Privacy Policy

This Privacy Policy applies to the AnekaUKM services operated by AnekaUKM, including the website https://anekaukm.com, the dashboard, and the Android apps AnekaUKM Kasir POS and AnekaUKM Buku Usaha. One AnekaUKM account can be used on the website and in the mobile apps. By creating an account, signing in or using the services, you acknowledge the processing described on this page.

The Indonesian version of this policy is available at /privacy. This English version is provided for users in Malaysia, the Philippines and elsewhere; if the two differ, please contact us.

We draw on Indonesia's Personal Data Protection Law (Law No. 27 of 2022), the requirements of app stores (Google Play), and, for users in those countries, Malaysia's Personal Data Protection Act 2010 and the Philippines' Data Privacy Act of 2012.

• Account identity: name, email address, phone number, profile photo, password (stored hashed), and your Google sign-in identifier if you sign in with Google.
• Business data: shop or business name, address, profile, product catalogue, product photos, outlet data and staff data.
• Operational records: point-of-sale transactions, stock, purchases, attendance, income and expense records, customer credit (utang / hutang), customer names and phone numbers used for receipts, and any other business records you or your staff enter.
• Location: GPS coordinates when checking in or out of attendance in AnekaUKM Kasir POS, if you grant location permission.
• Verification photos: selfie and shop photos if you apply for merchant verification in AnekaUKM Kasir POS.
• Device data: device type, app version, session token, and device identifiers needed for sign-in, data sync and (in AnekaUKM Kasir POS) connecting to printers.
• Payment data: subscription status, invoices, amounts and payment method. Full card numbers are never stored on our servers; payments are processed by payment partners such as Google Play Billing.
• Usage data: technical logs, cookies and analytics, including the country, currency and language setting of the app, so we can make the services reliable and easy to use.

• Local-first storage. Your records are stored on your phone. They are uploaded to our servers only if you enable the paid Cloud (sync) plan and sign in.
• Contacts. If you allow it, the app reads your contacts only so you can pick a customer without retyping. The app does not upload your address book; only the name and phone number of a customer you choose is saved with that record. Write access to contacts is blocked.
• Camera and photos. Used to photograph receipts and to choose a payment QR code image. Receipt text recognition runs on your device and the receipt photo is not uploaded for that purpose. If you use Cloud, the payment QR code image you choose is uploaded so that it can appear on the receipts you send.
• Microphone and speech recognition. Used only when you choose to record a transaction by voice. Speech is handled by your device's speech recognition service.
• Advertising. Free users may see ads served by Google AdMob, which may use the Android Advertising ID and device data. Where required, we ask for consent before requesting ads. Cloud subscribers do not see ads. You can reset or opt out of the Advertising ID in your device settings.
• Sharing receipts. When you send a receipt through WhatsApp, Messenger or another app, you choose the recipient; the message goes through that app's service and its own privacy terms apply.

You can withdraw any permission at any time in your device settings. Some features will stop working.

• Directly from you when you sign up, sign in, fill in your profile, record transactions or contact support.
• Automatically from your device when you use the website or apps (sessions, logs, cookies, permissions you grant).
• From partners you choose, such as Google for sign-in and Google Play for subscription status.

• Creating and managing accounts, shops and staff access.
• Running features: POS, bookkeeping and customer credit, stock, attendance, public receipts, billing and business tools.
• Processing subscriptions and customer support.
• Improving security (preventing abuse, reviewing suspicious sign-ins, keeping shops' data separate).
• Measuring performance and showing relevant product messages.
• Meeting legal, accounting and regulatory obligations.

• Your consent, for example location, contacts, microphone permission or personalised cookies. You may withdraw it at any time.
• Performance of our service contract when you use an account, the cashier or a subscription.
• Legal obligations, including retention of business transaction records.
• Where the law of your country recognises it, our legitimate interests in security, fraud prevention and service improvement, where these do not override your rights. Where your country's law does not recognise this basis, we rely on your consent or on the other bases above.

When you enter your own customers' names, phone numbers or credit (utang / hutang) records, you decide why and how that data is used in your business, and we process it on your behalf to provide the service. You are responsible for having a lawful basis to record it and for telling your customers where the law requires. A receipt link you send shows the customer's name, amounts and payment details to anyone who has the link; it does not show the customer's phone number. Share receipt links only with the intended customer.

We do not sell personal data. Data may be shared only as needed with:

• Payment partners (Google Play Billing and our payment processors) to handle charges.
• Google for sign-in, advertising (AdMob in the free app) and, on the website, Google Analytics.
• Meta for an advertising pixel on certain website pages.
• Hosting, email and notification providers that help us run the platform.
• Authorities, where required by law.

Your shop data is not used to train public AI models without a separate agreement.

Data is stored on our systems with access controls, separation between shops (tenants) and encrypted communication channels. Internal access follows the principle of least privilege. No system is entirely free of risk; we work to protect data according to reasonable practice for similar services.

Data is kept while your account is active and as long as needed for the purposes above. After you request account deletion, we process the request within 1–7 business days (see Delete Account). Business transaction records may be kept longer for legal and accounting compliance, without being linked to your personal identity.

If we become aware of a personal data breach that is likely to harm you, we will notify affected users and the relevant authority where the law requires, and take steps to contain it.

• Access and update your account data in the dashboard or app.
• Request a copy, correction or explanation of how your data is processed.
• Withdraw consent for processing that relies on consent.
• Request account deletion. Instructions are on the Delete Account page. After deletion, personal identity is anonymised or deleted; shop transaction data may be kept for compliance, without being linked back to your personal account.
• Where applicable law gives you further rights (for example under the Malaysian PDPA or the Philippine Data Privacy Act, including the right to complain to the relevant authority), we will honour them.

Send requests to [email protected]. We verify account ownership before acting on a request and respond within the period required by applicable law.

AnekaUKM is intended for business owners, not for children under 18. We do not knowingly collect children's data. If you believe a child's data has been uploaded, contact us so we can review and delete it.

Our servers and partners may be located in Indonesia or other jurisdictions. When data is processed outside your country, we work to ensure adequate protection through our agreements with partners and applicable law.

We may update this policy. The latest version is always published at https://anekaukm.com/privacy/en with its update date. Material changes will be announced in the platform where appropriate.

Data controller: AnekaUKM. For privacy questions or data-subject requests:

• Privacy / account deletion email: [email protected]
• Official email: [email protected]
• Phone: +62 823 2033 7777
• Address: Jalan Rawa Bengkok, Perum Pratama Residence Blok G no 1, Depok, Jawa Barat, Indonesia