1. Introduction
Kirakaun ("Kirakaun," "we," "us," or "our") is a cloud-based SaaS accounting application for businesses, operated by FA TECH SOLUTION ("the Company"), provided through our website (https://kirakaun.cc/) and our Android mobile application ("the App").
Businesses use Kirakaun to manage accounting and financial information, including customers, suppliers, products/services, invoices, expenses, inventory, payments, and other accounting records. This Privacy Policy explains what information we collect, how we use and protect it, when it may be shared, and the choices and rights available to you.
By creating an account, accessing our website, or using the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use Kirakaun.
2. Information We Collect
We collect only the information reasonably necessary to provide, secure, and support the Kirakaun platform. The categories below reflect what a business and its authorized users actually enter or generate while using the service — we do not collect information beyond what these features require.
Your responsibility: Kirakaun is a tool for recording and managing accounting and business information that you and your organization provide. You (and your organization) are solely responsible for ensuring that any business, financial, customer, supplier, or personal information you enter into Kirakaun — including information belonging to other individuals or businesses — is accurate, and that you have the appropriate authorization and legal basis to enter and process it. Kirakaun does not verify the accuracy of, or your right to enter, such information.
Account Information
Email address, username, hashed password, role, and account status, collected when you or your organization register for Kirakaun.
User Profile Information
Full name, phone number, job title or position, and profile photo, where provided.
Business / Company Information
Company name, business registration number, tax identification number (TIN), SST registration details, business address, and company bank account details, entered by your organization to operate its account.
Financial and Accounting Information Entered by Users
Invoices, quotations, expenses, payments, products/services, inventory records, and other accounting transactions and records entered by you or your organization.
Customer and Supplier Information Entered by Users
Names, contact details, and related business information for your customers and suppliers, entered by you or your organization for invoicing, purchasing, and record-keeping purposes.
Device Information
Device model, operating system and version, unique device identifiers, and App version, collected automatically when you use the App.
IP Address
Collected automatically for security, fraud prevention, and diagnostic purposes whenever you access our website or App.
Application Usage Information
Login activity and feature usage, collected to operate and support the platform.
Diagnostic and Crash Information, Where Applicable
Error logs and crash reports, collected to help us identify and fix technical issues.
Location and Photos, Where a Feature Requires Them
Certain optional App features request additional data strictly to function: for example, if your organization uses attendance/clock-in features, the App may collect an approximate GPS location and a photo at the moment of clock-in/out to verify presence at a work location, and you may attach a photo to an expense record as a receipt. This data is only collected when you actively use the specific feature that requires it, and is never collected in the background.
3. How We Use Information
We use the information described above to:
- Provide, operate, and maintain the Kirakaun accounting platform and its features;
- Authenticate users and keep accounts secure;
- Generate invoices, reports, and accounting records at your organization's instruction;
- Verify presence/location where your organization has specifically enabled an attendance feature;
- Respond to support requests and communicate service-related updates;
- Detect, investigate, and prevent fraud, abuse, or security incidents;
- Maintain and improve platform reliability, performance, and usability; and
- Comply with applicable legal, tax, and regulatory obligations.
We do not use the accounting, customer, or supplier information you enter for advertising or marketing purposes, and we do not sell it.
4. How We Store Information
Your data is stored on servers used to operate the Kirakaun platform. Data is transmitted between the App/website and our servers over encrypted (HTTPS/TLS) connections.
Kirakaun is a multi-tenant platform: your organization's data is logically separated from other organizations using the platform, so businesses cannot see each other's accounting, customer, or supplier records.
5. Data Security
We apply reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction, including password hashing, encrypted data transmission, and role-based access controls that limit what each user within your organization can see based on their assigned role.
No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. You can help protect your account by using a strong, unique password, keeping your login credentials confidential, and contacting us immediately at support@kirakaun.cc if you suspect unauthorized access to your account.
6. Data Retention
We retain account and business data for as long as your account remains active, or as needed to provide the service to you.
Certain records — particularly accounting and financial data — may need to be retained for longer periods to comply with legal and regulatory recordkeeping obligations applicable to your organization (for example, Malaysian tax law generally requires businesses to retain accounting records for a minimum of seven (7) years). Responsibility for meeting these recordkeeping obligations rests with your organization as the owner of that data; Kirakaun retains the underlying data for the periods reasonably necessary to support that responsibility and our own legal obligations.
Where data is no longer required, we take reasonable steps to delete or anonymize it, subject to Section 11 (Account and Personal Data Deletion) below.
7. Data Sharing and Disclosure
We do not sell your personal data or your business data to third parties.
We only share information in the following circumstances:
- Within your organization — data entered into your organization's Kirakaun account is visible to other authorized users within that same organization, as determined by their assigned role and permissions;
- Service providers — third parties that help us operate the platform (such as cloud hosting and email/SMS delivery for verification codes), who are only permitted to use the data to perform services on our behalf and are bound by confidentiality obligations;
- Legal and regulatory requirements — where required to comply with applicable law, legal process, or a valid request from a government or regulatory authority (for example, tax authorities);
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users where required by law; and
- With your consent — for any other purpose disclosed to you and to which you agree.
8. Third-Party Services
Depending on the features your organization uses, Kirakaun may rely on the following categories of third-party service providers to deliver its functionality:
- Cloud hosting and infrastructure providers, to run the platform;
- Email and SMS providers, used to deliver account verification codes and notifications; and
- A licensed payment gateway, used to process subscription payments.
These third parties have their own privacy policies governing their use of information, and we only share the minimum information necessary for these services to function. We do not use any third-party service, permission, or technology beyond what is needed to provide Kirakaun's features.
10. User Rights
Subject to applicable law — including Malaysia's Personal Data Protection Act 2010 (PDPA) — you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete personal data;
- Request deletion of your personal data, subject to Section 11 below;
- Withdraw consent to certain processing, where consent is the basis for that processing (which may limit or prevent our ability to provide some features); and
- Lodge a complaint with the relevant data protection authority.
If you are located outside Malaysia, you may have additional rights under the data protection laws of your jurisdiction. To exercise any of these rights, contact us using the details in Section 15.
11. Account and Personal Data Deletion
You may request deletion of your Kirakaun account and associated personal data at any time by emailing us at support@kirakaun.cc.
- Organization administrators may request full deletion of their organization's Kirakaun account and its data.
- Individual users with App access may request deletion of their own personal data, or may direct this request to the organization that manages their account.
We will process verified deletion requests within a reasonable time, typically within 30 days. Please note that we may retain certain data beyond a deletion request where required to comply with legal, tax, or regulatory recordkeeping obligations (see Section 6), or to resolve disputes and enforce our agreements — such data is retained only for that limited purpose and is not used for any other purpose.
To request account closure or data deletion, email support@kirakaun.cc with your account and company details so we can verify and process your request. You can also reach us at https://kirakaun.cc/.
12. Children's Privacy
Kirakaun is a business accounting tool intended for use by working professionals and business owners. It is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. International Data Transfers
Kirakaun is designed primarily for businesses operating in Malaysia. Where we use service providers (such as those described in Section 8) that process data outside your country, we take reasonable steps to ensure your information continues to receive an appropriate level of protection consistent with this Privacy Policy and applicable law.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. When we do, we will revise the "Effective Date" at the top of this page.
For material changes, we will provide notice through the App, our website, or by email before the changes take effect. Your continued use of Kirakaun after a revised Privacy Policy becomes effective constitutes your acceptance of the changes.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us: