Kebijakan Penghapusan Data / Data Deletion Policy

Aplikasi Surau

Versi: 1.0 Berlaku sejak: 1 Maret 2026

This document satisfies Google Play Store's mandatory Data Deletion requirement for apps that collect personal data. Public URL for this policy must be submitted in Google Play Console → App content → Data safety.

How to Delete Your Account and Data

Option 1 — In-App (Fastest, Recommended)

Open Surau app
Go to Profil → Pengaturan → Keamanan Akun
Tap "Hapus Akun" (Delete Account)
Confirm with your OTP
Your request is processed immediately

Option 2 — Email Request

Send an email to privacy@surau.app with subject: [HAPUS AKUN] - Permintaan Penghapusan Data

Include:

Full name registered on the account
Phone number linked to the account
Brief reason (optional)

We will process your request within 30 calendar days and send a confirmation.

What Happens When You Delete Your Account

Data Type	Action	Timeline
Profile (name, photo)	Permanently deleted	30 days
Phone number	Disassociated and deleted	30 days
Community posts, comments	Anonymized (content may remain without attribution)	30 days
Private messages	Permanently deleted	30 days
Location history	Permanently deleted	30 days
BLE session data	Permanently deleted	30 days
Push notification token	Immediately revoked	Immediate
Financial transaction records	Retained 5 years (tax law obligation - UU PPh)	N/A
Fraud/security audit logs	Retained 2 years (security obligation)	N/A

Retained financial data is kept solely to comply with Indonesian tax and financial regulations, is not used for any other purpose, and is inaccessible to you after deletion.

What We Cannot Delete

We are legally required to retain:

Transaction history — 5 years under Indonesian tax law
Fraud investigation records — if your account was involved in an active investigation
Anonymized aggregates — statistical data that cannot be traced back to you

Data Portability (Before Deletion)

Before deleting, you may request a copy of your personal data:

Email privacy@surau.app with subject: [EKSPOR DATA] - Data Export Request
We will provide your data in JSON format within 30 calendar days
You may then request deletion after receiving your export

Contact

Data Protection Contact: Email: privacy@surau.app Response: Within 30 calendar days Language: Bahasa Indonesia or English accepted

For Google Play Console Submission

Data safety form answers for deletion:

"Does your app allow users to request that their data be deleted?" → Yes
"How can users submit a data deletion request?" → In-app (Settings → Delete Account) + Email (privacy@surau.app)
Public URL for this policy: https://surau.app/legal/data-deletion (host this page on your domain)