Legal

Privacy policy

Hazitech Enterprise (“Beamly”, “we”, “us”) runs the Beamly app and this website. This policy explains what personal data we collect, why, who processes it for us, and your rights under Malaysia’s Personal Data Protection Act 2010 (PDPA).

1. Who we are

Beamly is run by Hazitech Enterprise, registered in Malaysia. For anything about your personal data, write to admin@beamly.my.

2. What we collect and why

• Your account: your email address, username, password and settings. We store the password only as a one-way hash. We use these to sign you in, keep your account secure and send account emails such as verification codes and password resets.
• Your devices and sign-ins: for each phone you use, its platform and app version, an app-integrity check from Apple or Google, and its notification token if you allow notifications. For each sign-in, we keep its IP address and the device and app it came from. Our server logs keep IP addresses and browser or app details for a limited time.
• Your location, while you use the app: the app sends your phone’s position to check that you’re in Malaysia, show the stores near you and tell which store you’re in. We also use it to check that you’re at a store when you scan, report or confirm a price there. We don’t keep your coordinates. With your scans, reports and confirmations, we keep which store, the time, and whether you were there. With a report, we also keep how far from the store you were. A store you add yourself is saved where you pin it on the map. Your position stays out of our logs. When you add a store, your position and what you type go to Google to find places near you.
• What you add: the prices, products and stores you add, and your confirmations of other shoppers’ prices. Everyone who uses Beamly can see them.
• Lists and trips: the shopping lists you make and the trips you record with them. People you share a list with can see it and its trips.
• Points: the points and level you earn by sharing and confirming prices. The weekly leaderboard is opt-in: if you turn on “Show me on the leaderboard”, anyone using Beamly can see your username, level and points for the week, on the board for the state where you contributed most that week.
• Scan history: each product you scan at a store, with the store, the day and the price you saw. We keep it for 13 months so the app can show how a price has changed since you last scanned it, and for My prices and your monthly recap. Only you can see it, and you can clear it in Profile → Privacy.
• Photos: product and store photos you add are public: anyone can see them. Receipt photos you add to a trip are private: only the people in the list when the trip was finished can see them. Screenshots you attach to feedback are private: only the Beamly team sees them.
• Feedback and reports: what you write, with your phone’s platform, operating system version, app version and model, so we can fix problems.
• Checks against misuse: we use automated checks to prevent misuse and keep prices honest. They keep a private record of how your price reports, and your answers to other shoppers’ reports, turned out. That record decides whether your reports go live straight away and whether your answers count, and it can stop you redeeming points or appearing on the leaderboard. Only our team sees it.
• Error reports: when our servers hit an error, a report goes to our error-tracking service, without your email address, IP address, location or what you sent.
• This website sets no cookies. We count visits with Cloudflare Web Analytics, which uses no cookies and builds no profiles.

3. Who processes it for us

• Cloudflare: this website, image storage and delivery, and network security.
• Google: store search (Google Places).
• Mailgun: account emails.
• Sentry: error reports.
• Expo: push notifications.
• Apple and Google: the app stores, app-integrity checks, and payments once Premium is offered.
• The provider that hosts our servers.

Some of these providers process data outside Malaysia. We use them only with the safeguards the PDPA requires.

4. What we never do

We don’t sell personal data, and Beamly has no ads.

5. How long we keep it

We keep your account data until you delete your account. When you do, we erase your personal details straight away; Delete your account lists them. The prices and products you added stay, shown as “A Beamly shopper”, and your lists and trips are kept without your name, hidden from everyone. We keep feedback as long as we need it to deal with it, and logs and error reports only for a limited time.

6. Your rights

You can ask to see the personal data we hold about you, to correct it, or to delete it, and you can withdraw your consent at any time by deleting your account (Delete your account). For anything else, write to admin@beamly.my; we answer within 21 days.

7. Security

Passwords are stored only as hashes, every connection is encrypted, private files open only through short-lived links, and only the people who need it can reach your data.

8. Children

Beamly isn’t meant for children under 13, and we don’t knowingly collect their data.

9. Changes

When we change this policy, we update this page and its effective date. For important changes, we also tell you in the app.

Effective 20 January 2025