Draft. Compiled from the HadirQuGO v2 text and adapted to v3 features and to UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (Law No. 27 of 2022 on Personal Data Protection). Must be reviewed by a legal expert before publication.
1. Who we are
HadirQuGO is a digital attendance service operated by Alphabet Incubator ("we"). This policy explains what data we collect through the HadirQuGO app, website, and web panel, what that data is used for, and what your rights are.
2. Data we collect
Account data: name, email address, and profile photo if you sign in with Google.
Attendance data: check-in and checkout times, location at the time of attendance, attendance method (QR, card, or manual), and the device used for scanning.
Activity data: points, levels, rankings, achievements, challenge answers, and reward redemptions.
Payment data: processed by Midtrans. We do not store your card number or bank account details.
3. Location and camera
Your location is read only when you record attendance, to confirm that you are within the organization’s area. We do not track your location outside of recording attendance. The camera is used only to scan QR codes or cards.
4. What the data is used for
Recording and displaying attendance, calculating points and levels, preparing reports for organization managers, preventing attendance fraud, sending service emails such as verification codes, and processing subscriptions. We do not use your data for advertising and we do not sell it.
5. Who can see the data
You and the managers of the organization you are registered with (the Owner, Admins, and Teachers or Supervisors, according to their roles). Our service providers (hosting, email, payments) receive only the data they need.
6. Storage and security
Data is stored on servers in Indonesia (Amazon Web Services, Jakarta region) and transmitted over encrypted connections. HadirQuGO does not use passwords: you sign in with a one-time code or link sent to your email, or with a Google account. Those codes and links expire in 15 minutes and are stored only in hashed form. Internal access is restricted and logged.
7. How long data is kept
[Retention period for account data, attendance data, and data of organizations whose subscription has ended; not yet decided by the product owner.]
8. Your rights
Under UU Pelindungan Data Pribadi (the Personal Data Protection Law), you have the right to access, correct, and delete your data, to request a copy of it, and to withdraw your consent. Submit requests by email using the Contact section; we respond within [time period].
9. Children
Underage students use HadirQuGO through their school. The school is responsible for obtaining the consent of parents or guardians in accordance with applicable regulations.
10. Changes to this policy
We announce significant changes by email or in the app before they take effect.
11. Contact
Alphabet Incubator, hadirqugo@alphabetincubator.id.