Legal

Privacy Notice

Last updated: 12 October 2026

This notice explains how Karya Akar Langit, trading as BabahFit, handles personal data in connection with this website and its services.

1. Who we are

BabahFit is operated by KARYA AKAR LANGIT (Registration No. KT0621460-H) in Malaysia.

2. Data this website processes

When you join the waitlist, we store your first name, email, signup time and source, consent records, email preferences and access status. New beta waitlist signups require a WhatsApp number and permission to contact you about beta access and feedback. Marketing consent is separate and optional. Joining a WhatsApp group is optional: we will ask separately before adding you, and group members can see one another’s phone numbers. Your goal, training location and main obstacle remain optional. Existing entries and their recorded permissions are preserved; we do not infer WhatsApp or group permission for earlier signups. We use these answers to help shape BabahFit and, after a secure account link, to prefill relevant onboarding questions for you to review.

We send a confirmation and notifications about your requested access. Marketing updates require your separate optional consent. Joining does not create an app account, verify your email, grant paid access or subscribe you to a paid plan. We record delivery outcomes to retry failed emails. Invitations can be linked after authentication using verified email ownership or a private invitation link.

Our hosting and security providers may process technical data needed to deliver and protect the site. To limit signup abuse, we keep a temporary hashed network identifier and attempt count, expiring within two hours. The waitlist database does not store your raw IP address.

3. Why we use personal data

• to respond to enquiries and provide requested services;
• to assess whether a programme is suitable and personalise coaching;
• to administer our relationship with you;
• to maintain security, prevent misuse and meet legal obligations.

4. Sharing and transfers

We use Supabase for private waitlist storage and account linking, our website host for the signup service, and Resend for confirmation and access emails. These providers may process data outside Malaysia. Authorised BabahFit administrators can view and export entries to manage access. We do not make the waitlist publicly readable.

5. Retention and security

Waitlist entries are kept until you ask to be removed or for up to 12 months after signup, unless you separately agree to continue receiving updates. Waitlist records are not publicly accessible. We use reasonable administrative and technical safeguards, but no internet transmission is completely secure.

6. Your choices and rights

You can skip the optional questions. Use the private preferences link in your confirmation email to stop marketing updates or requested access notifications separately. Stopping marketing does not stop access notifications. Stopping access notifications means we cannot send your invitation. Contact us for access, correction or deletion requests; these are handled by our team.

7. External links

Links to third-party services are governed by their own privacy notices. BabahFit is not responsible for how those services handle data.

8. Changes

We may update this notice when our services or legal obligations change. The date above shows the latest revision.