Privacy Policy
This policy describes the information handled by MAXCOM, a management and information display system for suraus and mosques.
Information stored
- The names and roles of committee members who use the app.
- The public keys of enrolled devices, used to verify those devices.
- Surau content such as prayer times, announcements, schedules and images.
- A change history showing who made a change, from which device and when, kept for at most 180 days.
Google and YouTube account data
If a surau administrator connects the surau's YouTube channel, MAXCOM stores the Google authorisation token in encrypted form. The token is used only to create and manage live broadcasts of lectures and to upload lecture recordings to that channel.
MAXCOM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data is not sold, not used for advertising, and not shared with third parties.
Access can be revoked at any time in your Google account settings.
Where data is stored
Data is stored on a device at the surau and on a cloud server in Malaysia. Backup copies are encrypted before they are stored. Connections to the cloud server use HTTPS through Cloudflare.
Your rights
To view, correct or delete your information, please contact your surau administrator.
Changes
This policy may be updated from time to time. Last updated: 9 November 2026.