Privacy policy

• Account details: name, email address, phone number and your role (shop, driver or admin). Passwords are stored only as a secure hash by our sign-in provider.
• Shop details: business and shop name, address, map location, collection contact person and phone, and business documents a shop uploads for verification.
• Collection records: pickup requests, dates, oil weights, prices and amounts paid, cash vouchers, delivery receipts, and the photos and signatures captured at handover.
• Driver location: while a driver is on an active collection, the phone shares its location so the shop and office can follow the pickup.
• Notifications: if you allow push notifications, a browser push subscription so we can send pickup updates.
• Technical data: our hosting providers keep standard server logs (such as request time and IP address) to keep the service secure and working.

Only to run oil collections: to register and verify shops, schedule and complete pickups, record weights and payments, keep centre stock, prepare official reports, send pickup updates and keep accounts secure. We do not sell personal data, show advertising or use it for profiling.

The MK Management app in ChatGPT lets an approved MK Management Admin ask questions about shops, completed collections, reports and centre stock. It is read-only: it cannot create, change or delete anything.

You connect it by signing in with your MK Management Admin account. It only answers with data that account can already see in the app. To answer, ChatGPT sends us the question details it needs, such as a shop name or a date range, and we send back the matching records. We do not receive or keep your ChatGPT conversations, and we do not store the questions you ask. OpenAI handles your ChatGPT conversations under its own privacy policy.

You can disconnect the app at any time in ChatGPT's settings.

• Staff of Madu Kenanga Sdn. Bhd. and its drivers, each seeing only what their role needs.
• Service providers that host and run MK Management for us: Supabase (database, sign-in and private file storage) and Vercel (website hosting, Singapore region).
• Google, to look up shop addresses on the map, and Apple, Google or Mozilla push services to deliver notifications.
• OpenAI, only the answers an Admin requests through the ChatGPT app.
• Authorities, where the law requires it.

• Driver live location: deleted automatically after 2 days.
• In-app notifications: deleted automatically after 90 days.
• Downloaded report files: deleted automatically after 7 days.
• Accounts, shop details and collection records: kept while the account is active and afterwards for as long as business and tax record-keeping laws require.

Access is checked on the server for every request, photos, signatures and documents are kept in private storage, and signed records cannot be edited — corrections are recorded as new revisions.

You can ask to see, correct or delete your personal data, withdraw consent for notifications or location sharing in your phone settings, or ask any privacy question by emailing devoptest050@gmail.com. Some collection records must be kept for legal reasons even after an account is closed; we will tell you when that applies.

We will update the date at the top of this page when this policy changes.