Privacy Policy

1. Who we are

GAINWELLS GLOBAL SDN. BHD. is the data controller responsible for your personal data.

2. Personal data we collect

Information you give us

• Contact details, such as your name, email address, phone number and company name, when you contact us, fill in a form or request a service.
• Enquiries you send through the contact form on our website: your name, company, email address, the area you are interested in and your message.
• Conversations with the AI assistant on our website: the messages you type and the assistant’s replies are stored as a transcript. If you choose to leave your name, email address or other contact details in the chat, we store them with the conversation so the team can follow up.
• Account details, such as your name, email address and password, if you create an account in one of our Apps.
• Content you send us, such as messages, feedback, files or support requests.

Information collected automatically

• Device and usage data, such as device model, operating system, app version, language, IP address, pages or screens viewed and the time and date of use.
• Diagnostic data, such as crash reports and performance data, used to find and fix problems.
• Information stored in your browser by our website (see section 9).

Information collected only with your permission

Some App features may ask for access to your device, for example notifications, camera, photos or location. We only request this when you use a feature that needs it, we only use it for that feature, and you can turn it off at any time in your device settings.

Payments

If an App offers in-app purchases or subscriptions, payment is handled by Apple (App Store) or Google (Google Play). We do not receive or store your card details; we only receive confirmation of the purchase.

3. How we use personal data

• To provide, operate and maintain our website, Apps and services, including creating and managing your account.
• To reply to your enquiries and provide customer support.
• To answer your questions through the AI assistant on our website, and to let our team read the conversation and follow up where you have asked us to or left your details.
• To send you service messages, such as account, security and update notices, and, where you have agreed, push notifications.
• To send you marketing emails, only where you have agreed. You can unsubscribe at any time.
• To keep our services secure, prevent fraud and abuse, and fix problems.
• To understand how our services are used and improve them.
• To meet our legal and regulatory obligations.

4. Legal basis

We process personal data with your consent, to perform a contract with you (for example, to provide your account), to meet legal obligations, or for our legitimate interests in running and improving our services, where those interests are not overridden by your rights.

5. Sharing personal data

We do not sell your personal data, and we do not share it with third parties for their own advertising. We share it only with:

• Service providers that help us run our services, such as hosting, email, analytics, crash reporting and customer support providers, who may use it only on our instructions.
• Our email delivery provider, Resend, which delivers the enquiries you send through the contact form, and the details you leave with the AI assistant, to our team by email.
• The AI model provider we use to generate the assistant’s replies — Anthropic, OpenAI or Google (Gemini), depending on how the assistant is configured. The messages you type in the assistant are sent to that provider to produce a reply.
• Apple and Google, when you download our Apps or make purchases through their stores, under their own privacy policies.
• Authorities or other parties where the law requires it, or to protect our rights, users or the public.
• A buyer or successor if our business is sold or reorganised, under the same protections.

6. International transfers

Some service providers, including the email and AI providers named in section 5, may process personal data outside Malaysia. Where they do, we take reasonable steps to ensure it receives a level of protection comparable to that required in Malaysia.

7. How long we keep personal data

We keep personal data only for as long as needed for the purposes in this policy. Account data is kept while your account is active and deleted within 30 days after you delete your account, except where we must keep some records for longer by law (for example, tax and accounting records).

8. Your rights and choices

Subject to applicable law, you can ask to access, correct or delete your personal data, to restrict or object to how we use it, to receive a copy of it, or to withdraw your consent. To do so, email info@gainwells.com. We will reply within 21 days. You may also complain to the data protection authority in your country; in Malaysia this is the Personal Data Protection Commissioner.

Deleting your account: you can ask us to delete your App account and its associated data at any time. See how to delete your account.

9. Cookies and browser storage

Our website uses analytics and advertising cookies (such as Google Analytics, Meta Pixel and Microsoft Clarity) only if you accept them in the cookie banner. If you decline, none of them load. You can change your choice at any time with “Cookie settings” in the footer. The site also stores a small amount of information in your browser’s local storage so it works as expected:

• your choice of light or dark theme;
• a random session identifier that keeps your conversation with the AI assistant together, so it can continue if you move between pages;
• your cookie choice, so the banner does not appear again.

You can also clear or block browser storage and cookies in your browser settings; some parts of the site may then not work properly.

10. Children

Our services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Third-party links

Our website and Apps may link to other websites or services. We are not responsible for their privacy practices.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the date above. If the changes are significant, we will also tell you in the App or by email.

14. Contact us

For any question about this policy or your personal data, contact: