Privacy Notice
Last updated 5 September 2026. Version 2026-09.
1. Who we are
KenalDulu is a matchmaking app for people in Malaysia. It is operated by NADICODE TECHNOLOGIES (business registration number TR0347586-V), a business registered in Malaysia. In this notice, "we" means NADICODE TECHNOLOGIES and "you" means the person using KenalDulu.
This notice is issued under the Personal Data Protection Act 2010, including the amendments that came into force in 2025. It is available in English and Bahasa Melayu. Both versions have the same meaning. If they differ, the English version applies. For privacy questions, email privacy@nakjodoh.com.
2. What we collect
- Account: your email address, your Malaysian mobile number, and how you sign in (email code or Google).
- Profile: display name, date of birth, gender, who you want to meet, state, job title (optional) and a short description (optional).
- Photos: up to four photos you choose to upload.
- Verification selfie: one selfie in a pose we ask for. This is biometric data, which the Act treats as sensitive personal data.
- Location: your latest location point, if you allow it, so we can show people nearby. Other members only see a rounded distance, never your location.
- Activity: likes, passes, matches, messages, reports and blocks.
- Technical: IP address, device and browser type, the country of your connection, and security logs.
- Payments: CHIP handles your card, bank or e-wallet details. We only receive a payment reference, the amount and the status.
We do not collect your IC or MyKad number, passport number or home address.
3. Why we use your data
- To run KenalDulu: create your account, show your profile to suitable members, make matches and deliver messages.
- To keep members safe: check photos and selfies, act on reports, detect fake or underage accounts, and enforce our Terms.
- To confirm that you are 18 or older.
- To take payments for Premium and keep the records the law requires.
- To send service messages, such as sign-in codes and safety notices. We do not send marketing messages unless you agree to them.
- To meet our legal duties, such as answering lawful requests from authorities.
4. Your consent and your choices
By creating an account you agree to this notice. By taking the verification selfie you give explicit consent to its use for identity checking. You can skip the selfie. If you do, you will not receive the verified badge, and some members may choose not to receive messages from unverified members.
Your email address, mobile number, date of birth, gender, state and at least two photos are required. Without them we cannot create a profile. Job title, description and location are optional. You can withdraw your consent at any time by deleting your account. Some records may be kept where the law requires it, as described in section 8.
5. Where your data comes from
Mostly from you. Some comes from your device, such as your IP address and, if you allow it, your location. Payment status comes from CHIP. Security logs come from our hosting providers.
6. Who we share your data with
- Other members see only what a profile is meant to show: your display name, age, state, rounded distance, photos, description and verified badge. Your email address and mobile number are never shown.
- Service providers who work for us under contract: hosting and database (Supabase, servers in Singapore), content delivery and security (Cloudflare), email delivery (Resend) and payments (CHIP Malaysia).
- Authorities, courts or regulators when the law requires it, or to protect the safety of a person.
We do not sell your personal data, and we do not share it with advertisers.
7. Transfers outside Malaysia
Our database is hosted in Singapore, and our content delivery network operates worldwide. This means your personal data is transferred outside Malaysia. We choose providers that protect data with encryption, access controls and contractual commitments. By using KenalDulu you consent to these transfers. If you do not agree, please do not use the service.
8. How long we keep your data
- Profile, photos, matches and messages: while your account is active.
- When you delete your account: your profile, photos and matches are removed straight away. Your sign-in record is erased after 30 days, and during those 30 days you can restore the account.
- Verification selfie: deleted after the review is completed.
- Reports and blocks: kept for up to two years after your account is deleted, so that safety decisions can be checked.
- Payment records: seven years, as required by tax and accounting law.
- Security logs: up to 30 days.
9. Your rights
Under the Act you can:
- ask for a copy of your personal data;
- ask us to correct data that is wrong or out of date;
- ask us to limit how we use your data;
- withdraw your consent;
- receive your data in a machine readable format (data portability), using Download my data in Settings;
- delete your account at any time.
We answer requests within 21 days, and we do not charge a fee. To make a request, use Settings in the app or email privacy@nakjodoh.com. If you are not satisfied with our response, you can complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi).
10. How we protect your data
Data is encrypted in transit. Photos and selfies are stored in private storage and shown through temporary links. Our database rejects any request to read another member's private data. Staff access is limited and recorded. We never store card details. Every photo and selfie is checked by a real person before it is shown.
If a data breach is likely to cause harm, we will notify the Commissioner within 72 hours and inform affected members without undue delay, as the Act requires.
11. Children
KenalDulu is for adults aged 18 and above. We do not knowingly collect data from anyone under 18. If we learn that a member is under 18, we remove the account.
12. Changes to this notice
We may update this notice from time to time. The date at the top shows the latest version. If a change matters to you, we will tell you in the app or by email before it takes effect.
13. Contact
NADICODE TECHNOLOGIES (TR0347586-V). Privacy: privacy@nakjodoh.com. Account help: support@nakjodoh.com.