Privacy Notice

Version 2026-08-09

My HealthMate is provided by Tulus Keringat Enterprise.

This notice explains what the app records about you, why, and what you can ask us to do with it. It is given under the Personal Data Protection Act 2010 (PDPA).

What is collected

Your name, email address and the username you choose.

The health records you enter: blood pressure, blood sugar, weight, height, date of birth, sex, allergies, medical conditions, medications and the doses you record, and vaccinations.

Records you enter for other people — a parent, a child, a partner — under profiles you create. The free plan covers two profiles; Premium has no limit. Profiles you already have are never removed if a subscription ends.

Why

To keep your own health record and show it back to you.

If you subscribe, to store a copy on our server so you still have it if you lose your phone, and so a family member you choose can view the parts you choose.

Health data is sensitive personal data

Under section 4 of the PDPA, records about your physical or mental health are sensitive personal data. We may only process them with your explicit consent, which is why you are asked separately and may say no.

On the free plan, nothing leaves your phone

Your records are stored on the device only. They are not uploaded, and we cannot see them. If you lose or reset the phone, they are gone — there is no copy anywhere else.

Where it is kept

On subscribing, your records are stored on servers located in Malaysia. They are not transferred outside Malaysia.

Who can see it

Nobody, unless you choose otherwise.

You may allow a family member to view specific parts of specific profiles. They can only look — they can never change or delete anything — and you can withdraw it at any time, which takes effect immediately.

We keep a record of when someone you allowed actually viewed your records, and you can see that record.

Records you keep about other people

If you create a profile for someone else, you are entering their health data. Please only do so if they know and agree, or if you are responsible for their care. They have the same rights over that data as you have over yours.

How long it is kept

While you subscribe, for as long as you keep the account.

If your subscription ends, your records stay on the server for 90 days so you can still retrieve them, and are then deleted. The app downloads a full copy to your phone as soon as it notices, and tells you the date.

If you delete your account, everything is deleted immediately and permanently — profiles, records, sharing, your username and your sign-in. It cannot be undone and we cannot recover it.

Your rights

You may ask for a copy of your data, ask us to correct it, withdraw your consent, or delete your account entirely. Withdrawing consent to cloud backup stops any further upload from the next sync.

Deleting the app alone does not delete the copy on our server — use Delete account.

This is not medical advice

The categories and figures shown, including blood pressure grades, blood sugar bands and BMI, are for your information. They follow Malaysian clinical practice guidelines but are not a diagnosis and do not replace a doctor.

How to contact us

To ask for a copy of your data, to have it corrected, to withdraw consent, or to complain:

Tulus Keringat Enterprise appscriptsolution@tuluskeringat.com

We will respond within 21 days, as the PDPA requires.

You may also complain to the Personal Data Protection Commissioner of Malaysia.