What we hold, and what we do with it

The case itself: which heirs survive and how many, whether parents are living, sibling types, grandchildren and extended kin, plus anything you type in the notes box. If you fill in the optional property step: a description, value and land area for each asset, debts, funeral costs, any wasiat, and the names you enter for a hibah recipient or a harta sepencarian claimant.

Your email address — collected by Stripe at checkout so it can send your receipt. It reaches us through Stripe, not through this site, and we use it for one message of our own: a single confirmation email, sent once per order, with the link back to your report, what the report contains and how to share or keep it. That email carries no amounts, shares or names. If you choose to open an account (below), you give the address to us directly as well.

We do not ask for your name, IC number, address or phone number, and the interview has no field for them. Please do not put them in the notes box; nothing in the calculation needs them.

You never need one: the interview, payment and report all work without signing in. An account exists only so that a report you paid for can be kept and reopened on another device, and updated later at a lower price. If you choose to sign in, we additionally hold:

Your email, as the name of the account. There is no password — a one-time code is emailed each time you sign in.

The moment you agreed to this notice, and which version of it you saw, recorded once when you first sign in. This is the consent record the Personal Data Protection Act asks us to be able to show.

Which reports are yours. Saving a report attaches it to the account; nothing about the report itself changes.

Your family list, if you build one. You may enter each relative once — a nickname of your own choosing, whether they are male or female, and whether they have died — and pick heirs from that list instead of counting them. We deliberately ask for nothing more: no full names, dates of birth or identity numbers. Choose nicknames that identify nobody if you prefer. For each case we also keep which people were picked and what each is to the deceased. The list is visible only to you, never appears in a report, and is never sent to the drafting service. You can remove any person, or the whole list, at any time.

Which next steps you have ticked off. The report lists the steps and documents for administering the estate; a signed-in owner can tick each one as it is done. We keep only that a step was ticked and when — the name of the step, not what you did or any document. The ticks are visible only to you and go with the case when it is deleted.

Documents you choose to keep with a case. A signed-in owner can upload the estate’s papers — the death certificate, identity documents, the Sijil Faraid, land titles, statements, a hibah declaration or will — into a locker beside the case. These are the most sensitive things on this site, so: they are stored in a private bucket that no link reaches without a key we issue to you, signed in, for one minute at a time; nobody else can open them, including anyone you share the report with; nothing in them is read, scanned or sent to the drafting service — we look only at the first bytes to confirm the file is a PDF or an image, and refuse anything else; and each file goes when you remove it, when the case is deleted, or when the account is. PDF, JPEG, PNG, WebP and HEIC only, up to 20 MB each.

Whether you want reminder emails, and which we have sent. An account holder gets at most two kinds of email about a case they own: one when a report is a year old and has not been updated since, and one thirty days after a report if some of its next steps are ticked and some are not. The email names the case and the open steps, never an amount or a share. Every email carries a one-click link that stops them, and the same switch is on your account page. We keep the switch and a record of which reminder went out for which case, so none is sent twice. These go out through Resend, the same email service that delivers your sign-in code.

A customer reference at Stripe, so that repeat payments and any refund land on one record there rather than a new anonymous one each time.

Your plan, if you buy one. For the case bundle, a ledger of credits granted and spent (each row names the payment or the case it refers to), so your balance can always be explained. For the unlimited-updates year, the subscription’s status and renewal date as Stripe reports them. Card details stay with Stripe. A report generated under a plan is recorded as paid by that plan rather than by an amount.

Referrals. An account holder has a referral link. If you open the site through someone’s link, a cookie holds their code for thirty days, and an order you then pay for records which account referred you — nothing else about you is added. When that first report is paid, the referrer earns one case credit; to decide that, we compare your payment email and Stripe customer against the referrer’s at that moment and keep neither. The referrer sees how many credits they have earned, never who bought or who was refused.

A sign-in cookie keeps you signed in between visits. It holds a session token and nothing about you or your case, and signing out removes it.

To generate your report, to let you return to it later from your own link, and to keep a record that a payment was fulfilled. That is all. Your data is not sold, rented, or used for advertising, and there is no tracking or analytics profile built from it.

Supabase — the case and the finished report are stored in our database so the report survives a closed tab and can be reopened from your link.

An external drafting service — the case (heir counts, property figures and your notes), together with excerpts from the reference books, is sent to a third-party service that drafts the written explanation from those excerpts. It receives no name, email or payment detail, and nothing you send is retained or reused by it beyond producing your report. The arithmetic itself is computed on our side, by our own code.

Stripe — handles the payment and holds your email and payment details. Card numbers are entered on Stripe’s own page and never touch this site.

Vercel — hosts the site and keeps ordinary server logs.

Resend — delivers the order confirmation, the sign-in code and, for account holders who have not switched them off, the reminder emails. It receives your email address and the text of the message — the link to your report, the case name, the open steps — never the report itself or any amount.

These five are the only places your case goes. It is shared with no one else, and never with any religious authority, court, agency or family member unless you choose to share it yourself.

If you create a share link, anyone holding that link can open the report without signing in — that is what makes it forwardable to an heir, an ustaz or a lawyer. Treat it like a key: forward it to the people it concerns, not to a public group chat.

Two protections are built in. A share can be limited to fractions only, which shows who inherits what proportion and the passages behind each rule while withholding what the estate is worth — useful when you want an argument settled without handing every relative a permanent link to the family’s money. And any share can be revoked at any time from your report page, after which the link stops working immediately.

Who opened it. Each time a share link is opened we record that it was opened and when — not who, and no address or device details — and show that to the person who shared it. If the sender chooses readers must sign in, each reader signs in with their email before the report opens, and the sender then sees that email against the time it was opened. Readers are told this on the sign-in screen and on the report itself. A reader who later deletes their own account takes those records with them.

The site stores a short list of your own report links in your browser’s local storage, so the front page can offer them back to you on your next visit. It stays on that device, is never sent to us, and clearing your browser data removes it. The only cookies are the sign-in cookie described above (only if you sign in) and the thirty-day referral cookie (only if you arrive through a referral link). There are no advertising or tracking cookies.

The interview keeps a random visit id in the tab’s session storage and reports which chapter it reached and whether Pay was pressed, so we can see where people give up. That id carries no answer, is never joined to an account, an order or an address, and disappears when the tab closes. What we read from it is only totals: how many visits reached each chapter.

Reports are kept so you can come back to them — an estate can take months to settle, and losing the document halfway through helps nobody. If you want yours removed sooner: an account holder can delete everything in one step from the account page — every report, every share link, every document in the locker, the email and the account itself, immediately and with no copy kept. Anyone else, or anyone wanting a single report removed rather than the whole account, can ask and we will delete the case, the report and any share links.

Payment records are kept by Stripe for as long as Malaysian tax and accounting rules require, and are outside what we can delete on request.

Under the Personal Data Protection Act 2010 you may ask what personal data we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to faraidsupport@gmail.com with your report link or payment reference, and we will action it and confirm when it is done.

Refund requests go the same way — see the refund page.

If what we do with data changes, this page changes with it and the date above is updated. It describes how the service works today, not an intention.

Kes itu sendiri: waris yang masih hidup dan bilangannya, sama ada ibu bapa masih hidup, jenis adik-beradik, cucu dan kerabat lain, serta apa sahaja yang anda taip dalam ruangan nota. Jika anda mengisi langkah harta pilihan: keterangan, nilai dan keluasan setiap aset, hutang, kos pengebumian, wasiat, dan nama yang anda masukkan bagi penerima hibah atau penuntut harta sepencarian.

Alamat e-mel anda — dikutip oleh Stripe semasa pembayaran untuk menghantar resit. Kami menggunakannya untuk satu mesej sahaja: e-mel pengesahan, dihantar sekali bagi setiap pesanan, dengan pautan kembali ke laporan anda, kandungannya dan cara berkongsi atau menyimpannya — tanpa jumlah, pecahan atau nama. Jika anda membuka akaun, anda memberikannya terus kepada kami juga.

Kami tidak meminta nama, nombor kad pengenalan, alamat atau nombor telefon, dan tiada ruangan untuknya. Jangan masukkannya dalam ruangan nota; pengiraan tidak memerlukannya.

Akaun tidak diwajibkan: temu bual, bayaran dan laporan berfungsi tanpa log masuk. Jika anda memilih untuk log masuk, kami turut menyimpan e-mel anda sebagai nama akaun (tiada kata laluan — kod sekali guna dihantar melalui e-mel), tarikh dan masa anda bersetuju dengan notis ini serta versi notis yang anda lihat, laporan mana yang milik anda, senarai keluarga anda jika anda membinanya (nama panggilan pilihan anda sendiri, lelaki atau perempuan, dan sama ada telah meninggal — bukan nama penuh, tarikh lahir atau nombor pengenalan; serta siapa yang dipilih ke dalam setiap kes dan hubungannya dengan si mati; senarai ini hanya kelihatan kepada anda, tidak muncul dalam laporan dan tidak dihantar kepada perkhidmatan penulisan), langkah seterusnya mana yang telah anda tandakan selesai (hanya nama langkah dan masanya — bukan apa yang anda lakukan atau sebarang dokumen; tanda ini hanya kelihatan kepada anda dan dipadam bersama kes), pelan anda jika anda membelinya (lejar kredit kes yang diberi dan digunakan, serta status dan tarikh pembaharuan langganan seperti yang dilaporkan Stripe; butiran kad kekal di Stripe), dokumen yang anda pilih untuk disimpan bersama kes (sijil kematian, kad pengenalan, Sijil Faraid, geran tanah, penyata, surat hibah atau wasiat — disimpan dalam baldi peribadi yang tiada pautan boleh capai tanpa kunci yang kami keluarkan kepada anda, selepas log masuk, untuk seminit pada satu masa; tiada orang lain boleh membukanya termasuk sesiapa yang anda kongsikan laporan; kandungannya tidak dibaca, diimbas atau dihantar kepada perkhidmatan penulisan — hanya bait pertama disemak untuk mengesahkan ia PDF atau imej; dipadam apabila anda membuangnya, apabila kes dipadam, atau apabila akaun dipadam; PDF, JPEG, PNG, WebP dan HEIC sahaja, sehingga 20 MB setiap satu), sama ada anda mahu e-mel peringatan dan peringatan mana yang telah dihantar (paling banyak dua jenis: apabila laporan sudah setahun tanpa dikemas kini, dan tiga puluh hari selepas laporan jika sebahagian langkah seterusnya ditandakan dan sebahagian belum; e-mel itu menyebut kes dan langkah yang belum selesai sahaja, tanpa jumlah atau pecahan; setiap e-mel ada pautan satu klik untuk berhenti, dan suis yang sama ada di halaman akaun; dihantar melalui Resend, perkhidmatan e-mel yang sama menghantar kod log masuk anda), dan satu rujukan pelanggan di Stripe. Satu kuki log masuk mengekalkan sesi anda; ia tidak mengandungi apa-apa tentang anda atau kes anda, dan dipadam apabila anda log keluar.

Rujukan rakan. Pemegang akaun mempunyai pautan rujukan. Jika anda membuka laman ini melalui pautan seseorang, satu kuki menyimpan kod mereka selama tiga puluh hari, dan pesanan yang anda bayar kemudian merekodkan akaun mana yang merujuk anda — tiada apa-apa lagi tentang anda ditambah. Apabila laporan pertama itu dibayar, perujuk mendapat satu kredit kes; untuk memutuskannya, e-mel bayaran dan pelanggan Stripe anda dibandingkan dengan perujuk pada ketika itu sahaja dan tidak disimpan. Perujuk hanya melihat bilangan kredit yang diperoleh, bukan siapa yang membeli atau siapa yang ditolak. Satu-satunya kuki lain ialah kuki rujukan ini; tiada kuki pengiklanan atau penjejakan.

Temu bual menyimpan satu id lawatan rawak dalam storan sesi tab dan melaporkan bab mana yang dicapai serta sama ada butang Bayar ditekan, supaya kami tahu di mana orang berhenti. Id itu tidak membawa sebarang jawapan, tidak pernah dikaitkan dengan akaun, pesanan atau alamat, dan hilang apabila tab ditutup. Yang kami baca daripadanya hanyalah jumlah: berapa lawatan mencapai setiap bab.

Untuk menjana laporan anda, membolehkan anda kembali kepadanya kemudian, dan menyimpan rekod bahawa bayaran telah dipenuhi. Itu sahaja. Data anda tidak dijual, disewa atau digunakan untuk pengiklanan, dan tiada profil penjejakan dibina daripadanya.

Supabase menyimpan kes dan laporan dalam pangkalan data kami. Perkhidmatan penulisan luar (pihak ketiga) menerima kes bersama petikan buku rujukan untuk mendraf penjelasan bertulis — tanpa nama, e-mel atau butiran bayaran; apa yang dihantar tidak disimpan atau digunakan semula selain untuk menghasilkan laporan anda, dan pengiraan dibuat di pihak kami oleh kod kami sendiri. Stripe mengendalikan bayaran dan memegang e-mel serta butiran pembayaran anda; nombor kad tidak pernah menyentuh laman ini. Vercel mengehos laman dan menyimpan log pelayan biasa. Resend menghantar e-mel pengesahan pesanan, kod log masuk dan, bagi pemegang akaun yang tidak mematikannya, e-mel peringatan; ia menerima alamat e-mel dan teks mesej sahaja — pautan ke laporan, nama kes, langkah yang belum selesai — bukan laporan itu sendiri atau sebarang jumlah. Kes anda tidak dikongsi dengan sesiapa yang lain — bukan dengan mana-mana pihak berkuasa agama, mahkamah, agensi atau ahli keluarga — melainkan anda sendiri memilih untuk berkongsi.

Jika anda membuat pautan kongsi, sesiapa yang memegang pautan itu boleh membuka laporan tanpa log masuk. Pautan boleh dihadkan kepada pecahan sahaja (tanpa nilai harta) dan boleh dibatalkan pada bila-bila masa dari halaman laporan anda.

Setiap kali pautan kongsi dibuka, kami merekodkan bahawa ia dibuka dan bilanya — bukan siapa, dan tiada alamat atau butiran peranti — dan memaparkannya kepada penghantar. Jika penghantar memilih pembaca mesti log masuk, setiap pembaca log masuk dengan e-mel mereka sebelum laporan dibuka, dan penghantar akan melihat e-mel itu bersama masa ia dibuka. Pembaca dimaklumkan tentang ini pada skrin log masuk dan pada laporan itu sendiri. Pembaca yang kemudian memadam akaun mereka sendiri turut memadam rekod ini.

Laporan disimpan supaya anda boleh kembali kepadanya — pentadbiran pusaka boleh mengambil masa berbulan-bulan. Pemegang akaun boleh memadam segala-galanya dalam satu langkah dari halaman akaun: setiap laporan, setiap pautan kongsi, e-mel dan akaun itu sendiri, serta-merta dan tanpa salinan disimpan. Rekod bayaran disimpan oleh Stripe selama yang dikehendaki oleh peraturan cukai dan perakaunan Malaysia, dan berada di luar apa yang boleh kami padam.

Di bawah Akta Perlindungan Data Peribadi 2010, anda berhak mengakses data peribadi anda, membetulkannya, menarik balik persetujuan, dan meminta ia dipadam. Pemberian data adalah secara sukarela; tanpa butiran kes, laporan tidak dapat dijana. Hubungi faraidsupport@gmail.com dengan pautan laporan atau rujukan bayaran anda, dan kami akan bertindak serta mengesahkan apabila selesai.