Privacy policy

Last updated 7 October 2026. This says what Tolong Alih keeps about you, why, and who can see it, in plain words. Tolong Alih is run by Next Novas in Malaysia, and we handle personal data under Malaysia's Personal Data Protection Act 2010. The rules for using the app are in our terms of use.

What we keep, and why

• Your name and email. From sign-up, or from Google if you choose Google sign-in. We use them to make your account and to sign you in.
• Your Google profile picture. Only if you sign in with Google, and only to show it as your picture in the app. You can change it in the app.
• Your car plates. The plates you add in Garage, so that the right driver gets the alert.
• Blocks and messages. The blocks you declare or are caught in, and the short messages in them, so the two drivers can sort it out.
• Where you were. Your position when you declare a block, with the road, area, city and state of the place, and your approximate position to show the place name at the top of the app. Other drivers never see it.
• The state you open the app from. Once a day, when you open the app signed in, we note which state you are in (for example Selangor). Never your exact position. We use it to count how many drivers use the app each day and, as totals only, to show local shops roughly where drivers are.
• Your phone's alert address. A code your phone gives us so we can send you alerts. It is not a phone number.
• Counts and limits. A record that you used Trace (so nobody can try thousands of plates), and that an ad was shown to your account (so we count it once). Shops see only totals.

Information we get from Google

If you choose Google sign-in, Google tells us your name, email address and profile picture. We use them only to run your Tolong Alih account. We do not sell them, share them for advertising, or use them for anything else. Tolong Alih's use of information received from Google follows the Google API Services User Data Policy, including its Limited Use rules.

Who sees what

• The other driver sees your car plate and the short message, such as "back in 15 min". They do not see your name or email.
• Our team can see the records, only to run the service and fix problems.
• The services that run the app handle your data for us: Cloudflare for hosting (they also keep the ordinary request logs any host does), Neon for the database in Singapore, and Google for analytics (below) and for Google sign-in if you choose it.
• We may share totals with local councils and other public bodies to help plan parking, for example how many blocks happened on a road, and how long they lasted. Never plates, names, emails or accounts.
• To show the place name, your phone sends its approximate position to OpenStreetMap.
• We share your information with others only if the law requires it.

Analytics (Google Analytics)

We use Google Analytics to see how people find and use Tolong Alih, so we can improve it and tell which posts and links bring people in. Google receives the pages you open, your device, browser and language, your approximate area (from your connection, not from GPS), how you reached us (for example a link or a post), and a random ID kept in a cookie. We never send your name, email, car plate or exact position.

• We switch off Google's advertising features: no ad personalisation, and no linking to your Google account.
• Google keeps this data for up to 14 months. Its cookies (named _ga and _ga_…) last up to two years and belong to this app's address only.
• Each Next Novas app has its own separate analytics, so one app's numbers are never mixed with another's.
• We respect your browser's Do Not Track and Global Privacy Control settings. You can also install Google's opt-out add-on, or tell us on the Contact page.

Cookies and storage on your phone

We use a sign-in cookie to keep you signed in, and your browser's storage to remember your language and that you have seen the welcome page. Google Analytics adds its own cookies (see below). We use no advertising cookies.

How long we keep it

We keep your account and records until you ask us to delete them. A block ends on its own, but its record stays in your history until you delete it or ask us to. Alert addresses are removed when you sign out of a phone.

Your choices

• You can ask us to show you, correct or delete everything we keep about you. Deleting removes your account, your plates and your messages. For now we do it by hand: message us on the Contact page.
• You can remove a car in Garage, change your picture in the app, and turn alerts off in your phone's settings, at any time.
• If you gave us a phone number before we stopped asking, tell us and we will delete it.

Keeping it safe

Your data sits in a managed database behind sign-in, and each account can only read its own records. No system is perfectly safe. If something goes wrong with your information, we will tell you.

Who it is for

Tolong Alih is for people who drive. It is not meant for children.

Changes

If we change this policy, we will update the date at the top and tell you in the app if it matters.

Questions?

Message us on the Contact page. We read everything.