Privacy Policy

Infinitee AI Solutions (SSM: 202503254401) ("Infinitee", "we", "us", or "our")

Last updated: 26 April 2026

1. Introduction

This Privacy Policy explains how Minitku collects, uses, discloses, and protects your personal data when you use the Minitku meeting minutes application ("the App"). We comply with the Personal Data Protection Act 2010 of Malaysia (PDPA 2010) and other applicable privacy laws.

By using the App, you consent to the collection and processing of your personal data as described in this policy.

2. Data We Collect

We collect the following categories of personal data:

• Identity data: Full name, job title, industry
• Contact data: Phone number, email address (optional)
• Audio data: Voice recordings made during meeting sessions; voice profile samples for speaker identification
• Usage data: Meeting metadata (date, duration, language), transcript content, summary and action items
• Billing data: Subscription tier, payment status (card details are held by Stripe or Apple and not stored by us)
• Technical data: Device type, operating system, app version, crash logs
• Biometric data: Face ID / fingerprint data are used solely for local device authentication; never transmitted to or stored by Minitku servers. This feature is opt-in only.

3. How We Use Your Data

Your personal data is collected and processed for the following purposes:

• To provide AI-powered transcription, diarisation, and summarisation services
• To create and manage your user account
• To identify your voice in meeting transcripts using your voice profile
• To process subscription payments and manage billing
• To send transactional notifications (e.g. OTP, meeting processing status)
• To monitor service performance and improve user experience (anonymised, aggregated analytics only)
• To comply with applicable laws and regulations

4. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA 2010:

• Consent: You have given explicit consent at account registration
• Contract: Processing is necessary to perform our services to you
• Legal obligation: Processing required to comply with Malaysian law
• Legitimate interests: Fraud prevention, security, and service improvement

5. How We Share Your Data

We do not sell your personal data. We may share it with:

• Google Cloud Platform: Cloud infrastructure and audio processing
• Stripe: Payment processing (subject to Stripe's own privacy policy)
• Apple: In-app purchase processing on iOS (subject to Apple's privacy policy)
• OpenAI: Anonymised transcript text for AI summarisation
• Meta (WhatsApp Cloud API): OTP delivery via WhatsApp
• SMS360: OTP delivery via SMS (Malaysia)
• Twilio: OTP delivery via SMS (international)
• Regulatory authorities: Where required by Malaysian law or court order

All third-party processors are bound by data processing agreements consistent with the PDPA 2010.

6. Data Retention

• Account data: retained until account deletion, then purged within 30 days
• Meeting audio: deleted immediately after transcription; not stored on our servers
• Transcripts & summaries: retained until you delete the meeting
• Voice profile: retained until you delete it from the App
• Billing records: retained for 7 years (statutory requirement)

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• All data in transit is encrypted via TLS 1.3
• Data at rest is encrypted using AES-256
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• Voice profiles are stored only on your device and are never transmitted to or retained on Minitku servers after transcription completes

8. Your Rights

Under the PDPA 2010 (as amended), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Withdraw consent at any time (this may affect service availability)
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your personal data (including meeting transcripts and summaries) in a structured, machine-readable format, or request direct transmission to another service provider where technically feasible

To exercise any of these rights, please contact us. We will respond within 21 days.

9. International Data Transfers

Personal data may be transferred outside Malaysia to servers operated by our cloud providers (including Google Cloud Platform and OpenAI, based in the United States). Before making any such transfer, we conduct a risk assessment to ensure adequate levels of protection are in place and that the transfer complies with the PDPA 2010 and applicable transfer regulations.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in significant harm to you, we will notify you and the Personal Data Protection Commissioner as required under the PDPA 2010 (as amended). Notification will be made without undue delay once we become aware of and have assessed the breach. We will inform you of the nature of the breach, the likely consequences, and the measures taken or proposed to address it.

11. Cookies and Tracking

The App does not use browser cookies. We use anonymised analytics to understand usage patterns and improve the service. Our marketing website may use cookies; you can manage cookie preferences via your browser settings.

12. Children's Privacy

Minitku is not intended for children under the age of 13. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App. Continued use after notification constitutes acceptance of the updated policy.

14. Regulatory Authority

For more information about your rights under the PDPA 2010, you may refer to the Personal Data Protection Department (JPDP) Malaysia at www.pdp.gov.my.

15. Contact Us

For any enquiries relating to your personal data or this Privacy Policy, please contact: