Privacy Policy

Last updated: 1 June 2025

1. Introduction

SungAI ("we", "our", or "us") operates an AI-powered flood intelligence platform for Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable data protection laws.

2. Information We Collect

We may collect the following personal data when you use SungAI:

Account data: Full name, email address, and password (stored as a cryptographic hash).
Usage data: Pages visited, features used, timestamps, IP address, browser type, and device information.
Location data: Approximate geographic location if you grant permission, used to display relevant flood risk information for your area.
Communications: Messages or feedback you send to us.

We do not collect sensitive personal data such as national identity numbers, financial information, or health data.

3. How We Use Your Information

We use collected data for the following purposes:

To create and manage your account.
To provide flood monitoring, alert, and analytics services.
To improve platform accuracy, performance, and user experience.
To send you service-related notifications and flood alerts (you may opt out at any time).
To comply with legal obligations under Malaysian law.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Third-Party Services

SungAI uses the following third-party services which may process your data:

Supabase — Database and authentication provider. Data is stored on servers within or outside Malaysia.
Vercel — Hosting and CDN provider. Your requests may be processed through their global edge network.
OpenStreetMap / Leaflet — Map tile services. Your IP address may be logged when map tiles are fetched.
Google AI — AI services powering flood analysis features. Queries may be transmitted to their APIs.

Each third party operates under their own privacy policy. We encourage you to review them.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us at privacy@sungai.my. Aggregate, anonymised data may be retained indefinitely for research purposes.

6. Cookies

SungAI uses cookies and similar technologies to maintain your session and improve performance. You may disable cookies in your browser settings, though this may affect certain platform features. We do not use cookies for cross-site advertising tracking.

7. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete personal data.
Withdraw consent for direct marketing communications.
Lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise these rights, contact us at privacy@sungai.my.

8. Data Security

We implement industry-standard security measures including TLS encryption in transit, hashed password storage, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password.

9. Children's Privacy

SungAI is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related enquiries or to exercise your rights, contact us at: privacy@sungai.my