security terms:

We may also disclose data where required by law, a court order or a government authority, or to protect the rights and safety of our users and the public. We share your portfolio with institutions or employers only on your instruction.

6. Transfer outside Malaysia

Some of our service providers store or process data on servers outside Malaysia. When this happens, we take reasonable steps to ensure your data receives a level of protection comparable to the PDPA.

7. How we protect your data

• All data is sent over encrypted connections (HTTPS/TLS).
• Each account can access only its own records.
• Google Drive access is limited to files you choose.
• Access to our systems is restricted to authorised team members who need it.
• We review our security practices regularly. No system is 100% secure, but we work to protect your data and will notify you and the authorities of a serious breach as required by law.

8. How long we keep data

• Account and portfolio data: while your account is active.
• After you delete your account: removed from our active systems within 30 days, and from backups within [90] days.
• Purchase records: kept for as long as required by Malaysian tax and accounting laws.
• Files in your Google Drive: these belong to you. We never delete them.

9. Deleting your account and data

You can delete your account and personal data at any time:

• In the app: Profile → Settings → Delete Account [confirm menu path].
• Without the app: email myportfolio.innovation@gmail.com from your registered email address with the subject “Delete my MyPortfolio account”.

We will confirm your request and complete it within 30 days. Deleting your account removes your profile, evidence links, training, CPD and e-learning records, and any unused AI tokens. A one-time Premium purchase is not refundable after deletion unless required by law. You may also ask us to delete only part of your data.

10. Your rights under the PDPA

• Access – ask for a copy of the personal data we hold about you.
• Correction – correct data that is inaccurate, incomplete or out of date. Most details can be edited directly in the app.
• Withdraw consent – stop us from processing your data. This may mean we can no longer provide the Service.
• Limit processing – ask us to limit how your data is used, including for direct marketing.

Send requests to myportfolio.innovation@gmail.com. We will respond within 21 days. We may need to verify your identity first.

Obligatory and voluntary data: your name and email are required to create an account. Other details are voluntary, but some features will not work without them.

11. Children

MyPortfolio is designed for adult learners, students and working professionals. It is not directed at children under 13, and we do not knowingly collect their data. Users aged 13 to 17 should use the Service only with the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

12. Promotional content

The app may show promotional banners about learning, career or partner offers. We do not share your personal data with these partners, and tapping a banner may open a third-party website with its own privacy policy. [Confirm whether the app shows ads, and declare this accurately in Google Play Console.]

13. Important disclaimers

• APEL disclaimer: MyPortfolio supports evidence organisation and readiness only. It does not award academic qualifications and does not replace authorised institutions, APEL centres, the Malaysian Qualifications Agency (MQA), the Department of Skills Development (JPK), professional bodies or official assessment processes. MyPortfolio is not affiliated with or endorsed by these bodies.
• Evidence sharing: you control who can open your Google Drive files. Please check each file’s sharing setting before submitting it to an institution.

14. Changes to this policy

We may update this policy from time to time. We will show the new effective date here and notify you in the app of significant changes.

This policy is available in English and Bahasa Malaysia. If there is any difference between the two versions, the English version prevails.

1. Data peribadi yang kami kumpul

• Akaun dan hubungan: nama, alamat e-mel, nombor telefon, foto profil (daripada anda, atau Google/LinkedIn jika anda log masuk dengannya).
• Profil, pendidikan dan pekerjaan: jawatan semasa, ringkasan profesional, kelayakan, institusi, sejarah pekerjaan, majikan dan kemahiran.
• Pautan bukti: pautan Google Drive kepada sijil, transkrip dan surat, bersama tajuk dan kategori (Formal, Tidak Formal, Bukan Formal).
• Dokumen yang anda pilih untuk diproses: teks yang dibaca daripada fail atau imej kamera semasa anda menggunakan OCR atau Perkhidmatan AI.
• Rekod pembelajaran dan CPD: log latihan, aktiviti dan jam CPD, kemajuan e-pembelajaran.
• Pembelian: status Premium, baki token AI, rujukan dan tarikh transaksi.
• Aktiviti aplikasi dan diagnostik: log masuk, ciri yang digunakan, log ranap dan prestasi, model peranti dan versi Android.
• Mesej sokongan: soalan dan laporan masalah yang anda hantar.

Kami tidak mengumpul nombor kad atau maklumat log masuk perbankan dalam talian anda, dan tidak mengumpul lokasi tepat anda.

2. Kebenaran aplikasi

• Kamera – hanya apabila anda membuka Smart Scanner untuk mengimbas dokumen atau kod QR.
• Foto dan fail – hanya apabila anda memilih imej atau fail untuk dimuat naik, diimbas atau dilampirkan.
• Google Drive (akses terhad) – MyPortfolio hanya boleh membuka fail yang anda pilih, bukan keseluruhan Drive anda.
• Internet – untuk menyegerakkan akaun dan menggunakan ciri dalam talian.
• Pemberitahuan – pilihan, untuk peringatan dan makluman.

3. Cara kami menggunakan data anda

• Untuk mewujud dan melindungi akaun anda.
• Untuk menyimpan dan menyusun profil, pautan bukti, latihan, CPD dan rekod e-pembelajaran.
• Untuk menyediakan OCR dan Perkhidmatan AI yang anda minta, seperti draf portfolio APEL.A, APEL.C, APEL.Q atau JPK-PPT, laporan persamaan PLO/CLO, CV dan padanan keperluan kerja.
• Untuk memproses pembelian Premium RM5 dan token AI, serta memaparkan status Ahli Premium anda.
• Untuk berkongsi profil atau portfolio anda dengan institusi atau majikan hanya apabila anda memilih untuk berbuat demikian.
• Untuk membalas permintaan sokongan, membaiki masalah, mencegah salah guna dan menambah baik Perkhidmatan.
• Untuk mematuhi kewajipan undang-undang, cukai dan peraturan.

Kami tidak menjual data peribadi anda.

4. Perkhidmatan AI

• Perkhidmatan AI kami dikuasakan oleh Claude AI daripada Anthropic. AI hanya berjalan apabila anda memulakan Perkhidmatan AI. Akaun percuma tidak boleh menggunakan Perkhidmatan AI.
• Pengecam peribadi yang tidak diperlukan (seperti nombor kad pengenalan, telefon dan alamat) disembunyikan sebelum teks dihantar kepada penyedia AI kami.
• Hasil AI ialah draf untuk anda semak dan ubah.
• AI tidak membuat keputusan tentang anda. Semua keputusan pengiktirafan dibuat oleh institusi yang diberi kuasa dan penilai manusia.

5. Pihak yang kami kongsi data

Kami hanya berkongsi data dengan penyedia perkhidmatan yang membantu kami menjalankan MyPortfolio: Google Firebase dan Google Cloud (log masuk, pangkalan data, storan, laporan ranap), Google Drive API dan Google Sign-In, LinkedIn (jika anda memilihnya), penyedia AI (Anthropic, pembangun Claude AI), dan rakan pembayaran (Google Play Billing dan/atau SecurePay). Kami juga boleh mendedahkan data jika dikehendaki oleh undang-undang.

6. Pemindahan ke luar Malaysia

Sesetengah penyedia perkhidmatan kami menyimpan atau memproses data di luar Malaysia. Kami mengambil langkah munasabah untuk memastikan data anda dilindungi pada tahap yang setanding dengan PDPA.

7. Keselamatan data

Data dihantar melalui sambungan yang disulitkan (HTTPS/TLS). Setiap akaun hanya boleh mengakses rekodnya sendiri, akses Google Drive terhad kepada fail yang anda pilih, dan akses kepada sistem kami terhad kepada ahli pasukan yang diberi kuasa.

8. Tempoh penyimpanan

Data akaun disimpan selagi akaun anda aktif. Selepas akaun dipadam, data dibuang daripada sistem aktif dalam tempoh 30 hari dan daripada sandaran dalam tempoh [90] hari. Rekod pembelian disimpan selama yang dikehendaki oleh undang-undang cukai dan perakaunan Malaysia. Fail dalam Google Drive anda adalah milik anda dan tidak akan dipadam oleh kami.

9. Memadam akaun dan data

• Dalam aplikasi: Profil → Tetapan → Padam Akaun [sahkan laluan menu].
• Tanpa aplikasi: e-mel myportfolio.innovation@gmail.com daripada alamat e-mel berdaftar anda dengan subjek “Padam akaun MyPortfolio saya”.

Kami akan mengesahkan dan menyelesaikan permintaan anda dalam tempoh 30 hari. Anda juga boleh meminta kami memadam sebahagian data sahaja.

10. Hak anda di bawah PDPA

• Akses – meminta salinan data peribadi anda.
• Pembetulan – membetulkan data yang tidak tepat atau tidak lengkap.
• Tarik balik persetujuan – menghentikan pemprosesan data anda.
• Hadkan pemprosesan – termasuk untuk pemasaran langsung.

Hantar permintaan ke myportfolio.innovation@gmail.com. Kami akan membalas dalam tempoh 21 hari. Nama dan e-mel adalah wajib untuk mewujudkan akaun; maklumat lain adalah pilihan, tetapi sesetengah ciri tidak akan berfungsi tanpanya.

11. Kanak-kanak

MyPortfolio tidak ditujukan kepada kanak-kanak di bawah umur 13 tahun. Pengguna berumur 13 hingga 17 tahun hendaklah menggunakan Perkhidmatan dengan persetujuan ibu bapa atau penjaga.

12. Penafian penting

Penafian APEL: MyPortfolio hanya menyokong penyusunan bukti dan kesediaan. Ia tidak menganugerahkan kelayakan akademik dan tidak menggantikan institusi yang diberi kuasa, pusat APEL, Agensi Kelayakan Malaysia (MQA), Jabatan Pembangunan Kemahiran (JPK), badan profesional atau proses penilaian rasmi. MyPortfolio tidak bergabung dengan atau disokong oleh badan-badan ini.

Perkongsian bukti: anda mengawal siapa yang boleh membuka fail Google Drive anda. Sila semak tetapan perkongsian setiap fail sebelum dihantar.

13. Perubahan dasar

Kami mungkin mengemas kini dasar ini dari semasa ke semasa dan akan memaklumkan perubahan penting dalam aplikasi. Jika terdapat perbezaan antara versi Bahasa Inggeris dan Bahasa Malaysia, versi Bahasa Inggeris akan diguna pakai.