Back to site
Your Privacy Matters

Privacy Policy

Last updated 28 September 2026

This policy explains what personal information IPIQA Holdings Sdn Bhd ("IPIQA", "we", "us") collects, why, who sees it, how long we keep it, and your rights. It covers the IPIQA website (ipiqa.com), the IPIQA app for customers, and the IPIQA Hygienist app for cleaners. We handle your information under the Personal Data Protection Act 2010 (PDPA).

1. What we collect

If you use the website

  • The contact form: your name, email, phone number and message.
  • Basic technical details: your IP address and browser, which our web server records for security.
  • We do not use advertising or tracking cookies, and we do not use analytics tools on the website. Your light or dark display choice is stored in your own browser only.

If you are a customer (IPIQA app)

  • Account: your full legal name, the name you want the app to call you, email, phone number, gender, and a profile photo if you add one. Your password is stored scrambled (hashed); nobody at IPIQA can read it.
  • Addresses: the addresses you clean at, with the map pin you set.
  • Bookings: what you booked, when, notes for your cleaner, cancellations, ratings, reports, and photos you send for a quote or a report.
  • Payments: amounts, payment status and the reference number of your transfer. We never see or store your card details or online banking login.
  • Points and rewards: your points, tier and rewards.
  • Messages: your chat with your cleaner, and messages with our office.

If you are a cleaner (IPIQA Hygienist app)

  • Application: full legal name, preferred name, phone, email, identity card number, gender, citizenship declaration, a reference person's name and phone, and your photo.
  • PERKESO (SOCSO): your registration number and contribution plan, because the law requires us to deduct and pay your contribution.
  • Payouts: the bank account in your own name where we send your pay.
  • Work: your service areas, the jobs you take, your arrival and finish photos, earnings, deductions, tier, ratings, reports about visits, and when you accepted each version of the Freelance Cleaner Service Agreement.
  • Location: only while you are travelling to a job, after you press Start travelling. See section 4.

From both apps

  • Device details: a notification token so we can send you alerts, your app version, and sign-in records (time and IP address) for security.
  • Verification codes we send to your phone or email to confirm it is yours.

2. Why we use it

  • to take and carry out bookings, match customers with cleaners, and show each side who is coming or where to go;
  • to take payments and pay cleaners;
  • to keep customers and cleaners safe, check who is at the door, and look into reports;
  • to answer your questions and send notices about your bookings or jobs;
  • to meet the law, including tax records and SOCSO contributions under the Gig Workers Act 2025;
  • to protect accounts and our systems from misuse.

We do not sell your information, and we do not use it for advertising by other companies.

3. Who sees what

  • Your cleaner sees your full name, photo, the booking address and your booking notes, only for a job they have accepted.
  • Your customer sees your full name, photo and IPIQA licence number, your position on the map while you travel to their job, and your arrival and finish photos.
  • Cleaners and customers do not see each other's phone numbers. A cleaner's home address and identity card number are never shown to customers. They talk through the in-app chat.
  • Our staff see what they need to run bookings, payments and support. Access to cleaners' identity card numbers is restricted and every view is recorded.
  • Authorities, when the law requires it, such as PERKESO, the tax authorities, or the police with a lawful request.

4. Location

We only collect a cleaner's location while they are travelling to a job. The customer sees it on the map until the cleaner arrives. The route is deleted when the cleaner arrives or the job ends. We do not track cleaners at any other time, and we do not collect customers' location; customers set their address pin themselves.

5. Services we use

We use a small number of outside services to run IPIQA. Each one only gets what it needs:

  • Our web hosting provider stores the website, the apps' data and uploaded photos.
  • Google Firebase Cloud Messaging delivers notifications to your phone.
  • OpenStreetMap provides the map pictures in the apps. Your phone asks it for the area being shown.
  • OpenStreetMap Nominatim turns an address you type into a map point.
  • OSRM works out the road route between the cleaner and the address.
  • Email and SMS providers deliver verification codes and notices.
  • Your bank or payment provider processes your payment.
  • WhatsApp, only if you choose to contact Customer service there. WhatsApp's own privacy policy applies to that chat.
  • An AI provider, only when the Help Centre's AI helper is switched on. Your question, and the basic facts it needs to answer (such as your booking's status), are sent to write the reply. Help Centre questions are not stored by IPIQA.
  • Google Fonts and cdnjs supply the website's fonts and icons, so your browser contacts them when you open a page.

Some of these services run outside Malaysia. We only use them for the purposes above.

6. How long we keep it

  • Chat messages between customers and cleaners are deleted after the period shown in the app.
  • Notifications in your inbox are deleted after a set period.
  • A cleaner's route is deleted when they arrive or the job ends.
  • Bookings, payments, earnings and SOCSO records are kept for at least seven years, because Malaysian tax and social security law requires it. Arrival and finish photos are kept with the booking as the record of the visit.
  • Contact form messages are kept while we deal with your question.
  • Security records such as sign-in attempts are kept for a limited time.

7. Deleting your account

Customers can delete their account in the app once none of their bookings are still open. When you do, you are signed out everywhere, your email and phone number are removed, and your points, tier and rewards end. Your name and past bookings and payments are kept, because the law requires us to keep tax records.

Cleaners can ask the office to close their account. Pay already earned is still paid. Records the law requires, such as earnings and SOCSO contributions, are kept.

8. Keeping it safe

Everything travels over encrypted connections (HTTPS). Passwords are stored scrambled. Staff access is limited to what each role needs and sensitive views are recorded. No system is perfectly secure, but if a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commissioner as the law requires.

9. Your rights

Under the PDPA you can:

  • ask what personal information we hold about you and get a copy;
  • ask us to correct anything that is wrong;
  • withdraw your consent, or ask us to stop using your information for a purpose, though we may then be unable to provide the service;
  • ask us to stop sending you promotional messages.

You can update most details yourself in the app. For anything else, contact us (section 11). We reply within 21 days. We may ask you to confirm who you are first.

10. Children

IPIQA accounts are for people aged 18 and over. We do not knowingly collect information from children.

11. Contact us

Questions or requests about your information: use Customer service in the app, or the contact form on this website.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change affects you in a significant way, we let you know before it applies.