SIMPLER TAX · PRIVACY version 1.0 · last updated 31 August 2026 This statement is written to be readable, and to describe honestly what we collect, which is close to nothing. It covers the Simpler Tax application and this website, simpler.tax, and it is our data protection statement for the purposes of Singapore's Personal Data Protection Act 2012 (the "PDPA"). 1. WHO WE ARE Simpler Tax is made by Simpler Terminal Value Systems Pte. Ltd. (UEN 202550777E), a company incorporated in Singapore ("we", "us"). Our Data Protection Officer can be reached at dpo@simpler.asia. Questions, access requests, correction requests and complaints under the PDPA all go there, and are read by a person. 2. THE SHORT VERSION The application sends us nothing. It has no account, no sign-up, no telemetry, no crash reporting, no update checks and no sync. Your books never leave your machine, and we could not read them if we wanted to. This website sets no cookies, runs no analytics and loads nothing from any other host. The only personal data we ever hold about you is what you choose to email us. 3. THE APPLICATION When you use the Software, we do not collect, use, disclose or see any personal data at all, about you or about anyone else. There is nothing to opt out of, because there is nothing switched on. The Software makes no outbound network connection. Its engine listens only on 127.0.0.1 and speaks only to the application on the same machine, and the application counts every attempt any bundled component makes to reach the network and shows you the counter in the corner of the window. Your company file is an ordinary SQLite database in a folder you chose, on a machine you control. Documents you scan or import stay beside it. The people in your books. Invoices, receipts and payroll records you keep with the Software name customers, suppliers and employees. Under the PDPA, you are the organisation in control of that data. It is stored on your machine, in files you own, and the Software never transmits it to us or to anyone. We are not a data intermediary for it, we have no access to it, and no clause of this statement needs to cover it, which is the point of the design. One component outside our control: the Software's window is drawn by Microsoft Edge WebView2, a Windows component that performs its own telemetry and update checks according to your Windows settings. Those are between it and Microsoft, and nothing about your books, your figures or your documents is included in them. The Software's licence says the same, because it is true in both places. 4. THIS WEBSITE The page in front of you sets no cookies, runs no analytics and fetches nothing from any other host: no hosted fonts, no tracking pixels, no embedded scripts from third parties. You can view source and check. Serving a page still involves connection data. The infrastructure that answers your request sees your IP address, the time, the file requested and your browser's user agent string. Our hosting provider processes and briefly retains such logs to deliver the site and defend it against abuse, as any host does. We do not use those logs to identify you, we do not enrich them with anything, and we build no profile from them. Downloading the installer is a file transfer in the same logs. There is no registration and no download is tied to a person by us. 5. EMAIL If you write to support@simpler.asia or dpo@simpler.asia, we receive what you send: your address and whatever you put in the message. We use it to answer you. We do not add it to any list (we keep no list), we do not share it, and we keep the correspondence only as long as reasonably necessary for the matter it concerns and for our own records. 6. WHAT WE DO NOT DO We do not sell, rent or trade personal data. We do not profile anyone. We serve no advertising and have no advertising partners. We run no newsletter, no CRM and no user database, because the Software has no accounts. We will never call or message you, which makes the PDPA's Do Not Call provisions the easiest clause we comply with. 7. YOUR RIGHTS Under the PDPA you may ask what personal data of yours we hold, ask us to correct it, and withdraw any consent you have given us. Write to dpo@simpler.asia. Because we hold almost nothing, the honest answer to most access requests will be: your own emails, and nothing else. If our answer does not satisfy you, you may complain to the Personal Data Protection Commission of Singapore (pdpc.gov.sg). 8. RETENTION, SECURITY AND TRANSFERS What little we hold, which is correspondence, sits on reputable, access-controlled services and is kept no longer than reasonably necessary. Where a provider of ours stores or serves data outside Singapore, we rely on contractual and legal safeguards that hold it to a standard of protection comparable to the PDPA, as section 26 requires. Your books are outside every sentence of this clause, because they are on your machine, not with us. 9. CHILDREN The website and the Software are business tools. They are not directed at children and we knowingly collect nothing from anyone, children included. 10. CHANGES If this statement changes, the new version appears here with a new date at the top. Since the whole design is that we hold nothing, expect changes to be rare and boring. Simpler Terminal Value Systems Pte. Ltd. (UEN 202550777E) · Singapore