Privacy Policy

Version: [FILL: e.g. 2026-06-v1] · Effective: [FILL: date]

This policy explains how QalbSpace collects, uses, and protects your personal data under Indonesia's Personal Data Protection Law (UU No. 27/2022, "UU PDP").

1. Data Controller

[FILL: legal entity name], located at [FILL: address], is the Data Controller for the processing described here.

2. Personal Data We Collect

• Account: name, email, phone number.
• Learner profiles (incl. children): name, date of birth, gender, guardian relationship.
• Learning: bookings, attendance, memorization, and recitation voice recordings.
• Payments: transactions and balance (processed by a payment partner).

3. Purposes & Basis

We process data to deliver learning, scheduling, payment, and support services — on the basis of service performance and/or your consent.

4. Children's Data

Children's data (under 18) is processed with verified parental/guardian consent (UU PDP Art. 25–26). We do not send direct marketing to children.

5. Sharing & Cross-Border Transfer

We share data with service providers as needed (e.g. payments). Some authentication may involve cross-border transfer [FILL: e.g. Google Sign-In], per UU PDP Art. 56.

6. Storage & Retention

Data is kept only as long as needed for its purpose and legal obligations, then deleted or anonymized. Voice recordings are deleted per the retention period and when consent is withdrawn.

7. Your Rights

You may access, rectify, export, and erase your personal data, and withdraw consent. Manage these in the in-app privacy dashboard or via the contact below.

8. Security

We apply reasonable technical and organizational measures to protect your personal data.

9. Contact / Data Protection Officer

Privacy questions or requests: [FILL: privacy/DPO email], [FILL: contact/address].

10. Changes

This policy may be updated; the version and effective date appear above.