Privacy Policy

JACK CAPITAL SDN. BHD. built the KOIKO app as a Commercial app. This SERVICE is provided by JACK CAPITAL SDN. BHD. and is intended for use as is.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at KOIKO unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to full name, email, telephone number, and a valid payment method information. The information that we request will be retained by us and used as described in this privacy policy.

The app does use third party services that may collect information used to identify you.

Link to privacy policy of third-party service providers used by the app:

Analytics and Session Recording

We use Google Firebase (Analytics and Crashlytics) and PostHog to understand how the app is used and to diagnose faults. These providers act on our instructions only; we do not sell your information, and we do not use it for advertising or to track you across other companies' apps or websites.

Through these providers we collect:

Your account identifier — the internal user ID assigned when you register. We do not send your name, email address, telephone number or date of birth to these providers.
How you use the app — screens viewed, merchants and promotions opened, items favourited, searches you submit, and the outcome of checkout, payment and voucher redemption.
Purchase activity — order identifiers, amounts and currency.
Diagnostics — crash reports and error messages.

Session recording. PostHog records how you interact with the app's screens so we can reproduce problems that are difficult to describe in a bug report. These recordings reconstruct the interface and your gestures; they do not capture audio, your camera, or anything outside the KOIKO app.

Text you type, images, and screen areas showing personal or sensitive information are hidden before a recording leaves your device. This includes one-time passcodes, your telephone number, date of birth, name, voucher codes and order details. We review this masking whenever we add a screen that displays personal information.

Location Information

If you grant location permission, we use your device's location to show merchants near you and to sort search results by distance. Your coordinates are sent to our servers only as part of that search request, where they are used to calculate distances and then discarded. We do not store them, we do not attach them to your account, and we do not share them with the analytics providers listed above.

Location permission is optional. If you decline, the app remains fully usable — you can choose an area manually instead, and only distance-based sorting is unavailable. You can change or withdraw this permission at any time in your device settings.

Data Retention

We keep personal information only as long as it is needed for the purpose it was collected for, or as long as the law requires:

Session recordings — 30 days, then deleted automatically.
Crash and error reports — 90 days.
Usage and analytics events — 12 months.
Account and order records — for as long as your account is open. If you close your account we keep the underlying record where we still need it for accounting, tax, fraud-prevention and dispute-resolution purposes, and so that merchants' settlement records remain accurate. You can ask us to erase your personal information — see Your Rights and Choices below.

Your Rights and Choices

Under the Malaysian Personal Data Protection Act 2010 you may ask us to access or correct the personal information we hold about you, and you may limit how we process it. To make a request, contact us at [email protected].

You can close your account at any time from within the app: open Account and choose Delete account. This immediately and permanently removes your access, and cannot be undone from within the app.

If you also want the personal information we hold about you erased, rather than only your account closed, email us at [email protected] and we will action your request under the Personal Data Protection Act 2010, keeping only what the law requires us to keep.

Our Account and Data Deletion page sets out exactly what is erased when you delete your account, what we are required to keep, and how to request deletion if you can no longer sign in.

You can also turn off push notifications and location access at any time in your device settings, without losing access to the rest of the app.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

To facilitate our Service;
To provide the Service on our behalf;
To perform Service-related services;
To assist us in analysing how our Service is used; or
To facilitate payment and the completion of Purchases.

We want to inform users of this Service that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

No Use by Minors

Service is intended only for access and use by individuals at least thirteen (13) years old. By accessing or using Service, you warrant and represent that you are at least thirteen (13) years of age and with the full authority, right, and capacity to enter into this agreement and abide by all the terms and conditions of Terms. If you are not at least thirteen (13) years old, you are prohibited from both the access and usage of Service.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version is always published on this page, and the effective date below tells you when it last changed. Where a change materially affects how we handle your information, we will also notify you in the app.

This policy is effective as of 2026-08-02. It replaces the version effective 2021-12-01.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected].