This policy covers the Kindygo website and mobile apps, operated by MZR Global Sdn Bhd. It explains how personal information is used when parents and guardians interact with participating organisations, centres and campuses.
Request account and data deletion
You can request deletion without signing in or reinstalling the app. You can also request deletion of particular information without closing your whole account.
- Email [email protected] with the subject Kindygo account and data deletion request.
- Include the email address registered with Kindygo, your name, and whether you want to close your entire account or delete particular data. List the relevant organisation or organisations, if known.
- We will verify that you are entitled to make the request before any deletion. If you cannot access your registered email, tell us so we can discuss another way to verify your identity.
This button opens your email app; you must send the email to make the request. You can also copy the address into your email service. Do not send your password, payment-card details or identity documents in your initial request.
After reviewing your request, we will explain what can be deleted, what must be retained and why, and the expected completion timeframe. Requests are handled by our support team; visiting this page does not automatically delete anything.
1. Information we handle
- Account and contact information: names, email addresses, telephone numbers, addresses and information supplied in your profile or registration.
- Children and enrolments: child and guardian details, centre and campus enrolments, and documents or photographs provided for those services. This may include sensitive information supplied for a child's care or registration.
- Identity information: MyKad or passport numbers and, where requested for your centre's requirements, scans or photographs of a parent's or guardian's identity document. Copies may contain your photograph, full name, identity number, nationality, date of birth, address and other details shown on the document.
- Financial records: quotations, invoices, payment amounts, receipts, refunds, balances and payment-provider references.
- Service and security information: device identifiers, device and operating-system details, session records, access times, IP addresses, diagnostic records and support correspondence.
The information involved depends on the features you use and the requirements of your organisation. Parents and guardians should provide children's information only when authorised to do so.
2. MyKad and passport copies
Your centre may require a copy of your MyKad or, where applicable, your passport to verify your identity and maintain enrolment or care records. This may be necessary to meet requirements of Jabatan Pendidikan Negeri (JPN, State Education Department) or Jabatan Kebajikan Masyarakat (JKM, Department of Social Welfare) in Malaysia, depending on the centre's registration, the service provided and the applicable regulatory request.
Requirements differ between centres and purposes. The centre should explain the applicable requirement, which document or pages are needed, whether providing a copy is compulsory or optional, and when it is needed. A document marked optional during Kindygo account registration may still be required later for the centre's enrolment or regulatory process. If you cannot provide it, contact the centre to discuss any accepted alternative; the affected process may be delayed or unable to proceed where the document is required.
Kindygo processes uploaded copies to support these purposes on behalf of the relevant organisation. Access is restricted to authorised people who need the document for verification, administration or compliance. Relevant information may be provided to JPN or JKM where necessary to meet an applicable requirement or lawful request. Uploading a copy does not automatically send it to either authority. Identity copies are not used for advertising.
Provide only the document or pages requested through the centre's designated upload process. Ask the centre whether a purpose-specific watermark or masking of unrelated details is acceptable before altering a copy. Do not attach identity documents to an ordinary support email unless a secure submission arrangement has been agreed.
3. How information is used and shared
We use information to operate accounts, manage enrolments, display invoices and payments, process payment requests, deliver service communications, respond to support requests, prevent misuse and meet legal obligations.
Relevant information is available to authorised people within the organisations you interact with. Service providers, including hosting, communications and payment providers, process information needed to deliver their services. Information may also be disclosed where required by law or to resolve a dispute. Payment providers handle payment authorisation under their own privacy policies.
Each organisation is responsible for its own educational, care and financial records. Kindygo supports the platform and may need to coordinate your privacy request with the relevant organisation. An organisation's separate privacy notice may also apply.
4. Security and storage
We use HTTPS, access controls and account/session protections to help safeguard information. Browser cookies support sign-in and security; mobile apps store credentials using the device's protected storage. MyKad and passport uploads are held in private storage with access checks, rather than being published as public files. No storage or transmission method is completely risk-free.
Information is processed through Kindygo and the service providers supporting it. Provider processing locations may differ from your location. Access should be limited to the people and services that need it for the purposes described here.
5. What deletion means, and what we retain
Account deletion does not mean every associated record can be erased. Kindygo records financial transactions for participating organisations. Deletion requests do not cancel invoices, settle outstanding balances or remove an organisation's legal record-keeping duties.
Information eligible for removal: account access and personal profile information, uploaded materials and other associated data that are no longer needed and are not subject to a retention requirement can be deleted or anonymised following verification and review.
Financial records: invoices, receipts, payments, refunds, accounting entries and the minimum identifying details needed to support those records may be retained for tax, accounting, audit, fraud prevention and dispute resolution. Malaysian tax record-keeping requirements commonly require seven years; the applicable starting point and period depend on the record and filing circumstances. Records may need to be kept longer where a legal obligation, investigation or unresolved dispute requires it.
MyKad and passport copies: copies are retained only for as long as needed for the stated verification, enrolment or regulatory purpose, or an applicable legal obligation or unresolved dispute. Financial record retention does not automatically justify keeping a full identity-document scan for the same period. You may ask the centre or Kindygo why a copy is still needed and request its deletion when that need ends. Any continuing retention requirement will be explained when responding to your request.
Other retained information: limited security records, proof of your request and records required for a child's enrolment or an organisation's legal obligations may remain for the relevant purpose. We will explain applicable retention when responding to your request. Backups may retain copies until their scheduled expiry; these copies are not intended for ordinary use.
Retained information is restricted to the purposes that justify keeping it and should be deleted or anonymised when those purposes and applicable retention requirements end. We cannot promise immediate or complete erasure of all historical records.
If you belong to several organisations, specify whether your request covers all of Kindygo or a particular organisation. Removing one relationship must not erase another organisation's records or another guardian's legitimate access. We will clarify the scope with you.
6. Your choices and privacy requests
Contact [email protected] to request access, correction, deletion, or information about how your data is handled. You may also ask about withdrawing consent where processing depends on consent. Some services may no longer be available if information essential to those services is removed.
We may need to verify your identity or authority as a guardian and consult the relevant organisation. We will explain any limits on fulfilling your request and any further information needed.
7. Changes and contact
We may update this policy as services or requirements change. The date above identifies the latest version. For questions, contact MZR Global Sdn Bhd, the operator of Kindygo, at [email protected].