Privacy Policy
Effective date: 10 May 2026
Apex SkillWorks Consultancy (“Apex”, “we”, “us”, “our”) operates the Apex Skillworks mobile application and the apexskillworks.com web admin (together, the “Service”). This policy explains what we collect, why, how we keep it safe, and the rights you have over your data. If anything below is unclear, contact us at [email protected].
1. Who we are
| Operator | Apex SkillWorks Consultancy |
| Contact | [email protected] |
| Location | Kuala Lumpur, Malaysia |
2. Information we collect
2.1 Information you give us
| Data | When | Why |
|---|---|---|
| Email address | Signup, login | Authentication, password reset, broadcast announcements |
| Name | Signup, profile edit | Display in app, member roster |
| Phone number (optional) | Profile edit | Admin contact |
| Date of birth | Signup | Age verification + member records |
| Profile photo (optional) | Profile edit | Display in app, chat, member directory |
| Chat messages | Community chat | Member discussion |
| Inquiry text | Contact form | Customer support |
2.2 Information collected automatically
| Data | Why |
|---|---|
| User ID, session token | Authentication |
| Membership status, expiry date | Access control |
| Event registrations, attendance | Show “My events” |
| Push notification token (FCM/APNs) | Sending event reminders + admin announcements to your device |
Device platform string (ios/android) | Routing the right push payload |
| Diagnostic / crash data (PII-scrubbed) | Improving app stability |
2.3 Information we do not collect
We do not collect: precise location, contacts, browsing history, search history, advertising identifiers, health/fitness data, banking information, biometric data, or messages outside the in-app community chat. We do not process payments inside the app — membership and event fees are arranged externally via WhatsApp / bank transfer with our team.
3. Permissions we request (mobile app)
| Permission | Purpose |
|---|---|
| Camera | Take a profile photo or capture a payment receipt to share with our team. We only access the camera when you tap the camera button — never in the background. |
| Photo library | Pick an existing photo for your profile or to attach to an inquiry. |
| Notifications | Deliver event reminders, payment confirmations, expiry warnings and admin announcements. You can disable these in your phone settings at any time without affecting other app features. |
| Internet | Communicate with our backend at api.apexskillworks.com. |
You can revoke any of these permissions in your device's Settings app.
4. How we use your information
- Provide the Service (signup, login, course catalog, event registration, chat).
- Manage your membership and notify you of expiry/renewal.
- Send transactional notifications (event reminders, payment confirmations, admin broadcasts).
- Respond to your inquiries and support requests.
- Improve and secure the Service (crash diagnostics, abuse prevention).
- Comply with applicable laws.
We do not sell your personal data, share it with advertisers, or use it for ad targeting.
5. How we share your information
| Recipient | What | Why |
|---|---|---|
| Our hosting / cloud infrastructure (Plesk on AlmaLinux, Cloudflare CDN) | Encrypted application traffic | To run the Service |
| Google Firebase Cloud Messaging | Push notification token + payload | To deliver pushes to Android devices |
| Apple Push Notification Service | Push notification token + payload | To deliver pushes to iOS devices |
| Sentry (when crash reporting is enabled) | Crash stack traces (PII scrubbed) | Diagnostics |
| Resend (when configured) | Email recipient + content of transactional emails | To deliver password resets / verification emails |
| Law enforcement | Only when legally compelled and with notice to you where lawful | Compliance |
6. Data retention
| Data type | How long we keep it |
|---|---|
| Account info (name, email, phone, DOB) | While your account is active + 30 days after deletion request |
| Membership records | Indefinitely while account exists, for audit purposes |
| Event registrations / attendance | Indefinitely while account exists |
| Payment receipt records | Indefinitely (financial record-keeping) |
| Chat messages | Indefinitely while account exists; may be removed by moderators |
| Crash diagnostics | 90 days |
| Push notification tokens | Until the device unregisters or logs out |
7. Your rights
| Right | How |
|---|---|
| Access your data | Profile → Privacy & Security → Download my data |
| Update your details | Profile → Edit |
| Delete your account and data | Profile → Account → Delete account |
| Withdraw consent to push notifications | Phone Settings → Notifications → Apex Skillworks → Off |
| File a complaint | [email protected] — we respond within 7 working days |
If you are in a jurisdiction that grants additional rights (GDPR, PDPA Malaysia, CCPA), those rights apply in full.
8. Children
The Service is not intended for users under 13. If we discover we have collected data from a child under 13, we delete it. Parents who suspect this has happened can contact us at [email protected].
9. Security
- All data is encrypted in transit (HTTPS / TLS 1.2+).
- Passwords are stored as bcrypt hashes — never as plaintext.
- Access tokens are short-lived (15 min) and refreshed via secure HTTP-only cookies.
- Servers are hardened, patched regularly, and behind Cloudflare.
- Database backups are encrypted at rest.
No system is perfectly secure. If you believe your account has been compromised, contact [email protected] immediately.
10. International transfers
Our infrastructure is located in Asia-Pacific (Plesk server in Malaysia). Push notification routing uses Google FCM (US) and Apple APNs (US). When data is transferred internationally, it remains covered by the protections in this policy.
11. Changes to this policy
We will update this page with the new effective date when we make material changes. For significant changes that affect your rights, we will notify you via the in-app notifications system or email.
12. Contact
Last updated: 10 May 2026