Qawiy · Malaysia · English
Privacy Notice for Malaysia
Last updated: 3 August 2026
This notice applies when you use Qawiy in Malaysia. It explains how we process your personal data in line with Malaysia’s Personal Data Protection Act 2010.
1. Who we are
Qawiy is operated by AAF Digital PLT (referred to as “Qawiy”, “we”, “us” or “our”). This Privacy Notice explains how we collect, use, store and protect your personal data when you use the Qawiy application and website.
2. Personal data we process and your choices
The table below explains the data we process, its source, whether it is required, and what happens if it is not provided.
| Data category | Source | Required? | If it is not provided |
|---|---|---|---|
| Account and authentication information: full name, email address and a unique account identifier. | Provided directly by you during email registration, or received from Google when you choose to sign in with Google. | Required to create and use an account that syncs data. | You may still use public content without an account, but cannot create an account, save bookmarks or sync progress between devices. |
| Bookmarks and dhikr progress that you choose to sync. | Generated from your choices and actions in Qawiy after you sign in. | Voluntary. | There is no effect on public content; those items and progress will not be saved or synced. |
| Technical and security information such as device, browser, IP address or error logs needed to deliver and protect the service. | Generated automatically by your device, browser and our infrastructure when you use Qawiy. | Limited technical information is required to operate and protect the service. | Qawiy may not function properly or access may be restricted if required technical information is unavailable. |
| Usage analytics such as pages viewed and interactions within the app. | Generated automatically while you use Qawiy and collected through our analytics tools when available. | Voluntary for Qawiy’s core features. | You may still use core features; we simply cannot use that data to measure and improve the product experience. |
| Information in support messages or enquiries. | Provided directly by you when you contact us. | Voluntary, except for the minimum information needed to respond to your enquiry. | We may be unable to respond to, investigate or resolve your enquiry. |
3. How we use personal data
We use this data to provide and sync your account, keep the service secure, respond to enquiries, improve Qawiy through usage analytics, and meet legal obligations. We do not sell your personal data.
4. Parties that process data
We use service providers needed to operate Qawiy, including Supabase for authentication and data synchronisation, and PostHog for usage analytics. We may also disclose data when required by law or to protect the rights, safety and integrity of Qawiy and its users.
5. Transfers outside Malaysia
Our service providers may process data outside Malaysia. If this happens, we will take reasonable steps to ensure appropriate protection in line with applicable legal requirements.
6. Security and retention
We use reasonable technical and organisational safeguards to protect personal data. We retain it while your account is active, while it is needed for the stated purposes, or for as long as required by law. You may request deletion of your account and associated data, subject to records we are required to keep by law.
7. Your rights and choices
Subject to applicable law, you may request access to or correction of your personal data, withdraw consent, or raise a question or complaint about how your data is processed. Withdrawing consent or deleting your account may affect features that require an account, such as synchronisation.
8. Contact us and changes to this notice
For questions, personal-data requests or complaints, email us at aaf.digital.plt@gmail.com. We may update this notice from time to time. The “last updated” date above shows the current version.