Privacy Policy

1. Data we collect

Depending on how you use BaliSquad, we collect:

• Account details: your name, email address, profile photo, and sign-in method (for example Google or Apple), provided when you create an account.
• Profile details: anything you choose to add, such as username, display name, bio, Instagram handle, gender, island status, area of Bali, and interests.
• WhatsApp number: optional. If you add it to your profile or an RSVP, it is shared with the Host of the events you RSVP to. It is never shown on your public profile.
• Activity: events you RSVP to, like, or attend; check-ins; follows; blocks; and reports you make.
• Content you post: moments (photos), match scores, comments, reactions, event chat messages, and direct messages.
• Device and notification data: push notification tokens for your devices, and your notification preferences.
• Technical data: basic logs such as IP address, browser or device type, and pages visited, used for security, debugging, and understanding how the website is used.

2. Device permissions

• Camera: used only when a Host scans attendee ticket QR codes at check-in, or when you take a photo to upload.
• Photos: used only for photos you choose to upload.
• Notifications: used to tell you about messages, event updates, and reminders. You can turn them off at any time in your device settings.
• We do not track your precise location.

3. How we use your data

• To create and secure your account and keep you signed in.
• To run the features you use: RSVPs, guest lists, check-in, profiles, follows, moments, chat, and direct messages.
• To send notifications and emails about your events, messages, and account.
• To keep the community safe: preventing spam and abuse, and reviewing reported content and users.
• To understand and improve BaliSquad using aggregated usage information.
• To meet our legal obligations.

4. What other people can see

• Public profile: your username, display name, photo, bio, profile details, follower counts, and (unless you turn it off) your public event activity, moments, and scores.
• Hosts: when you RSVP, the Host sees your name, email, and any details you add to the RSVP, such as your WhatsApp number, so they can manage the event.
• Other attendees: may see that you are going to a public event, and anything you post in its chat or moments.
• Direct messages: are visible to you and the person you message. We only access them when needed to investigate a report or keep the service safe.

5. Service providers we share data with

We use trusted providers to run BaliSquad. They process data on our behalf and only for the purpose of providing their service:

• Clerk: sign-in and account management.
• Cloud hosting, database, and storage providers: to run our servers and store your data and uploaded photos.
• Google Firebase Cloud Messaging and Apple Push Notification service: to deliver push notifications to your devices.
• Resend: to send emails.
• PostHog: website usage analytics.
• OpenAI: to translate event listings. We don’t send your private messages or profile details for this.
• We may also disclose data if required by law, to protect the safety of our users, or as part of a merger or sale of the business.

6. How long we keep data

• We keep your data for as long as your account is active.
• When you delete your account, we delete your profile, RSVPs, follows, messages, moments, comments, notifications, and device tokens from our systems. Events and pages you created as a Host stay listed but are no longer linked to you.
• Copies may remain in backups for a limited time before they are overwritten, and we may keep records we are legally required to keep.

7. Your choices and rights

Under Indonesia’s Personal Data Protection Law (UU No. 27 of 2022) and similar laws, you can:

• Access and correct: view and edit your profile at any time in the app or on the website.
• Control visibility: hide your activity from your public profile, and block other users.
• Turn off notifications: in your device settings or notification preferences.
• Delete your account: in the app, go to Profile → Manage account → Delete account, or email us and we’ll do it for you.
• Ask questions or object: contact us using the details below. We’ll respond within a reasonable time.

8. Security

We use encryption in transit (HTTPS), access controls, and reputable providers to protect your data. No system is perfectly secure, so please use a strong sign-in method and tell us if you notice anything suspicious.

9. International transfers

Some of our service providers store or process data outside Indonesia. When that happens, we rely on providers that apply appropriate safeguards to protect your data.

10. Children

BaliSquad is not intended for children under 18. We don’t knowingly collect data from children. If you believe a child has created an account, contact us and we’ll remove it.

11. Changes to this policy

We may update this policy as BaliSquad changes. When we do, we’ll update the “Last updated” date, and for significant changes we’ll let you know in the app or by email.

12. Contact

For privacy questions or requests, contact PT Lumara Karya Nusantara at:

• Email: [email protected]
• WhatsApp: +62 823-4219-8320