Privacy Notice

We collect information that you provide when creating an account and using iAmanah.

This may include:

• Account details such as your name, email address, authentication information and subscription status.
• Personal and family information, including identity, contact, relationship and life-status details.
• Information about family members, heirs, beneficiaries, executors, witnesses and other persons relevant to your planning.
• Asset, ownership, liability, estate-obligation and planning information.
• Faraid, Wasiat and Hibah planning information.
• Documents and related information stored in the Digital Vault.
• Payment and subscription information provided through our payment service providers.
• Support communications, security events and service-usage information.

We only seek information reasonably required to provide, operate and protect the iAmanah service.

Estate planning may require you to provide personal information about family members, heirs, beneficiaries, executors, witnesses, dependants or other individuals.

This may include information relating to children or minors where relevant to your family and estate planning.

You are responsible for ensuring that information you provide about another person is accurate and that you have an appropriate basis or authority to provide and use that information for your planning purposes.

We use personal information to:

• Create and manage your iAmanah account.
• Maintain your private legacy-planning workspace.
• Record family, asset and liability information.
• Perform preliminary Faraid calculations.
• Support Wasiat and Hibah planning.
• Generate planning reports and explanations.
• Operate the Digital Vault.
• Process subscriptions and payments.
• Provide customer and technical support.
• Protect accounts and investigate security events.
• Maintain and improve the safety, reliability and performance of iAmanah.
• Meet applicable legal and regulatory requirements.

We do not sell your personal planning information.

iAmanah applies privacy-conscious controls intended to reduce unnecessary exposure of personal information. Where full details are not required, personal identifiers such as identification numbers, passport details, contact information and account-related data may be masked, redacted or excluded from displays and processing.

AI-assisted features are designed to minimise unnecessary personal information before relevant planning information is processed. iAmanah also takes steps to prevent sensitive information from being unnecessarily included in application logs and operational records.

These controls support the privacy and security of your information, but no technical or organisational measure can guarantee absolute security. You should continue to protect your account credentials, devices and Digital Vault passphrase.

iAmanah may use AI-assisted features to help explain planning information, identify missing details, summarise records, prepare preliminary reports or suggest possible next steps.

Relevant planning information may be processed by AI services when required to provide these features.

AI-generated information is provided as preliminary planning assistance. It does not constitute legal, financial or Syariah advice and should not be treated as professional verification.

Where iAmanah performs rules-based Faraid calculations, the calculation process is maintained separately from generative AI explanations. AI-generated content does not independently determine a person’s legal or Syariah entitlement.

Important estate-planning decisions should be independently reviewed with appropriately qualified legal, financial or Syariah professionals or relevant Malaysian authorities.

The Digital Vault is designed to provide additional protection for documents and information stored within it.

Vault access is protected by security controls, including a separate Vault passphrase. You are responsible for safeguarding your account credentials and Vault passphrase and should not share them with unauthorised persons.

iAmanah applies reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

However, no internet-connected service or storage system can guarantee absolute security. Users should maintain secure devices, passwords, email accounts and recovery channels.

We may use authorised service providers to help operate iAmanah.

These may include providers supporting:

• Cloud infrastructure and hosting.
• Database and storage services.
• Payment processing.
• Email and communications.
• AI-assisted functionality.
• Security, monitoring and system operations.
• Customer and technical support.

These providers may process personal information on our behalf only as necessary to provide their services, subject to applicable contractual, security and privacy requirements.

We may also disclose information where required by applicable law, regulation, court order or lawful request from an authorised authority.

We do not intentionally disclose one user’s private planning workspace or records to another user.

Some authorised technology and infrastructure providers may process or store information outside Malaysia.

Where personal information is transferred or processed outside Malaysia, iAmanah will apply appropriate safeguards where required under applicable data-protection requirements.

The locations and providers used by iAmanah may change as our technology infrastructure evolves.

We retain personal information only for as long as reasonably necessary to:

• Provide and maintain your account and planning services.
• Protect the security and integrity of the platform.
• Maintain required transaction or business records.
• Resolve disputes and support requests.
• Meet applicable legal and regulatory requirements.

Different types of information may have different retention periods.

Information associated with a deleted account may remain temporarily within secure backups, security records or records that we are legally required to retain.

Deleting or changing family, asset, liability or planning information may affect existing calculations and reports.

You should maintain independent copies of important documents that you may need outside iAmanah.

Subject to applicable Malaysian law, you may request to:

• Access personal information held about you.
• Correct inaccurate or incomplete information.
• Update information through your iAmanah account where available.
• Request deletion of eligible personal information.
• Ask questions about how your personal information is processed.

Some information may need to be retained where required for legal, security, transaction or legitimate operational purposes.

We may need to verify your identity before processing certain privacy requests.

Privacy requests may be submitted through the iAmanah Contact page.

iAmanah maintains processes intended to identify, investigate and respond to security incidents affecting personal information.

Where a personal-data breach requires notification under applicable law, we will take reasonable steps to notify affected users and/or the relevant authorities as required.

iAmanah may use cookies and similar technologies required for authentication, security, user preferences, service operation and permitted analytics.

Further information about these technologies and your available choices is provided in our Cookie Policy.

We may update this Privacy Notice as iAmanah develops, our technology or service providers change, or applicable legal and regulatory requirements evolve.

The latest version will be published on the iAmanah website together with its effective or last-updated date.

Where appropriate, we may provide additional notice of material changes.