Kokkoon

Privacy Policy

Last Updated: April 12, 2026

At Kokkoon, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information across all apps developed by Kokkoon.

1. Information We Collect

We collect information that you provide directly to us and information we get from your use of our Apps:

Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture. We use this solely for authentication and account personalization.

User-Uploaded Data: We collect and store any data, files, or information you voluntarily upload to our Apps.

Billing Information: If you subscribe to a paid plan, our third-party payment processors collect payment details. We do not store credit card numbers on our own servers.

2. How We Use Your Data

We use the collected data for the following purposes:

To provide, maintain, and update our Apps.

To manage your account and provide customer support.

To process payments for subscriptions.

To inform you about software updates or "End of Life" notices for specific Apps.

3. Data Storage and Security

Google Cloud Infrastructure: Your data is stored securely on Google Cloud Platform (GCP). We utilize industry-standard encryption (AES-256) for data at rest and TLS/SSL for data in transit.

No Third-Party Sharing: We do not sell, trade, or share your personal data with third-party advertisers or unauthorized entities. Data is only shared when necessary to comply with the law or to provide our core services (e.g., sharing your email with our email service provider to send you account alerts).

4. Legal Basis for Processing (GDPR/PDPA)

Consent: By using our Apps and signing in with Google, you consent to our processing of your data.

Contractual Necessity: We process your data to fulfill our obligations to you (e.g., providing the app features you signed up for).

Legal Obligation: We may disclose data if required by law in Malaysia or other applicable jurisdictions.

5. Your Rights

Under GDPR and PDPA, you have the following rights:

Access & Portability: You can request a copy of your data at any time.

Correction: You can request that we update or correct inaccurate information.

Deletion (Right to be Forgotten): You can request that we delete your account and all associated data.

Withdrawal of Consent: You can disconnect your Google Account from our Apps at any time via your Google Security settings.

6. International Data Transfers

As a global service, your data may be processed on servers located outside of your home country. We ensure that all data transfers comply with the security standards required by the PDPA and GDPR.

7. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]