Privacy Policy

← Back to Home

1. Information We Collect

1.1 Personal Information

When you register for our service, we collect:

• Account Information: Name, email address, phone number
• Device Information: Device ID, operating system, app version
• Push Notification Token: Firebase Cloud Messaging (FCM) token for sending notifications

1.2 Location Data

We collect location information when you use our app:

• GPS Coordinates: Approximate location to determine nearby malls and beacons
• Beacon Detection Data: Bluetooth Low Energy (BLE) beacon signals, proximity distance, and signal strength (RSSI)
• Dwell Time: Duration spent near specific beacons

1.3 Usage Data

We automatically collect:

• App usage patterns and interaction history
• Notification engagement (opened, dismissed, clicked)
• Beacon detection events and timestamps
• Device battery level and temperature (for optimization)

1.4 Advertising Identifiers

• Android: Google Advertising ID (GAID/MAID)
• iOS: Identifier for Advertisers (IDFA)

2. How We Use Your Information

2.1 Primary Uses

• Service Delivery: Send location-based notifications and promotional offers
• Personalization: Customize content based on your interests and behavior
• Analytics: Understand user engagement and improve our services
• Communication: Send important updates, security alerts, and service announcements

2.2 Smart Notification System

We use your data to ensure notifications are relevant through:

• Proximity detection (only send when you're nearby)
• Dwell time analysis (only send when you've shown interest)
• Frequency management (prevent notification spam)
• Time-based delivery (only during appropriate hours)
• Repeat limiting (respect notification limits)

3. How We Share Your Information

3.1 With Mall Partners

We share anonymized data with participating malls and retailers:

• Aggregate visitor statistics (not individual identities)
• Foot traffic patterns and dwell times
• Notification engagement metrics
• Campaign performance data

3.2 Service Providers

We use third-party services:

• Firebase (Google): Push notifications and analytics
• Cloudflare Workers: Data processing and storage
• Cloud Hosting: Application infrastructure

3.3 We DO NOT Share

• ❌ Your name, email, or phone number with third parties for marketing
• ❌ Your precise location with advertisers
• ❌ Your personal information for sale to data brokers

4. Your Privacy Rights

4.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Update: Correct inaccurate information
• Delete: Request deletion of your account and data
• Export: Receive your data in a portable format
• Opt-Out: Disable location tracking or notifications anytime

4.2 Notification Preferences

You can control notifications:

• Disable all notifications in app settings
• Disable specific notification types
• Opt-out of location-based notifications
• Unsubscribe from email communications

5. Data Security

5.1 Security Measures

We implement industry-standard security practices:

• Encryption: All data transmitted using TLS/SSL encryption
• Secure Storage: Data stored in encrypted databases
• Access Control: Limited employee access on need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Authentication: Secure token-based authentication

5.2 Data Breach Protocol

In the event of a data breach, we will:

1. Notify affected users within 72 hours
2. Provide details of the breach and data affected
3. Explain steps taken to mitigate harm
4. Offer guidance on protective measures

6. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with third-party providers
• Compliance with applicable data protection laws

8. Data Retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: Data retained while account is active
• Inactive Accounts: Deleted after 2 years of inactivity
• Beacon Interactions: Deleted after 30 days
• Analytics Data: Anonymized and retained for up to 2 years
• Legal Requirements: Some data may be retained longer for legal compliance

9. Cookies and Tracking Technologies

We use cookies and similar technologies:

• Session Cookies: Maintain your login session
• Analytics Cookies: Understand how you use our service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings.

10. Third-Party Links

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an in-app notification for material changes
• Email notification for significant changes

12. Your Consent

By using our app, you consent to:

• Collection and use of information as described in this policy
• Location tracking for proximity-based notifications
• Receipt of push notifications (can be disabled anytime)
• Data processing by our third-party service providers

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

14. GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Right to Access: Obtain confirmation of data processing
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time