Rencana Privacy Policy
Last updated: September 10, 2026
1. Introduction
This Privacy Policy explains how AIZZ TECH SOLUTIONS ("we", "us", "our") collects, uses, and protects your personal information when you use the Rencana mobile application (the "Service"). Rencana is a student planner developed and operated by AIZZ TECH SOLUTIONS, a partnership registered in Malaysia under business registration number 202603004666, of No. 3B, Lot 2967, Jalan Bukit Naga, 40460 Shah Alam, Selangor, Malaysia. AIZZ TECH SOLUTIONS is the data controller for the personal data described in this policy. By using the Service you agree to the processing of your information as described below.
We handle your personal data in accordance with the Malaysian Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024.
This policy applies only to the Rencana mobile app. Other AIZZ TECH SOLUTIONS products and websites may have their own privacy notices.
2. Information we collect
We collect only the information needed to run the Service:
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Name or display name, email address, password credential held in hashed form by our authentication provider, and the institution and programme you select | You, when you register |
| Academic content | Timetables, subjects, courses, lecturers, venues, assessment components, marks you enter, deadlines, tasks, notes, flashcards, quizzes and study records | You, by entry, photograph, file upload, device calendar import, a connected Google Classroom account, or, if you are a UiTM student and use the student ID route, from UiTM timetable endpoints |
| University record data | If you are a UiTM student and use the student ID route: your matric number, and the name, programme, faculty, semester and group that UiTM publishes against it | UiTM endpoints that require no sign-in, read only after you have verified by one-time passcode that the matric number is yours. We do not ask for, receive or store your MyStudent password |
| Social content | Display status, study snaps, friend connections and study circles, and posts in community features | You, when you use those features |
| Usage data | Screens opened, features used, study streaks, generation counts against your allowance, and application errors | Automatically, as you use the application |
| Device data | Device model, operating-system version, application version and push-notification token | Automatically |
| Approximate campus location | Only if you enable the campus map, and only to show the map around you | Your device, with your permission, which you can withdraw in system settings |
| Subscription data | Which tier you hold, trial status and renewal dates | Apple, Google or our web payment provider |
What we do not collect. We never receive or store your card number, card expiry, security code or bank details. Payments are taken by Apple, Google or our payment provider, and we receive only the fact of a subscription and its status. We do not collect data about your health, religion, political opinions, or any other category defined as sensitive personal data under the Act, and you should not enter such information into notes if you would not want it processed as described here.
3. How we use your information
- Operate the planner, community, and notification features you use.
- Authenticate you and keep your account secure.
- Deliver class and task reminders at the times you choose.
- Provide AI features such as timetable import from a photo. Images you submit are sent to our AI provider only for the duration of that task and are not retained for training.
- Respond to support requests, enforce our Terms of Use, and investigate reports of abuse.
We do not sell personal data. We do not use your personal data for advertising, and we do not run advertisements in the application.
4. Who we share information with
We use the following service providers. Each processes personal data only on our instructions and for the purpose stated.
| Provider | Purpose | Location of processing |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage and server-side functions | South Asia (Mumbai), India |
| OpenAI, L.L.C. | Extraction, structuring, tutoring and generation from the content you submit | United States |
| Google LLC (Gemini API and Google Cloud) | Optical character recognition on images and PDFs you submit | United States and other Google regions |
| Google LLC (Google Classroom API) | Reading your coursework, only if you connect your Classroom account | United States |
| RevenueCat, Inc. | Subscription entitlement management on both application stores | United States |
| Curlec by Razorpay (Razorpay Curlec Sdn Bhd) | Payment collection and subscription billing for subscriptions bought through the Rencana website | Malaysia |
| Apple Inc. and Google LLC | App distribution, in-app purchase and push notification | United States and elsewhere |
| Functional Software, Inc. (Sentry) | Error and crash reporting | United States |
| Mapbox, Inc. | Campus map rendering | United States |
We also disclose personal data where we are required to do so by law, by a court, or by a regulator with authority to require it.
5. How we share content with other users
Rencana lets you share specific things with specific people:
- Your profile name, university, and optional bio are visible to users you add as friends.
- Reactions, quick messages, and shared tasks are visible only to the friend you send them to.
- Study-circle posts are visible only to members of that circle.
- Your live location, if enabled, is visible only to members of the circles you choose.
6. Data retention
We retain your data for as long as your account is active. When you delete your account from Settings → Delete Account, we permanently remove your profile, timetable, tasks, notes, community content, and shared-task records from our primary database within 30 days. Encrypted backups are rotated out within 60 days.
7. Your rights under Malaysian law
You may at any time, directly in the app or by contacting us:
- Access — access the personal data we hold about you, and request a copy of it.
- Correct — correct your personal data, including directly in the app.
- Delete — delete your account and the personal data associated with it, from Settings → Delete Account.
- Withdraw consent — withdraw consent for any optional feature, including community features, location sharing and third-party integrations.
- Restrict or object — restrict or object to processing that is not necessary to provide the service.
- Request data portability — ask us to transmit your personal data to another service provider, where this is technically feasible and the receiving service is compatible.
To exercise any of these rights, use the controls in Settings within the app, or contact us at contact@aizztech.com. We will respond within 21 days as required under the Act.
8. Children and users under 18
Rencana is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, please contact us and we will delete it.
If you are under the age of 18, please make sure a parent or guardian is aware that you use Rencana and understands this policy, particularly the sections on community features and location sharing. A parent or guardian may contact us at contact@aizztech.com to ask about, correct or delete the personal data of a user in their care.
9. Security
We use industry-standard safeguards including TLS in transit, encrypted database storage, row-level security policies, and audited access controls. No system is 100% secure; please use a strong, unique password and enable device passcode/biometrics.
10. Transfers outside Malaysia
Several of the providers in section 4 process personal data outside Malaysia. Under the Act as amended, a transfer outside Malaysia is permitted where the receiving jurisdiction has a law substantially similar to the Act, or otherwise ensures a comparable level of protection, and the Personal Data Protection Department has issued guidelines on how a controller should assess this.
Transfers outside Malaysia are made in reliance on the contractual protections in each provider's data processing addendum, and a transfer impact assessment is being completed.
11. If there is a data breach
If a breach of security occurs that causes or is likely to cause significant harm to you, we will notify the Personal Data Protection Commissioner as soon as possible and in any event within 72 hours of becoming aware of it, and we will notify you within 7 days of that notification. We will tell you what happened, what data was involved, and what you should do.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the Rencana app or by email.
13. Contact us
Questions about this policy or about how we handle your personal data may be sent to contact@aizztech.com. If you are not satisfied with our response you may lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Malaysia.
AIZZ TECH SOLUTIONS
Business Registration No. 202603004666
No. 3B, Lot 2967, Jalan Bukit Naga, 40460 Shah Alam, Selangor, Malaysia
Developer of the Rencana mobile app
aizztech.com