Privacy Policy

MenurutLo is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information. We comply with Indonesia's UU PDP (Personal Data Protection Law).

1. Data We Collect

Account Information

• Name, username, email address, phone number
• Date of birth (required for age verification)
• Profile photo, bio, and location (city)
• Gender and interests (optional)

Content You Create

• Posts, stories, videos, and photos you upload
• Testimonials you send or receive
• Ask questions and votes
• Comments and direct messages
• Mood selections and check-in data
• Voice recordings (deleted within 24 hours of transcription)

Usage Data

• Device type, OS version, app version
• IP address and approximate location
• In-app behavior and feature usage (via Mixpanel analytics)

2. How We Use Your Data

• To operate and improve the MenurutLo platform
• To personalize your For You feed
• To enforce age-tier restrictions and safety policies
• To send push notifications and in-app alerts
• To facilitate paid research (verified users only)
• To detect and prevent abuse, fraud, and policy violations

3. Anonymous Testimoni

When you send an anonymous Testimoni, your sender identity (from_profile_id) is stored in our database in encrypted form. It is never exposed to the recipient through any API, UI, or data export. It may only be accessed by our team in response to a valid legal order or to investigate serious safety violations.

4. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Supabase (database), Cloudflare (media hosting), Anthropic (AI moderation), Google (Speech-to-Text, Analytics)
• Research brands: Only aggregated, anonymized research results — never individual identities
• Law enforcement: Only when required by valid Indonesian legal process

5. Face Recognition Data

If you choose to verify your identity via Face Recognition, your facial scan is processed on-device and never stored on our servers. Only your verification status (verified/not verified) and year of birth are retained.

6. Data for Minors

We take extra precautions for users under 18. Users aged 13–15 require verifiable parental consent. We do not use minor users' data for advertising targeting. Parents may request access to or deletion of their child's account by contacting us.

7. Your Rights

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your content in a machine-readable format
• Objection: Opt out of non-essential data processing

8. Data Retention

We retain your data for as long as your account is active. Deleted accounts are purged within 30 days. Voice recordings are deleted within 24 hours of transcription. Moderation logs are retained for 12 months.

9. Cookies & Tracking

Our website uses essential cookies for functionality and analytics cookies to understand usage patterns. You may opt out of analytics cookies via your browser settings.

10. Contact & Data Requests

For privacy requests, contact our Data Protection Officer at privacy@menurutlo.com.