Legal

Privacy Policy

PP-20261005 · Effective 5 October 2026

Draft for review. This policy was prepared as a starting point. Before publication it must be checked against what each application actually collects, and reviewed by a qualified adviser. Remove this box once that is done.

This policy explains how PT Oifanda Teknologi Indonesia ("Oifanda", "we") handles personal data on this website and in the applications we publish. It is written to meet Law No. 27 of 2022 on Personal Data Protection (UU PDP) of the Republic of Indonesia.

1. Who we are

PT Oifanda Teknologi Indonesia is a limited company registered in Indonesia, acting as the data controller for the processing described here.

2. What we collect

This website

The site is a static brochure. It sets no tracking or advertising cookies and runs no analytics. Our web server keeps standard access logs — IP address, timestamp, requested path, user agent — which exist to keep the service running and secure. They are deleted after 30 days.

Fonts are served by Google Fonts, which means your browser makes a request to Google's servers and Google may receive your IP address. See Google's own privacy policy for what they do with it.

When you contact us

If you contact us, we hold whatever you send — typically your name, contact details and the content of your message — for as long as needed to deal with the matter and to keep a record of the correspondence.

Our applications

Each application we publish is governed by its own privacy policy, presented in its store listing and in the application itself — for OiFood, PP-20260528. Where a product policy applies it governs that product; this policy governs Oifanda as a company and this website. Product policies generally cover an account identifier, information you enter to use the service, and diagnostic data such as crash reports. We do not sell personal data, and we do not use it for advertising.

3. Why we process it

  • To provide the service — running the website and applications, and delivering the features you ask for
  • To respond to you — answering enquiries and providing support
  • To keep things working and secure — diagnosing faults, preventing abuse
  • To meet legal obligations — tax, accounting and regulatory record-keeping under Indonesian law

4. Legal basis

Under UU PDP we rely on: your consent, where we have asked for it; the performance of a contract with you; compliance with a legal obligation; and our legitimate interests in operating and securing our services, where those interests are not overridden by your rights.

5. Who we share it with

We do not sell personal data. We share it only with:

  • Service providers who process data on our instructions — hosting, application distribution, payment processing — under contract and only for the purposes we set
  • Authorities, where disclosure is required by Indonesian law or a valid legal order

Some providers operate outside Indonesia. Where data leaves the country we take the steps UU PDP requires of us.

6. How long we keep it

  • Server access logs — 30 days
  • Correspondence — up to 3 years from last contact
  • Accounting, tax and financial transaction records — retained for a minimum of 10 (ten) years, as required by Indonesian tax law
  • Application account data — for as long as the account exists, then deleted or anonymised

7. Your rights

Under UU PDP you may ask us to: confirm what we hold and give you a copy; correct data that is wrong or incomplete; delete data we no longer have grounds to keep; restrict or object to certain processing; withdraw consent you previously gave; and receive your data in a portable form.

Write to privacy@oifanda.com. We will respond to your request within 30 (thirty) days. We may need to verify your identity first. You also have the right to complain to the competent Indonesian authority.

8. Security

We use encryption in transit, restrict access to those who need it, and keep our systems patched. No system is perfectly secure, but if a breach occurs that is likely to harm you, we will notify you and the authority as UU PDP requires.

9. Children

Our services are not directed at children under 18. We do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes

If we change this policy we will update the version and date above. Material changes will be announced on this page, and through the application where one is affected.

11. Governing law

This Privacy Policy is governed by the laws of the Republic of Indonesia, including Law No. 27 of 2022 on Personal Data Protection (UU PDP).

12. Contact

PT Oifanda Teknologi Indonesia
Jakarta Utara, DKI Jakarta 14410, Indonesia