Privacy notice

How NakKirim handles personal data under Malaysia's Personal Data Protection Act (PDPA). We keep as little as we can.

What we store

• Your Telegram user id and username, if you sign in with Telegram.
• Your email address, if you sign in or link it by email.
• Your display name and your language.
• What you post: trips, requests, ratings and reports.
• A login cookie. The server keeps only a hash of its token, and a sign-in lasts 30 days.
• A log of the Telegram alerts and emails we send you.
• Usage events tied to your account, such as signing in, posting a trip or request, matches and ratings. We don't record page views, and events hold no names, emails or usernames.

What we don't store

No phone numbers, ID documents, dates of birth, home addresses or photos. There are no passwords and no file uploads.

Who sees your contact

Your contact (your Telegram @username, or your email if you have no username) is shown only to the other person in a match once it has been accepted. Before you send or accept, you are told it will be shared. It is never shown publicly. Your display name, trips, requests, ratings and profile are public.

IP addresses

We don't store your IP address. To limit abuse we keep a salted hash of it inside rate-limit counters. It cannot be turned back into your address and expires within a day.

How we use it

To run the board, alert you when a match appears, introduce you to your match partner and keep the service safe. Our team can see reports and listings under review. We don't sell your data or show ads.

Deleting your data

You can delete your account yourself from your account page. Your name becomes "Deleted user", your Telegram username and email are removed, your open trips, requests and alerts are closed, and you are logged out everywhere. What you posted is not erased: past trips and requests stay on record, closed. Ratings you gave stay and are shown under "Deleted user"; ratings you received stay on your profile, which now reads "Deleted user". The log of alerts and emails we sent you, and usage events, also stay, linked only to that anonymised account.

Questions or corrections

To ask what we hold about you or to have something corrected, contact the NakKirim team through the Telegram channel where we post new trips.