The short version
- Your company owns the investigations and data it enters. We store them to run BarrierCommand for you.
- Companies pay by annual invoice. If a plan isn't renewed, the account becomes read only. Nothing is deleted.
- We don't sell your data or show advertising. Marketing emails are sent only if you tick the box for them.
- We may study case data to improve the product and our training, but only after removing names of people and companies.
- You stay responsible for your investigations and findings. BarrierCommand is a tool, not a substitute for a competent investigator.
Early access
BarrierCommand is still being built. Some modules are available now and others are marked "coming soon". Your data is stored with industry-standard hosting and encryption, and access rules keep each company's data separate. Please only enter the personal information an investigation genuinely needs (see Privacy tips).
Part A · Terms of Use
1. About these terms
BarrierCommand ("the App") is provided by Cikgu Barrier Solutions (202603118741), Malaysia ("we", "us"). By creating an account or using the App, you agree to these Terms of Use and to the Privacy Notice in Part B. If you use the App for a company, you confirm you are authorised to accept these terms on its behalf.
2. What BarrierCommand is
BarrierCommand is a barrier management platform for health, safety and environment work. It is organised into modules around the life of a safety barrier: Command Center (overview), Recon (hazard identification), Brief (bowtie and HIRARC), Implement (field checks), Assure (audit and LOPA) and Debrief (incident investigation with Tripod Beta and STEP).
Modules are released over time. A module marked "coming soon" is not yet available. When a new module becomes available, any extra terms or fees for it will be set out in the App or in your quotation before you use it.
3. Early access service
The App is under active development. Features may change, and we may update, suspend or discontinue parts of it. We work to keep it available and your data safe, but we do not guarantee uninterrupted or error-free operation. Please keep your own exported copies (Word report, images, case library backup) of anything important.
4. Accounts and roles
- Each account is for one named person. Keep your password confidential and tell us promptly if you think your account has been used without permission.
- Within a company, each person has one role:
- Main user: creates and edits the company's investigations, writes reports, assigns recommended actions and invites the team.
- Viewer: reads, comments on and exports the company's investigations, but cannot change them.
- Manager: sees summaries and trends in Command Center and assigns and tracks recommended actions. Managers do not see investigation diagrams or comments.
- The number of seats for each role is set in your company's plan or quotation.
- A person can belong to only one company in the App at a time.
- The company decides who is invited to, or removed from, its account. People join a company only through an invitation link sent to their email address, or by being added by us at the company's request.
- You can also use the App with an individual account that doesn't belong to a company. Exports from individual accounts carry the Cikgu Barrier watermark.
5. Trials, plans and payment
- Trial: a new company account starts with a free trial, normally 60 days, with limited seats. We may extend a trial by agreement.
- Paid plan: companies pay for an annual plan by invoice, following a quotation. Fees, seats and the plan period are set out in the quotation or invoice. A paid plan removes the watermark from the company's exports.
- Renewal: before the renewal date, we send the company a renewal invoice and reminders. The plan renews only after the renewal invoice is paid. Nothing is charged automatically.
- If a plan is not renewed: everything keeps working for a 14-day grace period after the renewal date. After that the account becomes read only: the team can still sign in, read and export, but cannot edit. Nothing is deleted because a plan has ended.
- Fees already paid are non-refundable.
6. Your content
- You (or your company) own the investigation data and other content you enter. You give us permission to store and process it to provide the App to you, and to analyse it as described in Part B, section 6.
- You are responsible for the accuracy of what you enter, and for having the right to enter it, including any information about other people.
7. Assigning actions to other people
Main users and managers can assign a recommended action to anyone by email address, including people who don't have an account. When you do, the App emails that person on your behalf with a private link to view the action and update its status. You confirm that you have a legitimate work reason to contact that person about the action. Replies to the email go to you.
8. Professional responsibility
The App helps you structure and document risk assessments, barrier checks and investigations. Diagrams, ratings, findings and reports produced with it remain your responsibility. The App does not replace competent investigation, professional judgement, or your legal obligations, such as notifying incidents to DOSH where required.
9. Acceptable use
You must not use the App to store unlawful content; try to access other people's or other companies' data, or the App's systems, without authorisation; interfere with or overload the service, including by sending bulk or unwanted emails through it; or copy, resell or reverse-engineer the App.
10. Limitation of liability
To the extent permitted by law, we are not liable for indirect or consequential loss, or for loss of data or profit, arising from use of the App. Our total liability to you in any 12-month period is limited to the fees you paid us for the App in that period. Nothing in these terms limits liability that cannot be limited by law.
11. Suspending or closing accounts
You can stop using the App and ask us to close your account at any time. We may suspend or close accounts that breach these terms. When an account is closed, its data is handled as described in Part B, section 9.
12. Changes to these terms
We may update these terms as the App develops. We will show the new "Last updated" date on this page and, for significant changes, tell you in the App or by email. If you keep using the App after a change, you accept the updated terms.
13. Governing law
These terms are governed by the laws of Malaysia.
Part B · Privacy Notice
1. Who we are
Cikgu Barrier Solutions operates the App and is responsible for account data. For the investigation and other work data a company enters, the company decides what is entered and why, and we store and process it on the company's behalf.
2. What we collect
| Type | What it includes |
|---|---|
| Account | Name, email address, password (handled by our sign-in provider and never visible to us), company, role, and the date and version of these terms you accepted. |
| Company and billing | Company name, plan and trial dates, seat numbers, billing contact name and email, and quote or invoice requests (including any notes or purchase-order reference you give us). |
| Work data you enter | Case details, diagrams, timelines, findings, recommendations and comments (shown with the commenter's name). This may include information about people involved in or affected by an incident, if you choose to enter it. |
| Action assignments | The assignee's name and email, due date, urgency, status, notes and update history, and who assigned it. |
| Invitations | The invited email address, role, who sent the invitation, and when it was sent and accepted. |
| Bug reports | Your description, your email, the screen you were on, the app version, your screen size and browser details. |
| Email records | Which service emails were sent, to whom and when. We use this to prevent duplicate or excessive emails. |
| Marketing consent | Only if you tick the box: your email address, where you agreed, and the wording you agreed to. |
| On your device | The App keeps a copy of your cases and your sign-in session in your browser's storage so it keeps working on a weak connection. The case copy is removed when you sign out. We do not use advertising or tracking cookies. |
3. Why we use it
- To provide the App: storing your work, syncing it across your devices, and giving your company's team the access their roles allow.
- To manage accounts, trials, plans, invoices and support.
- To send service emails (section 4).
- To fix problems you report and keep the App secure.
- To analyse work data across cases and companies, after removing names (section 6).
- To send news, offers or training updates, only if you separately agree. You can withdraw that consent at any time.
4. Emails we send
- Service emails (sent as part of the App): confirming your email address, password resets, invitations to join a company, action assignments and reminders, trial and renewal reminders, and replies to quote requests.
- Action emails go to the person an action is assigned to, on behalf of the person who assigned it. That person's reply goes back to the assigner.
- Marketing emails are sent only to people who tick the opt-in box. Each one has an unsubscribe link.
5. Where it is stored and how it is protected
- Data is stored with Supabase, a cloud database provider, in its Southeast Asia (Singapore) region.
- Data is encrypted in transit and at rest.
- Access rules in the database restrict each company's data to its own members, according to their role. Viewers have read-only access, and managers see summaries only.
- The links emailed to action assignees are private and unique to each action. Anyone with the link can view and update that one action, so please don't forward it.
- We are continuing to strengthen security as the App develops.
6. Analysis of work data
- We may analyse the work data stored in the App (such as barriers, causes, findings, hazards and incident types) ourselves, or through data analysis service providers we engage.
- Before work data is analysed, we remove or replace the names of people and companies, so that results do not identify you, your company or any individual.
- Any provider we engage for analysis works only on our instructions, is bound by confidentiality and data protection obligations, and may not use the data for its own purposes.
- We will not publish or share analysis results that identify you, your company or any individual without your consent.
7. AI features
The modules available today do not send your data to AI services. If a future module offers AI assistance (for example, drafting a hazard list), we will explain what is sent and to whom inside that module before you use it, and update this notice.
8. Service providers and sharing
We do not sell your data. We share it only with providers that help us run the App, under confidentiality and data protection obligations, or where the law requires it:
| Provider | What they do |
|---|---|
| Supabase | Database, sign-in and server functions (Singapore region). |
| MailerSend | Delivers service emails from notifications@cikgubarrier.com. |
| MailerLite | Our marketing email list, only for people who opted in. |
| Our web host (Malaysia) | Serves the App's pages. |
| jsDelivr and cdnjs | Deliver the open-source code libraries the App runs on. Like any website, they see your device's IP address when your browser loads them. They do not receive your work data. |
| Data analysis providers | Only as described in section 6, on data with names removed. |
9. How long we keep it
- We keep account and work data while the account is active, including while a company's plan is read only.
- If you ask us to close your account, we delete your account details and identifiable work data within 30 days, except where we must keep certain records (such as invoices) by law.
- We may keep a copy of work data with names of people and companies removed (section 6) for analysis after an account is closed. If you ask us to delete that copy too, we will do so within 30 days.
- Bug reports and email records are kept for as long as they are needed to support you and run the service.
- Trials that end without a paid plan: the company's data is kept indefinitely (read only), unless the company asks us in writing, by email, to delete it. A company that wants its data removed can also delete it in the App itself before the trial ends.
10. Your rights
- Under Malaysia's Personal Data Protection Act 2010, you may request access to and correction of your personal data, and withdraw consent for its use.
- If you are in the EU/EEA or UK, you also have rights under the GDPR, including erasure, restriction, objection and data portability, and you may complain to your local data protection authority.
- If your company entered information about you (for example in an investigation or an action assignment), we may refer your request to that company, since it decides what is entered.
- To exercise any of these rights, contact us using the details below. We may need to verify your identity first.
11. If something goes wrong
If a security incident affects your personal data, we will notify affected people and the relevant authorities as required by law.
12. Privacy tips for investigators
- Use roles or initials ("Technician A", "Supervisor B") instead of full names wherever the work allows.
- Don't enter IC or passport numbers, home addresses, or medical details the work does not need.
- Assign actions to work email addresses, not personal ones, where you can.
- Sign out when using a shared or training-room computer.
Contact
Cikgu Barrier Solutions
Email: cikgubarrier@gmail.com
WhatsApp: +60 12-983 1120
If you are a company client and need a data processing agreement, contact us.