Security & Privacy

Updated 1 October 2026

1. In short

Untng holds your business’s money records, receipts and invoices. This page explains, briefly, how those records are looked after. The full detail is in the Privacy Policy.

2. Your records are kept separate

Database rules make sure an account can only read the records of its own business. Another business cannot see yours.

3. Staff and roles

You decide who joins your business. A worker sees only the records they entered; profit figures are for the owner and partners.

4. Signing in

The app is reached over HTTPS. You sign in with Google or e-mail and password, and Untng never sees your Google password.

5. Receipt photos and invoice links

Your records and photos are encrypted with AES-256 at rest and with TLS in transit.

Receipt photos are stored privately, not as public links; the app opens them with short-lived links. Each invoice link carries a random 122-bit code that cannot be guessed, shows only that one invoice, and expires automatically after a short period.

6. AI

When you scan a receipt, its image is sent to our AI provider, Anthropic, to pick out the details. Anthropic’s infrastructure is located outside Malaysia. Prefer not to? Enter that receipt by hand, and no image is sent.

7. Where your data is stored

Your data is stored in Singapore. Payments are processed by Razorpay Curlec; we do not see or store your card details. The full list of providers is in the Privacy Policy.

8. Your data is yours

We do not sell customer data. You can export your records to Excel and delete your business from Settings.

9. What you can do

• Invite staff with the role that fits; do not share one login.
• Send an invoice link only to the customer it is for.
• Enter a receipt by hand if you do not want its image sent to the AI provider.

10. Contact us

Found a security problem? E-mail support@untng.my and tell us what you saw. See also the Privacy Policy and the Terms of Service.