How Jentra OH Click uses your details
This notice covers the Jentra OH Click learning app. It is for learners. You agree to this notice when you create an account. It is written in English and Malay as the Personal Data Protection Act 2010 asks.
- 01
Who is responsible
Jentra Labs Sdn. Bhd. (202601044573 (1706668-M)) runs Jentra OH Click. "Jentra" and "we" in this notice mean Jentra Labs Sdn. Bhd. Our address is No 20, Jalan Bunga Raya Satu, Kampung Baru, 68100 Batu Caves, Selangor.
- Jentra decides what data the app keeps and why. Jentra is the data controller for your data.
- 02
What we collect
- Your account: your email address and your password. The app stores the password only as a one-way hash. Nobody can read it back.
- What you tell the app about yourself: what brings you here, how much time you have each week, and your exam date if you give one.
- What you do in the app: each answer you give, how sure you said you were, and when you answered.
- The lessons you open and where you stopped. Your notes. The problem reports and feedback you send. Each one keeps the screen you sent it from.
- What the study helpers said to you and a record of what each reply cost.
- Your access: when your trial started and ends, and any pass you hold.
- A one-way hash of your email address. The hash stops a second trial with the same address.
- A record of each sign-in. We keep it to keep your account secure. The time of your daily reminder when you turn one on.
Do not type a real worker's or patient's name, identity number or results anywhere in the app. Jentra OH Click is for study. It does not hold clinical records.
- 03
Why we use it
- We use it to run the app for you: lessons, questions, review sessions, notes and your study plan.
- The study helpers use it to write explanations, plans and weekly summaries for you.
- We use it to sign you in, manage your trial and access, and keep your account secure.
- We use it to send invitations, password resets and the reminders you turn on.
- We use it to answer your support requests and problem reports. We also use it to correct the content.
We never sell your data. We do not use your data to train any AI.
- 04
Where the data comes from
- You give us data when you sign up and use the app.
- 05
What you must give
- An email address and a password are required for an account. You cannot use the app without them.
- What brings you here and your weekly study time are required. The app uses them to plan your study.
- Your exam date, notes, reports and reminders are optional.
- 06
Who receives it
- Jentra staff open your data only to give the support you ask for, or to fix a fault that stops the app working.
- Supabase runs the database and the sign-in service.
- Google Vertex AI runs Gemini for the study helpers. The app sends Gemini only the study material that a reply needs. It never sends your name, your email address, your user id or anything you type.
- Brevo delivers invitations, password resets and reminders. Brevo receives your email address for that.
- GitHub runs the nightly backup job. The job encrypts the backup on a GitHub machine before it stores the backup.
- Cloudflare R2 stores the encrypted backups. Only Jentra holds the key that opens them.
- Firebase Hosting serves the app's files. Those files hold none of your data.
- Google stores the emails you send us. Anthropic runs the AI assistant that helps us sort emails and draft replies.
- ZH Healthcare Sdn. Bhd. (1469895-W) collects pass payments for Jentra until Jentra's bank account opens. It receives your bank transfer.
- A government body or a court receives data when the law requires it.
- 07
Where it is stored
- Supabase holds your account and the data above in Singapore.
- Vertex AI processes the study helper requests in Singapore (the asia-southeast1 region).
- Cloudflare R2 keeps the encrypted backups in its Asia-Pacific location.
- GitHub, Brevo and Anthropic may process data outside Malaysia.
Singapore is outside Malaysia. We tell you about these transfers here because the Commissioner's guideline on cross-border transfer asks for it.
- 08
How we protect it
- The app stores your password only as a one-way hash.
- Database rules let each learner read only that learner's own records.
- The study helpers never receive your name, your email address or your user id.
- Jentra staff sign in to the staff tools through Cloudflare Access.
- The backups are encrypted. Only Jentra holds the key that opens them.
- 09
How long we keep it
- We keep your data while your account exists. This includes the time after your access ends. You can then continue where you left off if you come back.
- Backup copies are deleted after 30 days.
- You may ask us to delete your account at any time.
- We delete an account that has had no activity for 24 months.
- We keep the one-way hash of your email address for 3 years. The hash stops a second trial with the same address.
- 10
Your rights
- You may ask to see the personal data we hold about you. You may also ask for a copy.
- You may ask us to correct data that is wrong, incomplete, misleading or out of date.
- You may withdraw your consent by writing to us. We then stop processing your data. We cannot keep your account open without your consent.
- You may ask us to send your data to another service you choose. We do this when it is technically possible and the data format fits.
- You may limit what you give. You may leave the optional details blank and keep reminders off.
Email hello@jentra.my from the address you sign in with to use a right. Say what you are asking for. We reply within 21 days.
- 11
Questions and complaints
Email hello@jentra.my about anything in this notice. You may also complain in writing to the Personal Data Protection Commissioner. The Commissioner's email address is aduan@pdp.gov.my.
- 12
Data protection officer
Jentra has not appointed a data protection officer. The Commissioner's guideline requires one above 20,000 people. The limit is 10,000 people for sensitive data. Jentra is below both numbers. Send privacy questions and requests to hello@jentra.my.
- 13
Data breaches
- A data breach means personal data is lost, misused or opened without permission.
- Jentra tells the Personal Data Protection Commissioner about a breach of your data within 72 hours.
- We tell you within 7 days after that when the breach is likely to cause you significant harm.
- 14
Changes to this notice
A changed notice gets a new version number and a new effective date. Both appear at the top of this page. The app records the version you accepted. We tell you about a new version by email and by a message in the app. You accept the notice again only when a change is material.