Privacy Policy
Last updated: 21 October 2026
This policy explains what information Rakan ("we", "us") collects when you use the Rakan app, how we use it, and the choices you have. We process personal data in line with Malaysia's Personal Data Protection Act 2010.
1. Information we collect
- Account details: your email address and password (stored only as a secure hash), or the details Apple or Google share when you sign in with them (name and email address).
- Profile: your full name, username, profile photo and the people you follow and who follow you.
- Phone number: required to create an account. It is stored privately and is never shown on your profile.
- Stories: the photos and videos you post. We remove location and other hidden metadata from uploaded files.
- Technical information: basic device and app information needed to keep the service running, secure and up to date.
2. How we use it
- To create and run your account and show your stories to the people you allow.
- To help friends find you by username.
- To keep Rakan safe, prevent abuse and fix problems.
- To contact you about your account or important changes to the service.
We do not sell your personal data and we do not show third-party advertising.
3. Who can see your content
Stories are visible to your followers for 24 hours. If your account is private, only followers you approve can see them. After 24 hours a story moves to your private archive, which only you can see, unless you choose to show it on your wall.
4. Where your data is stored
We use Google Firebase (servers in Singapore) for accounts and app data, and Cloudflare R2 for photos and videos. Media is kept private and is only served through short-lived links after we check that the viewer is allowed to see it. These providers process data on our behalf under their own security and privacy commitments.
5. How long we keep it
We keep your information while your account is active. Uploads that are never posted are deleted automatically within a day. When you delete a story or your account, we delete the related data from our systems, except where we must keep it for legal reasons.
6. Your choices and rights
- You can edit your profile, make your account private, remove followers and delete stories in the app.
- You can ask for a copy of your data, ask us to correct it, or ask us to delete your account by contacting us.
7. Children
Rakan is not intended for children under 13, and we do not knowingly collect their data.
8. Changes
We will post any changes to this policy on this page and update the date above. For significant changes we will also tell you in the app.
9. Contact
Questions about privacy: [email protected]