Draft, last updated 2026-10-23
Privacy policy
[LEGAL ENTITY NAME, SSM NO.] ("we", "us") makes RiceNest 米窝, an app that helps a family share a calendar, lists, chores, money, documents and, if they choose, their location. This policy explains what personal data we process, why, who we share it with, how long we keep it and the choices and rights you have.
The family's own information belongs to the family. We hold it to run the app for you, and we don't sell it, use it for advertising or use it to build profiles of you.
1. Who is responsible
[LEGAL ENTITY NAME, SSM NO.], [registered address], is the data user (PDPA) and controller (GDPR) for the personal data described here.
Contact: support@ixencore.com · [postal address] [If appointed: Data protection officer: [DPO name], [DPO email]] [If you serve the EU or UK and have no establishment there: EU representative [name, address]; UK representative [name, address].]
Within a family, the family's owner and admins decide who joins, which features are on and, for children, some privacy settings such as location sharing. They are responsible for adding other people, especially children, with the right authority (see section 6).
2. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Email address, sign-in codes and session tokens | You |
| Profile in each family | Display name, colour, role, birthday (optional), time zone | You or a family admin |
| Family content | Calendar events, timetables, notes, lists, chores, habits, goals, countdowns, recipes, meal plans | You and your family |
| Family chat and comments | Messages in the family chat, replies and reactions, and comments on events, lists, notes, chores and goals | You and your family |
| Contacts | Names, phone numbers, e-mail addresses and other details of the contacts you add to the family's Contacts (for example the clinic or the school office). If you import from your phone's address book, only the entries you pick are copied; the app doesn't change your address book | You and your family; your phone's address book, only when you choose to import |
| Photo albums | The photos you add to family albums | You and your family |
| Money | Wallets, records (amount, date, payee, category, note), budgets, bills, imported bank statement rows | You and your family; bank statement files you choose to import |
| Documents | Titles, details you type (for example passport number and expiry), and the files or photos you add | You and your family |
| Location (only if you turn sharing on) | Position, accuracy, battery level and charging state, places you arrive at or leave, trips, SOS alerts, who looked at your location | Your device; children's location settings may be managed by a family admin |
| Device and notifications | Push notification token, device platform, notification preferences | Your device |
| Connected assistants (only if you connect one) | Which assistant you allowed, what it may do, when it acted for you | You |
| Calendar links | Private calendar feed links you create, calendars you subscribe to | You |
| Activity log | Who changed what in the family (for example "added a member") | The app |
| Subscription (if your family subscribes) | Purchase status, product, renewal and grace-period dates, the store and transaction ID, the family the subscription is for, and which family member bought it. RevenueCat knows the purchase by the family's random ID, never by your name or e-mail. We never see your card details | Apple App Store or Google Play, through RevenueCat |
| Free trial | That your account has used its free trial: your account ID and a one-way hash of your e-mail address, and the trial dates | The app, when you create your first family |
| Support | Messages you send us | You |
We do not use advertising identifiers or tracking across other companies' apps and websites.
When the app crashes, it can send a crash report (what failed, the app version and the phone model and system, never your name, e-mail or family content) to our crash reporting provider, Sentry (Functional Software, Inc.); you can turn this off in Settings › Account › Send crash reports.
To learn which features are used, the app can send usage statistics to our analytics provider, PostHog (PostHog, Inc.). They are pseudonymous, not anonymous: each adult is known to PostHog only by a one-way hash of their member ID, which we could match to your account but PostHog cannot. They say which screens and features adults use, with your role, family size range, plan, language and platform; never names, e-mail, IP address or anything you write. Only owners, admins and adults send them: teens, children and guests send nothing. You can turn this off in Settings › Account › Share usage statistics.
3. Why we use it, and our legal bases
| Purpose | Data | PDPA | GDPR legal basis |
|---|---|---|---|
| Run the app: sign you in, sync your family's content, send reminders | Account, profile, family content, chat and comments, contacts, photo albums, money, documents, device | Consent you give by signing up, and necessary for the service you asked for | Contract (Art. 6(1)(b)) |
| Location sharing, places, trips and SOS | Location | Your express consent, which you can withdraw at any time by turning sharing off | Consent (Art. 6(1)(a)) |
| Connected AI assistants | What you allowed them to see | Your consent when you connect | Consent (Art. 6(1)(a)) |
| Subscriptions and billing | Subscription | Necessary for the contract | Contract (Art. 6(1)(b)); legal obligation for tax records (Art. 6(1)(c)) |
| Security, fraud and abuse prevention, the activity log, one free trial per person | Account, device, activity log, IP addresses in server logs, free trial | Legitimate interests / necessary for the service | Legitimate interests (Art. 6(1)(f)) |
| Answering you | Support messages | Consent | Legitimate interests (Art. 6(1)(f)) |
| Crash reports and usage statistics (you can turn each off) | Crash reports; pseudonymous usage statistics from adults | [Lawyer: consent or legitimate interests] | [Lawyer: legitimate interests (Art. 6(1)(f)) or consent] |
| Complying with law | Any, as required | Legal obligation | Legal obligation (Art. 6(1)(c)) |
Sensitive data. Location, children's data and financial data deserve extra care. Documents you upload may contain health or identity information. We process these only to show them to the people you share them with, and only with your consent (PDPA section 40; GDPR Art. 9(2)(a) where health data is involved).
4. Who can see your data inside the app
Each item has a visibility: the whole family, chosen people, or only you. Roles (owner, admin, adult, teen, child, guest) decide what each member can see and change; the family owner can adjust these. Everyone who can see your location is listed, and you can see each time someone looked. Personal wallets stay private; only a household total is shared if you choose. We enforce these rules in the database, not only in the app.
5. Who we share it with
We don't sell personal data or share it for advertising. We use these service providers (processors), who act on our instructions under contracts that protect your data:
| Provider | What for | Where |
|---|---|---|
| Supabase, Inc. | Database, sign-in, file storage | [Supabase region, e.g. Singapore (ap-southeast-1)] |
| [Hosting provider] | Our API and web app | [region] |
| [Email (SMTP) provider] | Sending sign-in codes | [region] |
| Expo (650 Industries, Inc.) | Delivering push notifications to Apple and Google | United States |
| Apple and Google | Push notification delivery; app store purchases | Worldwide |
| RevenueCat, Inc. | Managing subscriptions | United States |
| Functional Software, Inc. (Sentry) | Crash reports, if you leave them on | [Sentry region] |
| PostHog, Inc. | Usage statistics from adults, if left on | [PostHog region, US or EU cloud] |
| AI assistants you connect (for example Anthropic's Claude, OpenAI's ChatGPT) | Only what you allow, only when you ask them | As set out in their own policies |
Push notifications contain a short title and line (for example "Swim kit, tomorrow"). You can turn them off in the app or in your device settings.
We may disclose data if the law requires it, to protect someone's safety (for example an SOS), or as part of a merger or sale of [LEGAL ENTITY NAME, SSM NO.], in which case this policy continues to apply.
Transfers outside Malaysia / your country. Some providers process data outside Malaysia (and outside the EEA/UK). We transfer data only where the PDPA allows it (section 129, as amended) and, for GDPR, under adequacy decisions or the European Commission's standard contractual clauses. Ask us for a copy of the safeguards.
6. Children
RiceNest 米窝 is for families, so it holds information about children. Children under 13 do not get a login. They use the app through a parent's phone, as part of a family set up by a parent or guardian, who gives consent for them. Teenagers from 13 may have their own login. [If you rely on a higher age of digital consent in some countries (up to 16 in some EU countries; Malaysia: 18 is the age of majority), say so here.]
- A parent or guardian can add a child without a login: the child then has only a profile (name, colour, optional birthday) and the items the family assigns to them. We collect nothing from the child directly: the parent enters and manages the profile.
- A login for a child is made only by an invite from the family's owner or an admin, and only for a child of 13 or over. The app refuses such an invite when the child's birthday shows they are under 13, and, when no birthday is known, asks the parent whether the child is under 13 and keeps the answer with the invite.
- The family's admins can manage a teenager's location sharing and see what they can see.
- We don't use children's data for marketing or profiling, and we don't show ads.
- A parent or guardian can ask us to review, correct or delete their child's data at support@ixencore.com, or do it in the app (Family › member).
If you believe a child has used the app without a parent's consent, contact us and we will delete the account.
7. Location
Location sharing is off until you turn it on. When it is on, the family members you choose see where you are; "Always" lets them see it when the app is closed, and your phone shows that location is in use. You can pause or turn it off at any time. Location history is kept for the number of days the family chose (1 to 90, 7 by default) and then deleted automatically. Records of who looked at a location are kept for 30 days, or longer if the family's history period is longer. Connected assistants can be allowed to see place names or rough areas, never exact points, and every look is shown to you.
8. Money
Money features record what you enter or import. We don't connect to your bank, see your bank credentials or move money. Imported statement files are read on your device; only the rows you keep are stored.
9. How long we keep data
| Data | Kept |
|---|---|
| Account and family content | Until you delete it or your account, or the family is deleted |
| Location history and place events | 1 to 90 days, as the family chooses (default 7) |
| Who looked at a location | 30 days, or the family's history period if longer |
| Push tokens | Until you sign out, the token stops working, or you delete your account |
| Connected assistant authorisations | Until you disconnect, or they expire after [30] days without use |
| Activity log | For as long as the family exists; when you delete your account, entries about you no longer name you |
| Subscription records | [7 years] for tax and accounting |
| Free trial record (account ID, e-mail hash, dates) | Kept after you delete your account, so a new account with the same e-mail doesn't get a second trial; it can't be turned back into your address |
| Backups | Deleted data can remain in encrypted backups for up to [backup retention, e.g. 7 to 30 days, by Supabase plan] |
| Server logs | [retention] |
10. Deleting your account
In the app: More › Account › Delete account, or on the web at https://family.ixencore.com/delete-account. We ask for a code sent to your email, then:
- Your account is scheduled for deletion 7 days later. To cancel, sign in during that time and choose "Keep my account". Sign-ins on other devices, notifications, calendar links and connected assistants end at once, and location sharing pauses.
- After 7 days we delete your account, your profile, your private items and items shared only with chosen people, your personal wallets, your location history, your push tokens and your connected assistants, and the files of documents that are deleted.
- Items you shared with the whole family stay with the family and pass to the family's owner (or the person you hand the family to). Household money records stay with the household. The app shows you what stays and what goes before you confirm.
- If you are the only owner of a family you choose to hand it to another adult or to delete it with everything in it, including children's profiles.
- Activity log entries stay so the family's history makes sense, but no longer name you.
If you can't sign in, email support@ixencore.com from your account's address and we will do it for you within [30] days.
11. Your rights
Depending on where you live, you have the right to:
- Access your data and get a copy: More › Account › Download my data gives you everything you own as a file (and your money records as a spreadsheet). You can also ask us at support@ixencore.com.
- Correct it: edit it in the app, or ask us.
- Delete it (section 10).
- Withdraw consent at any time, for example by turning location sharing off or disconnecting an assistant. This doesn't affect what we did before.
- Data portability (PDPA as amended, GDPR Art. 20): the download is in JSON and CSV.
- Object to or restrict processing based on legitimate interests (GDPR).
- Limit processing (PDPA section 38) and prevent processing likely to cause damage or distress (PDPA section 42).
- Complain to the Personal Data Protection Commissioner of Malaysia (pdp.gov.my), or your local data protection authority in the EU/UK. Please contact us first so we can help.
We reply within [21 days (PDPA)] / [one month (GDPR)]. We may need to confirm it's you. A fee may apply only where the law allows it.
12. Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Who can see what is enforced by the database for every request. Sign-in uses one-time email codes; you can lock the app with Face ID, fingerprint or a passcode. Documents are stored in a private bucket and opened with short-lived links. No system is perfectly secure: if a breach affects you, we will tell you and the regulator as the law requires (PDPA section 12B, GDPR Art. 33-34).
13. Changes
We will tell you in the app before material changes take effect. The date at the top shows the latest version.
14. Contact
[LEGAL ENTITY NAME, SSM NO.], [address], support@ixencore.com. [If you provide one: Bahasa Malaysia version: [link]. In case of inconsistency, the [English/Malay] version prevails.]