Who we are
The Minhakim Travels JP app ("the app") is run by Minhakim Travels Sdn Bhd (company no. 1011569A, tourism licence KPL/LN 6979), Ayer@8, LOT D-G-5, Jalan P8G, 8C1, Presint 8, 62250 Putrajaya, Malaysia ("we", "us"). This policy covers the app. Our website and bookings are covered by our general Privacy Policy. We handle personal data in line with Malaysia's Personal Data Protection Act 2010.
What we collect
Your account
- Your name and email address.
- Your password. It is stored only as a one-way hash, so nobody, including us, can read it.
- Whether you have finished the welcome steps.
Your trip
- The trip code you enter, which links your account to a confirmed booking with us. Your flights, hotel, itinerary and guide come from our booking records; the app shows them to you.
Details you choose to add
- Contact email and phone number, and the emoji you pick as your avatar.
- Passport details: full name, passport number, nationality, date of birth and expiry date, and optionally a photo of the passport page.
- An emergency contact: their name, relationship to you and phone number.
- Your review of your tour guide: star ratings and any comments.
Security information
- Your IP address and device or browser details, recorded with each sign-in so we can keep your account secure and limit repeated attempts (for example, too many wrong trip codes or sign-in attempts).
What we don't collect
The app does not use your location, contacts, camera or microphone. It has no advertising, no analytics or tracking tools, and does not track you across other apps or websites. We never sell your personal data.
Permissions the app asks for
- Photos, only when you choose to add a passport photo. Only the photo you pick is uploaded.
- Notifications, so we can send trip reminders and important updates. You can say no or change this at any time in your phone's settings; the app works either way.
How we use your information
- To show you your trip and keep it available on your phone.
- To let you and your travel group see each other's details, as described below.
- To arrange and run your trip, and to help you if something goes wrong, for example if you lose your passport or need urgent help.
- To read guide reviews and improve our tours and guides.
- To email you a code when you ask to reset your password.
- To protect accounts and the app from misuse.
Who can see your information
- Your travel group, meaning everyone who has linked the same trip code, can see your name, avatar, contact email and phone number.
- Your passport is shared with your travel group only while "Share with travel group" is on. It is on when you first add a passport so your group can help each other at check-ins; you can turn it off at any time, and your group then only sees that you have added one.
- Your emergency contact is never shown to other travellers.
- Minhakim Travels staff who manage your trip can see which travellers have linked it and read guide reviews, and may access your details when needed to arrange your trip or help you in an emergency.
Keep your trip code within your travel group: anyone who signs up and enters it can see the trip and the group's shared details.
Service providers
The app's server, database, file storage and emails run on Cloudflare, which processes data for us under its own data protection terms and may do so outside Malaysia. Apple and Google provide the app stores you download the app from. We share your data with no one else, except when the law requires it or to protect someone's safety.
On your phone
Your sign-in is kept in your phone's secure storage, and a copy of your trip is saved on the phone so it opens without an internet connection. Both are removed when you sign out or delete your account.
How long we keep it, and deleting your account
We keep your app account and its details for as long as you have the account. You can delete it at any time in the app under Settings → Delete account. This immediately and permanently deletes your account, profile, passport details and photo, emergency contact, trip link and guide reviews. You can also ask us to delete it by emailing info@minhakimtravelsjp.com.
Your booking itself is separate from the app. We keep booking records as our general Privacy Policy and the law require.
How we protect it
- All connections between the app and our server are encrypted (HTTPS).
- Passport details and passport photos are encrypted when stored, and the photos are kept in private storage.
- Passwords are stored as one-way hashes, and repeated sign-in, reset and trip code attempts are limited.
No system is perfectly secure, but we take reasonable steps to protect your information.
Your rights
You can see and change most of your details in the app. You can also ask us for a copy of your data, ask us to correct or delete it, or withdraw your consent, by emailing info@minhakimtravelsjp.com. We will reply within 21 days.
Children
The app is meant for adult travellers. Children travelling with you do not need their own account, and children under 13 should not create one.
Changes to this policy
If we change this policy, we will update the date at the top and, for important changes, tell you in the app or by email.
Contact us
Minhakim Travels Sdn Bhd
Ayer@8, LOT D-G-5, Jalan P8G, 8C1, Presint 8, 62250 Putrajaya, Malaysia
Email: info@minhakimtravelsjp.com
Phone: +603-88618722