Privacy Policy — InsureCheck Diagnostic

1. About this policy

InsureCheck Diagnostic (“InsureCheck” or the “App”) is operated by Miifix Sdn Bhd (“we”, “us”, or “our”).

The App performs device diagnostic tests for trade-in, inspection, repair, support, or related device-assessment services. This Privacy Policy explains how information is accessed, collected, used, disclosed, retained, and protected when you use the App.

2. Information we collect

Diagnostic job information

We may collect:

• The diagnostic job code entered or scanned in the App.
• The assigned diagnostic-set code and version.
• Session, submission, and receipt identifiers.
• Job status and diagnostic timestamps.

A job code may be associated with a trade-in transaction, retailer, service provider, or customer record held outside the App.

Device and app information

We may collect:

• Device manufacturer and model.
• Operating-system name and version.
• Android SDK version or equivalent platform information.
• Whether the device appears to be physical or virtual.
• App version and build number.

Diagnostic results

We collect the results of tests assigned to the diagnostic job. Depending on the assigned diagnostic set, these may include:

• Pass, fail, unavailable, inconclusive, or skipped status.
• Test start and completion times.
• Reason codes and number of attempts.
• User confirmations about whether a component worked.
• Technical measurements, counts, or capability information relating to the display, touchscreen, buttons, cameras, flashlight, microphone, speakers, vibration, battery, sensors, Wi-Fi, Bluetooth, positioning, biometrics, and other supported components.

IMEI

Where the assigned diagnostic set includes the IMEI test, the App collects the full 15-digit IMEI confirmed by the user.

The IMEI may be used to associate the diagnostic result with the physical device being inspected. It may be entered manually or detected from a screenshot selected by the user. When screenshot detection is used:

• The screenshot is processed on the device.
• The screenshot itself is not included in or uploaded with the diagnostic result.
• Raw barcode content is not included in the submitted result.
• The confirmed IMEI and limited processing information, such as the entry method and validation result, may be submitted.

If IMEI is marked as required for the assigned diagnostic set, the diagnostic job cannot be completed by skipping that test.

Network request information

When the App communicates with our servers, the server necessarily receives technical connection information such as the IP address, request time, response status, and related security or server-log information.

3. Sensitive permissions and on-device processing

The tests included in a diagnostic job determine which permissions and device features the App accesses.

Camera and photos

Camera access may be used to:

• Scan a diagnostic-job QR code.
• Display a camera preview.
• Test front or rear cameras.
• Test the flashlight.

Camera images and frames used during diagnostic tests are not uploaded or included in the diagnostic report.

If you select an IMEI screenshot, the App accesses only the selected image for local barcode analysis. The original image remains under your control in your photo library.

Microphone and audio

Microphone access may be used to record a short local sample and measure whether microphone input is detected. Temporary recordings are not submitted as part of the diagnostic result and are deleted when the diagnostic session ends.

The App may play test audio and record your confirmation about whether it sounded correct.

Location, Wi-Fi and Bluetooth

Depending on the device and operating-system version, location permission may be required by Android for nearby Wi-Fi scanning, Bluetooth scanning, or a positioning/GNSS test.

The submitted diagnostic report does not include latitude, longitude, Wi-Fi network names, BSSIDs, or Bluetooth hardware addresses. It may include non-coordinate diagnostic evidence such as permission state, radio state, result counts, freshness, accuracy measurements, satellite information, and test timing.

The App does not access location in the background.

Biometrics

Biometric testing uses the device operating system’s authentication interface. We do not receive or store fingerprint images, facial images, biometric templates, or device passcodes.

The diagnostic result may record limited information such as whether biometric authentication is supported and whether the authentication attempt succeeded.

Phone and calls

The App may open the system phone interface for an IMEI display code or guided call test. The App does not automatically place calls and does not collect call logs, dialled phone numbers, call state, contacts, or call audio.

4. How we use information

We use collected information to:

• Resolve and validate diagnostic jobs.
• Determine which diagnostic tests should be performed.
• Save and restore an interrupted diagnostic session.
• Evaluate device components and capabilities.
• Generate and submit diagnostic reports.
• Associate a report with the applicable device and job.
• Support trade-in, repair, inspection, valuation, quality-control, or customer-support processes.
• Detect duplicate or invalid submissions.
• Maintain service security and prevent misuse.
• Diagnose technical problems and improve service reliability.
• Meet legal, regulatory, or contractual obligations.

We do not use diagnostic information for advertising or behavioural profiling.

5. How we disclose information

We may disclose relevant information to:

• The organisation, retailer, repair provider, trade-in provider, or business partner that issued or manages the diagnostic job.
• Hosting, infrastructure, storage, security, and technical service providers that process information on our behalf.
• Professional advisers, auditors, or insurers where reasonably necessary.
• Regulators, courts, law-enforcement bodies, or other parties when required by law.
• A successor organisation in connection with a merger, acquisition, restructuring, or transfer of the applicable business, subject to appropriate safeguards.

We do not sell personal information or provide it to advertising networks.

6. Local storage and user-directed exports

The App stores the active diagnostic job and current session on the device so that testing can continue after an interruption. This local information may include diagnostic results and the confirmed IMEI when an IMEI test was performed.

Local session information remains until the job is released or replaced, the App’s data is cleared, or the App is uninstalled.

The App may allow a user to export a privacy-filtered diagnostic report using the device’s sharing interface. Once a user sends or saves an export through another application, that copy is controlled by the selected recipient or service and is subject to its privacy practices.

7. Retention and deletion

Submitted diagnostic-job information, results, and IMEI are retained for 24 months after completion of the trade-in transaction.

Server and security logs are retained for 1 year. Backups may remain for up to 7 years before being overwritten or securely deleted.

We may retain information for longer where necessary to:

• Complete a transaction or provide the requested service.
• Comply with legal, accounting, audit, or regulatory requirements.
• Resolve disputes.
• Prevent fraud or misuse.
• Establish, exercise, or defend legal claims.

When information is no longer required, we delete it, anonymise it, or restrict further processing.

To request deletion, contact support@miifix.com and provide the diagnostic job code or receipt identifier where available. Some information may be retained where required by law or necessary to complete or document a transaction.

8. Security

We use reasonable administrative, technical, and organisational measures designed to protect information, including encrypted HTTPS connections when the App communicates with the diagnostic service, controlled access, and data minimisation in diagnostic reports.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on applicable law, you may have the right to:

• Ask whether we hold personal data about you.
• Request access to or correction of your personal data.
• Request deletion or restriction of processing.
• Withdraw consent where processing depends on consent.
• Object to certain uses of your information.
• Make a complaint to the applicable data-protection authority.

You can deny device permissions through your device settings. However, denying a permission may prevent the corresponding diagnostic test or job from being completed.

To exercise your rights, contact support@miifix.com. We may need to verify the request before acting on it.

10. International processing

Information may be processed in Malaysia and in other countries where our service providers operate. Where information is transferred internationally, we apply safeguards required by applicable law.

11. Children

The App is intended for device diagnostics and trade-in or service operations. It is not directed to children, and we do not knowingly collect personal data directly from children without the authorisation required by applicable law.

12. Changes to this policy

We may update this Privacy Policy when the App, our services, or legal requirements change. We will update the “Last updated” date and provide any additional notice required by law.

13. Contact us

Data controller/operator: MiiFix Sdn Bhd
Privacy email:support@miifix.com
Website: https://miifix.com

For unresolved Malaysian privacy complaints, users may also contact the Personal Data Protection Commissioner of Malaysia.