Privacy Policy

Last updated: July 2026

This Privacy Policy explains how NATURE BIOZYME SDN BHD ("we", "us", "our") collects, uses, discloses and protects personal data when you use NATURE BIOZYME SDN BHD (the "Service"). We handle personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Who we are

NATURE BIOZYME SDN BHD (Business Reg. No. 202401013733(1559583-u)) is the data controller for personal data processed through the Service. Registered address: No1, lorong selamat 40 . 25050 kuantan, pahang.

2. Data we collect

• Parent/guardian account: name, email address, password (hashed), phone number and billing address.
• Child learning data: the child's name, year/grade, avatar, answers submitted (including handwriting images), scores, progress and in-app activity.
• Payment data: plan purchased and amount. Card and online-banking details are handled directly by our payment processor; we do not store your card number.
• Technical data: cookies and basic log data needed to operate the Service.

3. Children's data

Accounts are opened and controlled by a parent or guardian, who provides consent for the child's data to be processed for the purpose of delivering tutoring and progress tracking. A child does not create their own account.

4. How we use data

• To provide practice questions, AI grading and progress tracking.
• To process purchases and issue receipts.
• To operate the referral/affiliate programme.
• To send service messages (e.g. receipts, expiry reminders) and, where you have provided a phone number, WhatsApp reminders.
• To maintain security and improve the Service.

5. Third parties we share data with

We share the minimum data necessary with service providers who help us run the Service:

• Billplz — payment processing (FPX online banking / cards).
• AI providers (e.g. OpenAI) — a child's submitted answers and handwriting may be processed to generate grading and explanations.
• Email/messaging providers — to deliver receipts and notifications.

We do not sell your personal data.

6. Retention

We keep personal data for as long as your account is active and as required to comply with legal, accounting and tax obligations. You may request deletion of your account, subject to records we must retain by law (e.g. payment records).

7. Security

Passwords are stored hashed, payment pages are handled by our processor, and access to data is restricted. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.

8. Your rights (PDPA)

You may request access to, or correction of, your personal data, and you may withdraw consent or limit certain processing. To exercise these rights, contact us using the details below.

9. Cookies

We use cookies that are necessary for login sessions and for attributing referrals (a referral code you arrive with is remembered for up to 60 days). You can clear cookies in your browser at any time.

10. Contact

Questions about this policy or your data: info@rui.my · 0145866666.