Who we are and what this covers
NextPass is run by MAROTECH SOLUTIONS (registration 202603017053 (CT0159782-U)), Kuala Lumpur, Malaysia ("we", "us"). This policy covers the NextPass app for iPhone and Android, our servers, and this website.
We follow Malaysia's Personal Data Protection Act 2010. Where another country's law gives you more rights, you have those too.
What we keep and why
Your account
- Your name and email address, to sign you in and to write to you about your account.
- Your password, stored only as a one-way hash we cannot read back.
- If you sign in with Apple or Google, the account number that service gives us and the email address it shares.
- Your plan, and when a subscription started, renews or ends.
What you put in the app
- What you enter in NextPass, kept so the app can show it to you on any phone you sign in on.
We use it only to run the app for you. We do not read it, except when you ask us for help or to stop abuse (see "Who at our end can read it").
Your phone
- A notification token, if you allow notifications, so we can send them to your phone.
- The app's version, so we can tell you when an update is ready.
- A copy of what you last saw in the app, kept on your phone so the app opens and reads without a connection. Only you, on that phone, can see it. It is deleted when you sign out or delete the app.
- Which notifications you have read, so the app's inbox shows what is new.
The app does not ask for your location or your contacts list.
Keeping the service safe
When you sign up, sign in or reset your password, Cloudflare Turnstile checks that a person, not a program, is filling in the form. It looks at signals from your browser or phone, not at what you type.
When a sign-in fails or a request is blocked, we note the time and the internet (IP) address, to stop abuse. These notes are deleted after 90 days.
Customers of a business that uses NextPass
Businesses (clinics, shops, offices) use NextPass to run their queues. When you take a number from a business's queue page, or a member of its staff adds you, this part is about you.
- What is kept: your ticket number, the queue, the times you joined, were called and were served, and how you joined (the queue page or the staff). A first name only if you or the staff type one, and a phone number only if the staff type it or the business asks you to confirm one by SMS code. No account, no email address, no location.
- Who sees your name and phone: only the business's own staff, in the NextPass app and the staff dashboard. Never the TV screen, never the queue page (they show numbers only), never other customers, and never our admin tools.
- The business decides. The business is responsible for its customers' data (under the Personal Data Protection Act, the data user); we keep and process it only on its behalf and on its instructions, to run its queue. To see, correct or delete what a business holds about you, ask that business. If you write to us instead, we pass your request to it.
- How long: names and phone numbers are deleted after the time the business chose: 7, 30 or 90 days (90 unless it changed it). The ticket then stays only as a number with its times, for the business's counts.
- On your phone: the queue page keeps a random key and your ticket in your browser, so it can show your ticket again; a confirmed phone is remembered there for that business for up to 30 days (as a key, never the number itself). Clearing the browser's data removes them.
- Keeping the queue fair: Cloudflare Turnstile checks that a person, not a program, is joining, and the number of joins from one internet (IP) address is limited. The IP address is used only for that, scrambled, and forgotten within an hour.
- SMS codes: when a business asks for a confirmed phone number, our SMS provider (Mocean) gets the number and the code's words to send it.
Who else sees it
We never sell your data, and there are no adverts in NextPass. We share it only with the services that run parts of the app, each only what it needs:
| Service | What for, and what it gets |
|---|---|
| Our hosting provider | Hosts our servers. It stores the data but does not use it. |
| Our email delivery service | Delivers our emails. It gets the recipient's address and the message. |
| Google Firebase | Delivers notifications to your phone. It gets your phone's notification token and the notification's words. |
| Apple and Google sign-in | Only if you choose it. Confirms who you are. |
| The app stores and RevenueCat | If you buy a subscription, your phone's app store takes the payment and RevenueCat tells us it is active. They know your account number, never what you keep in the app. We never see your card. |
| Cloudflare | Turnstile's bot check on sign-up, sign-in and password reset. It gets signals from your browser or phone and your IP address. |
| Mocean (SMS) | Only for businesses that ask customers to confirm a phone number: it gets the number and the code's words to send it. |
We give data to the authorities only when the law requires it.
Who at our end can read it
A small number of our staff can view an account to answer a support request or to deal with abuse. They sign in with a password and a second step, and each change they make is logged with who made it and when.
How long it is kept
- Your account and what you put in the app: for as long as you have the account.
- When you delete your account, it is deleted from our live systems at once. See Delete your account.
- Backups of our database are kept for up to 30 days, then destroyed. Deleted data leaves the backups within that time.
- Security notes: up to 90 days.
- A business's customers' names and phone numbers: 7, 30 or 90 days, as the business chose (see above); the numbers and times stay for its counts until the business deletes its account.
- The app stores keep their own records under their own rules.
Where it is processed
Our servers are run by our hosting provider. The services above may process data in other countries, including the United States. Each of them is bound to protect it.
Keeping it safe
Everything between the app and our servers is encrypted (HTTPS). Passwords are hashed. Each account can reach only its own data.
No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Your rights
- Get a copy. In the app, open Account and tap Download my data: we email you a link to a file of everything in your account (JSON files, with anything you added). The link works for a few days, and the file is deleted from our servers after 7 days at most. For anything else we hold about you, write to us.
- Correct it. Most of it is in the app, and you can change it there. For anything else, write to us and say what is wrong.
- Delete it. Delete your account in the app, or ask us to.
- Stop notifications. Turn them off in your phone's settings at any time.
- Withdraw consent. You can stop using any optional part (sign-in with Apple or Google, notifications) at any time.
We answer every request within 21 days, and keep a record of it (what was asked, when, and our answer; never a copy of your data). We may ask you to confirm it is you first. If you are not happy with our answer, you can complain to Malaysia's Personal Data Protection Commissioner.
Children
NextPass is not meant for anyone under 18. We do not knowingly keep data about children.
Changes
When this policy changes, the date at the top changes. If a change matters, we will tell you in the app before it applies.
Contact
Write to support@nextpass.my. MAROTECH SOLUTIONS, Kuala Lumpur, Malaysia.