Privacy Policy

Simplest Biz helps you keep your business income, expenses, invoices and tax planning in one place. It is made by themSimple ("we", "us") in Malaysia. This policy explains what the app collects, why, where it is kept and the choices you have. We are responsible for your information under Malaysia's Personal Data Protection Act 2010 (PDPA).

• Your records, receipts and invoices belong to you. Only you can see them.
• We never sell your data, and we don't use it for advertising.
• The app has no advertising or analytics trackers.
• Receipts are read on your iPhone, not sent to an outside reading service.
• You can download your data or delete your account at any time in the app.

Only what the app needs to work, and only what you enter:

• Account — your email address, password and name, to create your account and keep it secure. Your password is handled by our sign-in provider and stored only in scrambled (hashed) form. We never see it. If you continue with Apple or Google instead, we receive only your name and email address from them (with Apple you can choose to hide your email), never your Apple or Google password.
• Waitlist— if you join the Simplest Biz waitlist on our website, your email address, kept only to tell you when the app launches. We delete it on request (email support@themsimple.com) and once it's no longer needed.
• Business profile — business name, registration type, business category, SSM number, address, phone, email and logo. Used to set up the right categories and tax rules, and to show your details on invoices and quotations.
• Payment details (Plus) — bank name, account name and number, and payment remarks, shown on your invoices so your clients can pay you. We never use them to make payments.
• Records— income and expenses, with amounts, dates, categories, notes and whether an expense was for your business. Used for your dashboard, reports and tax estimate. When you scan a receipt, we also keep the shop's name with the category you chose, so the app can suggest it next time.
• Documents — photos and PDFs of receipts, EA forms, statements and other supporting documents you attach.
• Clients, quotations and invoices (Plus)— your clients' names, contact person, phone, email and address, and the services, prices and payments on your quotations and invoices.
• Tax information — tax residency, marital status, whether your spouse has income, the number and ages of your children, OKU (disability) status, reliefs, zakat, donations, other income and tax already paid. All optional; used only to estimate your tax.
• Subscription status— from Apple: which plan you have, when it renews, whether you're in your free month, and whether you used an offer code (for example one shared by a creator), so we know which code brought you to Simplest Biz.
• App settings— your language (English or Bahasa Melayu), appearance, reminder day and time, and categories you've hidden.
• Messages to us — what you write when you contact support.

We don't collect advertising identifiers, location, contacts or browsing history. Our service providers keep standard technical logs (such as sign-in times and basic device and network details) to run and secure the service.

Some tax information can be sensitive personal data under the PDPA: OKU status relates to health, and zakat relates to religious belief. Entering it is optional. By entering it, you agree to us using it only to work out your tax estimate and the documents you create from it (such as your Tax Pack). We never use it for anything else.

When you add clients, or details about your spouse or children for tax reliefs, you give us information about other people. Please add only what you are entitled to share and what you need. We process your clients' details only to provide the app to you.

• Face ID or passcode — if you turn on the app lock, iOS checks it. We never receive your Face ID data.
• Camera and photos— only used when you choose to scan or attach a document, or add your logo or profile photo. Scanning uses Apple's document scanner, and cropping your logo or photo happens on your iPhone.
• Reading receipts— text on receipts and documents is read on your iPhone with Apple's built-in technology.
• Reminders — scheduled on your iPhone as local notifications.
• A copy of your data — kept on your iPhone so the app works offline.

• To provide the app: your records, reports, downloads, invoices, quotations, reminders and tax estimates.
• To keep your account secure and send account emails, such as email verification and password resets.
• To check your subscription so the right features are available.
• To answer your questions and fix problems.
• To meet our legal obligations.

We don't sell your information, use it for advertising, or use your records, documents or tax information to train artificial intelligence models.

• Google Firebase — sign-in (including Continue with Google), database and file storage. Your records, invoices, clients and settings are stored on Google Cloud servers in Singapore (asia-southeast1). Receipts, documents and logos you upload are stored on Google Cloud servers in the United States (us-central1). Sign-in may also be processed by Google in other countries, including the United States.
• Apple — Sign in with Apple (if you use it), App Store purchases, subscriptions and refunds. Apple processes your payment; we never see your card details.

We may also disclose information if the law requires it, or to protect our rights, our users or the public. When you share an invoice, quotation, report or download, you choose who receives it (for example by WhatsApp or email).

Your records are stored by Google Cloud in Singapore, and the files you upload (receipts, documents and logos) by Google Cloud in the United States. Information may also be processed in other countries where our providers operate. We use providers that protect personal data to a standard comparable to Malaysian law, as the PDPA requires for transfers outside Malaysia.

• Information is encrypted in transit (HTTPS/TLS) and at rest by our providers.
• Security rules let each account read and write only its own data and documents.
• You can lock the app with Face ID or your passcode.

No system is perfectly secure. If a data breach affects your personal data, we will notify you and the authorities as the law requires.

We keep your information while your account exists. If your subscription or free month ends, your data stays available to view and download until you delete your account.

When you delete your account in the app (Profile & Settings → Delete account), we delete your account, records, invoices, clients and uploaded documents from our servers, and disconnect Simplest Biz from your Apple or Google account if you signed in with one. Copies in our providers' system backups are removed within their normal cycle.

LHDN generally expects businesses to keep records for 7 years. Please download what you need from Reports (PDF, Excel or CSV) before deleting your account.

Under the PDPA you can ask to access and correct your personal data, withdraw consent, limit how we use it, and receive a copy of it. In the app you can:

• View and edit everything you have entered.
• Download your records and reports.
• Turn reminders on or off.
• Delete your account in Profile & Settings → Delete account.
• Cancel your subscription in your iPhone's Settings → your name → Subscriptions.

For anything else, email us. We reply within 21 days, as the PDPA requires.

Simplest Biz is for people running a business and is not intended for anyone under 18. We don't knowingly collect personal data from children, except details about your children that you enter for tax reliefs.

If we change how we handle your data, we'll update the "Last updated" date above and, for significant changes, tell you in the app or by email before they take effect.

Questions, requests or complaints about your personal data: support@themsimple.com. See also our Terms of Use.