1. Introduction
Welcome to fleuragift ("Buyer App") and fleuragift partner ("Seller App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile applications and related services. Please read this policy carefully. By accessing or using fleuragift, you agree to the collection and use of your information in accordance with this Privacy Policy.
2. Data Collection
To provide you with a smooth and reliable gift shopping experience, we may collect the following types of information:
- Personal Identifiable Data: Name, email address, phone number, and delivery address voluntarily provided upon account registration or checkout.
- Financial & Transaction Data: Payment details (credit card brand, transaction history, invoice numbers) processed securely via encrypted payment gateways.
- Geo-Location Data: Access to precise or approximate location from your mobile device (while using the app) to locate nearby gift stores and provide accurate same-day delivery tracking.
- Derivative Data & Device Info: Device ID, operating system version, app usage statistics, Firebase Push Notification (FCM) tokens, and crash logs automatically collected for performance optimization and order delivery status alerts.
3. How We Use Your Information
We strictly utilize collected data for legitimate operational purposes, including:
- Creating and managing your user account and loyalty points.
- Fulfilling gift orders, processing payments, and managing local store dispatch.
- Sending order confirmation notifications, delivery status updates, and support messages.
- Improving app security, detecting fraud, and complying with legal tax/audit obligations.
4. Account Deletion & Data Retention (Google Play Requirement)
You have full control over your data. You can permanently delete your account and associated personal data directly within the app at any time:
- How to Delete: Go to Profile > Settings > Delete Account in the fleuragift mobile app.
- What Gets Erased: Your profile data, delivery addresses, saved cards, and active session tokens are permanently erased from our active databases.
- Data Retention: Anonymized transaction records required by local tax and anti-fraud regulations are securely retained for statutory retention periods only.
5. Disclosure of Information
We do NOT sell your personal data to third parties. We only share information with:
- Verified Local Florists & Delivery Partners: Necessary delivery address and order details to fulfill your gift purchase.
- Payment Processors & Cloud Infrastructure: Encrypted data passed to PCI-DSS compliant third-party gateways and cloud hosting providers.
- Legal Compliance: When required by court order, law enforcement, or statutory regulations to protect legal rights and user safety.
6. Security of Your Information
We implement administrative, technical, and physical security measures to protect your personal information against unauthorized access, loss, or alteration. Our security infrastructure includes:
- HTTPS/TLS Encryption: All data transmitted between your device and our servers is protected with industry-standard HTTPS/TLS encryption (256-bit SSL certificate). This means any data you send — including personal information — is encrypted in transit and cannot be intercepted by third parties.
- Encrypted Cloud Storage: All data is stored securely on Supabase cloud infrastructure with row-level security policies, ensuring your data is protected at rest.
- Restricted Database Access: Only authorized server-side services can access user data. No raw database credentials are exposed to client applications.
🔒 Identity Document (KTP) Security
For seller verification purposes, our platform may require identity documents such as KTP (Kartu Tanda Penduduk). We understand the sensitivity of this data and take the following precautions:
- Secure Upload: All KTP images are uploaded through our HTTPS-secured connection (SSL certificate purchased and active), ensuring end-to-end encryption during transfer.
- Private Storage: KTP images are stored in a private, access-controlled cloud storage bucket (Supabase Storage with RLS policies). They are NOT publicly accessible and cannot be viewed by other users or crawled by search engines.
- Limited Access: Only the account owner and authorized platform administrators can access uploaded identity documents. They are used solely for seller account verification.
- Deletion Rights: You may request deletion of your KTP data at any time by contacting our support team or deleting your seller account through the app settings.
7. Children's Privacy
Our application is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we discover a child under 13 has provided personal data, we will immediately delete it.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our privacy compliance team:
Email: support@fleuragift.com
Address: Mataram, NTB, Indonesia