Privacy Notice
Last updated: 19 May 2026
1. Who we are
This Privacy Notice explains how Raez Najya Trading, trading as "Stifinwise" (Malaysia), collects, uses, and shares your personal data when you use our website and the Learning & Teaching Studio software (the "Service"). For the purposes of applicable data protection laws, Raez Najya Trading is the data controller of your personal data.
2. What we collect
- Account data — name, email address, password (hashed), and authentication identifiers (e.g. Google sign-in ID).
- Profile and content data — learner profiles, quiz responses, saved plans, notes, and reflections you create in the Service.
- Usage and device data — pages viewed, features used, approximate location derived from IP, browser type, device identifiers, and timestamps.
- Support data — messages, attachments, and contact details when you write to us.
- Order data — purchase confirmations, subscription status, plan, and billing period. Card and bank details are collected and held by our payments provider Paddle; we do not see or store them.
3. Why we use it and our legal basis
- To provide the Service — performance of our contract with you.
- To process payments and subscriptions — performance of contract; sharing with Paddle as Merchant of Record is necessary to take payment.
- To keep the Service secure — our legitimate interest in protecting users and the Service.
- To improve the Service — our legitimate interest in operating and improving the product.
- To send service messages — performance of contract and legal obligation.
- To send marketing — only with your consent, which you can withdraw at any time.
- To meet legal obligations — tax, accounting, responding to lawful requests.
4. Who we share it with
- Paddle.com Market Limited — our Merchant of Record and payments provider. See Paddle's Privacy Notice.
- Service providers (subprocessors) — hosting and database (Lovable Cloud / Supabase), email delivery, analytics, error monitoring, and customer support tooling.
- Professional advisers — legal, accounting, and audit advisers, where necessary.
- Authorities — where required by law, court order, or to protect our rights or the safety of users.
We do not sell your personal data.
5. International transfers
Some of our service providers are based outside Malaysia, including in the European Economic Area, the United Kingdom, and the United States. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.
6. How long we keep it
We keep account and content data for as long as your account is active, and for a reasonable period afterwards. Order and tax records are kept for the period required by law (typically up to 7 years). After these periods we delete or anonymise the data.
7. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict, port, withdraw consent, and lodge a complaint with your local data protection authority. Email support@stifinwise.live to exercise these rights.
8. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, hashed passwords, and audit logging.
9. Cookies
We use a small number of essential cookies to keep you signed in, remember preferences, and keep the Service secure. We may also use limited analytics cookies. You can manage cookies from your browser settings.
10. Children
The Service is intended for adults (parents, teachers, coaches, and learners aged 16 or above).
11. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.
12. Contact
Raez Najya Trading (Malaysia) — support@stifinwise.live.