Kebijakan Privasi My Koke

Berlaku sejak 13 Oktober 2026 · Effective October 13, 2026

My Koke (situs my.koke.co.id dan aplikasi My Koke untuk Android) adalah aplikasi pemesanan dan program member pelanggan kedai kopi Koke (KOKE BANING Sintang, Sintang, Kalimantan Barat). Kebijakan ini menjelaskan data apa yang kami kumpulkan, untuk apa, siapa yang bisa melihat atau menerimanya, berapa lama disimpan, dan bagaimana kamu menghapusnya. My Koke dikelola oleh PT Koke Alam Semesta, nama pengembang My Koke di Google Play. Dalam kebijakan ini, "kami" berarti PT Koke Alam Semesta (Koke) selaku pengelola My Koke. Kontak: owner@koke.co.id.

1. Data yang kami kumpulkan

Data akun: nama, nomor WhatsApp, alamat email, dan password (disimpan hanya dalam bentuk hash bcrypt, tidak bisa dibaca siapa pun).
Data profil (opsional): alamat, tanggal lahir, jenis kelamin, pekerjaan, dan foto profil yang kamu isi sendiri.
Data dari akun Google (hanya bila kamu memilih "Masuk dengan Google" atau "Hubungkan akun Google"): nama, alamat email, status verifikasi email, foto profil, dan ID akun Google. Lihat bagian 3.
Transaksi member: pesanan di aplikasi dan pembelian di kasir outlet yang dicatat ke akun member, poin, saldo, top up, transfer saldo antar member (penerima dan catatan transfer), reward, promo, cashback, dan referral.
Aktivitas di aplikasi: teman dan circle, quest dan kuis harian, klaim review Google, langganan info stok menu, laporan/saran beserta kontak yang kamu cantumkan, dan verifikasi email.
Notifikasi (bila diizinkan): langganan notifikasi browser/perangkat beserta keterangan jenis browser, untuk mengirim status pesanan dan info promo.
Lokasi: saat pertama kali membuka my.koke.co.id di browser, situs dapat meminta izin lokasi untuk memilih outlet terdekat. Koordinat hanya diproses di perangkatmu dan tidak dikirim ke atau disimpan di server kami. Aplikasi Android My Koke tidak meminta izin lokasi.
Data teknis: log server standar (alamat IP, jenis perangkat/browser, waktu akses) untuk keamanan dan pemecahan masalah.

2. Cara kami menggunakan data

Membuat, mengautentikasi, dan mengelola akun member, serta mengenali kamu di kasir outlet Koke lewat nomor HP.
Mencatat pesanan, poin, saldo, cashback, reward, dan bonus referral.
Memproses top up saldo melalui penyedia pembayaran.
Mengirim notifikasi pesanan, email reset password, verifikasi email, dan konfirmasi hapus akun.
Info promo: pemilik Koke dapat mengirim promo, ajakan kembali berkunjung, survei, dan permintaan ulasan lewat notifikasi di aplikasi, notifikasi push, dan email kepada kelompok member yang dipilih berdasarkan jenis kelamin, pekerjaan, kapan terakhir dan seberapa sering berbelanja, kapan mendaftar, dan menu favorit (dihitung dari riwayat pembelian). Asisten AI di sistem internal pemilik (Poetra Center HQ) membantu mengelompokkan member dan menyusun usulan promo dari ringkasan angka per kelompok, tanpa nama, nomor HP, atau email; setiap kiriman disetujui pemilik. Tidak ada keputusan otomatis lain tentang kamu. Notifikasi push bisa dimatikan di pengaturan browser/perangkat; untuk berhenti menerima email promo atau menolak penargetan ini, email owner@koke.co.id.
Promo lewat WhatsApp (hanya bila kamu menyalakannya): kalau kamu mencentang "promo lewat WhatsApp" saat daftar atau menyalakannya di halaman Akun, promo dan info di atas juga dikirim ke nomor WhatsApp-mu dari nomor resmi Koke. Kami mencatat kapan izin itu diberikan atau dicabut. Matikan kapan saja di halaman Akun atau balas STOP di WhatsApp.
Pemberitahuan internal ke email pemilik saat ada member baru (nama, email, nomor HP) dan saat akun dihapus (hanya nomor ID).
Menjaga keamanan layanan dan mencegah kecurangan, misalnya akun ganda untuk bonus.

Kami memproses data berdasarkan persetujuanmu saat mendaftar, pelaksanaan layanan member yang kamu minta, kewajiban hukum (pembukuan dan pajak), dan kepentingan yang sah (keamanan, pencegahan kecurangan, dan promo kepada member). Kami tidak menjual data pribadi, tidak membagikannya untuk iklan, dan tidak memakainya untuk iklan pihak ketiga.

3. Data pengguna Google

Data yang diakses: saat kamu menggunakan Login dengan Google, My Koke hanya meminta cakupan dasar openid, email, dan profile. Di browser dipakai Google Identity Services; di aplikasi Android dipakai Google Sign-In bawaan Android (layanan Google Play) dengan cakupan yang sama. Kami menerima nama, alamat email, status verifikasi email, foto profil, dan ID akun Google kamu. Kami tidak menerima password Google dan tidak mengakses Gmail, Kontak, Drive, Kalender, atau data Google lainnya.

Penggunaan: data ini hanya dipakai untuk (a) memverifikasi identitasmu saat masuk ke My Koke atau saat mengonfirmasi hapus akun, (b) membuat akun member baru dengan email tersebut, dan (c) menghubungkan akun Google dengan akun member yang sudah ada. Menghubungkan akun Google pertama kali memberi bonus poin satu kali sesuai info di aplikasi.

Penyimpanan: kami menyimpan ID akun Google dan alamat email yang terhubung pada akun member kamu. Token login Google hanya diverifikasi saat dipakai dan tidak disimpan.

Berbagi: data pengguna Google tidak dibagikan, dijual, atau dipindahkan ke pihak ketiga, dan tidak dipakai untuk iklan atau melatih model AI.

Penghapusan: tautan akun Google ikut dihapus saat kamu menghapus akun (bagian 7). Untuk memutus tautan Google saja tanpa menghapus akun, email kami. Kamu juga dapat mencabut akses My Koke kapan saja di myaccount.google.com/permissions.

Penggunaan dan pemindahan informasi yang diterima My Koke dari Google API mematuhi Kebijakan Data Pengguna Layanan Google API, termasuk persyaratan Penggunaan Terbatas (Limited Use).

4. Siapa yang bisa melihat atau menerima data

Penyedia layanan (memproses data atas nama kami)

Xendit (pembayaran QRIS untuk top up saldo): menerima nama, email, nomor HP, dan nominal top up untuk membuat tagihan. Pembayaran dilakukan di halaman Xendit.
Hostinger (hosting): server aplikasi, database tempat semua data di atas disimpan, dan pengiriman email.
Google: memverifikasi login Google, dan menyajikan font (Google Fonts) yang dimuat setiap kali halaman dibuka sehingga Google menerima alamat IP dan info browser.
Layanan notifikasi push browser (misalnya milik Google, Mozilla, atau Apple, sesuai browsermu): mengantarkan notifikasi yang terenkripsi.
Meta (WhatsApp Business): hanya untuk member yang menyalakan promo lewat WhatsApp, menerima nomor WhatsApp dan isi pesan promo untuk mengantarkannya.

Di internal Koke

Kasir outlet (aplikasi kasir Koke): mencari member lewat nomor HP dan melihat nama, nomor HP, poin, dan saldo; melihat antrean pesanan beserta nama dan nomor HP pemesan; memeriksa kode circle (nama pemilik circle dan jumlah anggota).
Pemilik Koke (dashboard pemilik): data member dan transaksi, laporan/saran, pengiriman promo (bagian 2), dan catatan bonus referral staff yang memuat nama member yang mendaftar lewat staff tersebut.
Poetra Center HQ (sistem internal pemilik Koke): daftar member dengan nama, ringkasan belanja (jumlah dan tanggal belanja, menu favorit, poin, saldo), serta apakah member bisa dihubungi lewat email, push, atau WhatsApp, untuk menyusun dan mengirim promo (bagian 2). Nomor HP hanya diterima untuk member yang menyalakan promo lewat WhatsApp, dan email tidak diterima.

Member lain

Saat member lain memasukkan nomor HP-mu untuk transfer saldo atau permintaan pertemanan, nama kamu ditampilkan untuk konfirmasi.
Teman yang sudah kamu terima dapat melihat nama dan nomor HP-mu, serta menu favoritmu (bisa dimatikan di pengaturan Teman).
Sesama anggota circle dapat melihat namamu. Penerima transfer melihat nama pengirim dan catatan transfer.

Tautan yang kamu buka sendiri (WhatsApp untuk berbagi kode referral, Instagram, TikTok, Google Maps) tunduk pada kebijakan layanan tersebut. Google dan layanan push dapat memproses data di luar Indonesia; kami hanya memakai penyedia yang menerapkan perlindungan data yang memadai. Kami dapat membuka data bila diwajibkan oleh hukum yang berlaku di Indonesia.

5. Aplikasi Android

Aplikasi My Koke menampilkan situs my.koke.co.id di dalam WebView, sehingga kebijakan ini berlaku sama untuk aplikasi dan situs.
Login dengan Google di aplikasi memakai Google Sign-In bawaan Android (bagian 3).
Izin yang dipakai hanya akses internet dan status jaringan (untuk layar "Tidak Ada Koneksi"). Aplikasi tidak meminta izin lokasi, kamera, kontak, atau penyimpanan; foto profil dipilih lewat pemilih file bawaan sistem.
Aplikasi tidak memuat iklan, SDK analitik, atau pelaporan crash, dan tidak memakai ID iklan.
Semua koneksi aplikasi dan situs memakai HTTPS.

6. Keamanan & lama penyimpanan

Data disimpan di server dengan akses terbatas. Koneksi ke My Koke menggunakan HTTPS, password disimpan sebagai hash, dan sesi login menggunakan token bertanda tangan yang langsung tidak berlaku saat akun dihapus.

Data	Lama simpan
Akun, profil, tautan Google, teman & circle, notifikasi, token push, aktivitas di aplikasi, isi & kontak laporan/saran	Selama akun aktif; dihapus saat akun dihapus
Catatan transaksi (pesanan, penjualan, mutasi saldo & poin, top up, referral & bonus)	Hingga 10 tahun untuk pajak dan pembukuan; setelah akun dihapus disimpan tanpa identitas
Log penghapusan akun (nomor ID, tanggal, saldo & poin yang hangus)	Hingga 10 tahun
Link reset password · verifikasi email · konfirmasi hapus akun	Berlaku 1 jam · 24 jam · 60 menit
Log server dan cadangan database di penyedia hosting	Dirotasi, paling lambat 30 hari

7. Menghapus akun

Di aplikasi: Akun → gulir ke bawah → Hapus Akun. Akun langsung dihapus setelah kamu konfirmasi.
Tanpa aplikasi: buka my.koke.co.id/hapus-akun, masukkan email terdaftar, lalu konfirmasi lewat link yang kami kirim.
Lewat email: kirim permintaan ke owner@koke.co.id dari email terdaftar; kami proses paling lambat 30 hari.

Saldo dan poin yang tersisa hangus saat akun dihapus, jadi pakai atau transfer dulu ke member lain. Data profil dan data aktivitas dihapus; catatan transaksi disimpan tanpa identitas seperti pada bagian 6. Rincian lengkap ada di halaman Hapus Akun.

8. Hak kamu

Sesuai Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (UU PDP), kamu berhak:

Mengakses dan memperbarui data profil kapan saja di halaman Akun, serta meminta koreksi data yang terkunci (misalnya tanggal lahir).
Meminta salinan data pribadimu.
Menghapus akun dan data pribadi (bagian 7).
Menarik persetujuan: hapus akun, minta pemutusan tautan Google, matikan notifikasi di pengaturan browser/perangkat, atau matikan promo lewat WhatsApp di halaman Akun (atau balas STOP).
Menolak email promo dan penargetan promo berdasarkan profil dan riwayat belanja (bagian 2).
Mengajukan pengaduan ke lembaga penyelenggara pelindungan data pribadi yang ditetapkan Pemerintah bila menurutmu kami melanggar UU PDP.

Permintaan dikirim ke owner@koke.co.id. Kami menanggapinya dalam jangka waktu yang diatur UU PDP.

9. Anak-anak

My Koke tidak ditujukan untuk anak di bawah 13 tahun, dan kami tidak dengan sengaja mengumpulkan data mereka. Pengguna di bawah 18 tahun hanya boleh memakai My Koke dengan izin orang tua atau wali. Bila kami mengetahui ada akun milik anak di bawah 13 tahun, akun itu akan kami hapus.

10. Kontak & perubahan

Pertanyaan atau permintaan terkait privasi: owner@koke.co.id. Kebijakan ini dapat diperbarui; tanggal berlaku terbaru selalu tercantum di atas halaman ini, dan perubahan penting diinformasikan lewat aplikasi.

My Koke Privacy Policy

My Koke (the website my.koke.co.id and the My Koke Android app) is the ordering and loyalty membership app of the Koke coffee shop (KOKE BANING Sintang, Sintang, West Kalimantan, Indonesia). This policy explains what data we collect, why, who can see or receive it, how long we keep it, and how you can delete it. My Koke is operated by PT Koke Alam Semesta, the developer of My Koke on Google Play. "We" means PT Koke Alam Semesta (Koke), the operator of My Koke. Contact: owner@koke.co.id.

1. Data we collect

Account data: name, WhatsApp number, email address, and password (stored only as a bcrypt hash).
Optional profile data: address, date of birth, gender, occupation, and profile photo you provide.
Google account data (only if you choose "Sign in with Google" or "Link Google account"): name, email address, email verification status, profile picture, and Google account ID. See section 3.
Membership transactions: in-app orders and in-store purchases recorded to your member account, points, balance, top-ups, member-to-member balance transfers (recipient and transfer note), rewards, promotions, cashback and referrals.
In-app activity: friends and circles, daily quests and quizzes, Google review claims, menu stock alerts, reports/feedback with the contact details you give, and email verification.
Notifications (if permitted): a browser/device push subscription with a note of the browser type, to send order updates and promotions.
Location: the first time you open my.koke.co.id in a browser, the site may ask for location permission to pick the nearest outlet. Coordinates are processed on your device only and are not sent to or stored on our servers. The My Koke Android app does not request location permission.
Technical data: standard server logs (IP address, device/browser type, access time) for security and troubleshooting.

2. How we use data

To create, authenticate and manage your membership account and recognise you at Koke cashiers by phone number.
To record orders, points, balance, cashback, rewards and referral bonuses.
To process balance top-ups through our payment provider.
To send order notifications, password reset, email verification and account deletion emails.
Promotions: the Koke owner can send promotions, come-back offers, surveys and review requests by in-app notification, push notification and email to groups of members selected by gender, occupation, how recently and how often they bought, when they joined, and favourite menu (derived from purchase history). An AI assistant in the owner's internal system (Poetra Center HQ) helps group members and draft promotion proposals from per-group figures, without names, phone numbers or emails; the owner approves every send. No other automated decisions are made about you. You can turn off push notifications in your browser/device settings; to stop promotional emails or object to this targeting, email owner@koke.co.id.
Promotions on WhatsApp (only if you turn it on): if you tick "promotions on WhatsApp" when registering or turn it on in the Account page, the promotions above are also sent to your WhatsApp number from Koke's official number. We record when you give or withdraw this permission. Turn it off any time in the Account page or reply STOP on WhatsApp.
Internal emails to the owner when a member registers (name, email, phone) and when an account is deleted (ID number only).
To keep the service secure and prevent fraud such as duplicate accounts.

We process data based on your consent at registration, performance of the membership service you ask for, legal obligations (bookkeeping and tax), and legitimate interests (security, fraud prevention and promotions to members). We do not sell personal data, share it for advertising, or use it for third-party advertising.

3. Google user data

Data accessed: with Sign in with Google, My Koke only requests the basic openid, email and profile scopes. Browsers use Google Identity Services; the Android app uses Android's native Google Sign-In (Google Play services) with the same scopes. We receive your name, email address, email verification status, profile picture and Google account ID. We do not receive your Google password and do not access Gmail, Contacts, Drive, Calendar or any other Google data.

Use: this data is used only to (a) verify your identity when you sign in to My Koke or confirm account deletion, (b) create a new membership account with that email, and (c) link your Google account to an existing membership account. Linking a Google account for the first time grants one-time bonus points as shown in the app.

Storage: we store the linked Google account ID and email address with your membership account. Google sign-in tokens are only verified when used and are not stored.

Sharing: Google user data is not shared, sold or transferred to third parties, and is not used for advertising or to train AI models.

Deletion: the Google link is deleted when you delete your account (section 7). To remove only the Google link, email us. You can revoke My Koke's access at any time at myaccount.google.com/permissions.

My Koke's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Who can see or receive data

Service providers (processing data on our behalf)

Xendit (QRIS payments for balance top-ups): receives your name, email, phone number and top-up amount to create the invoice. You pay on Xendit's page.
Hostinger (hosting): application server, the database where all the data above is stored, and email sending.
Google: verifies Google sign-in, and serves fonts (Google Fonts) loaded with each page, so Google receives your IP address and browser information.
Browser push services (for example Google's, Mozilla's or Apple's, depending on your browser): deliver encrypted notifications.
Meta (WhatsApp Business): only for members who turned on promotions on WhatsApp, receives the WhatsApp number and the promotional message to deliver it.

Within Koke

Outlet cashiers (Koke cashier app): look up members by phone number and see name, phone number, points and balance; see the order queue with the customer's name and phone number; check circle codes (circle owner's name and member count).
The Koke owner (owner dashboard): member and transaction data, reports/feedback, promotions (section 2), and staff referral bonus records that include the name of the member who signed up through that staff member.
Poetra Center HQ (the Koke owner's internal system): the member list with names, a purchase summary (number and dates of purchases, favourite menu, points, balance), and whether each member can be reached by email, push or WhatsApp, to prepare and send promotions (section 2). Phone numbers are received only for members who turned on promotions on WhatsApp; emails are not received.

Other members

When another member enters your phone number for a balance transfer or a friend request, your name is shown so they can confirm.
Friends you have accepted can see your name and phone number, and your favourite menu item (you can turn this off in Friends settings).
Members of the same circle can see your name. Transfer recipients see the sender's name and transfer note.

Links you open yourself (WhatsApp to share a referral code, Instagram, TikTok, Google Maps) are governed by those services' policies. Google and push services may process data outside Indonesia; we only use providers that apply adequate data protection. We may disclose data when required by applicable Indonesian law.

5. Android app

The My Koke app shows the my.koke.co.id website inside a WebView, so this policy applies equally to the app and the website.
Sign in with Google in the app uses Android's native Google Sign-In (section 3).
The only permissions used are internet access and network state (for the "No connection" screen). The app does not request location, camera, contacts or storage permissions; profile photos are picked with the system file picker.
The app contains no ads, analytics or crash-reporting SDKs and does not use the advertising ID.
All app and website connections use HTTPS.

6. Security & retention

Data is stored on access-restricted servers. Connections use HTTPS, passwords are hashed, and sessions use signed tokens that stop working as soon as the account is deleted.

Data	Retention
Account, profile, Google link, friends & circles, notifications, push tokens, in-app activity, report/feedback content & contact details	While your account is active; deleted when the account is deleted
Transaction records (orders, sales, balance & point ledgers, top-ups, referrals & bonuses)	Up to 10 years for tax and bookkeeping; kept de-identified after account deletion
Account deletion log (ID number, date, forfeited balance & points)	Up to 10 years
Password reset · email verification · deletion confirmation links	Valid for 1 hour · 24 hours · 60 minutes
Server logs and database backups at our hosting provider	Rotated, within 30 days

7. Deleting your account

In the app: Akun (Account) → scroll down → Hapus Akun (Delete account). The account is deleted immediately after you confirm.
Without the app: go to my.koke.co.id/hapus-akun, enter your registered email and confirm through the link we send.
By email: send a request to owner@koke.co.id from your registered email; we handle it within 30 days.

Remaining balance and points are forfeited when the account is deleted, so spend them or transfer the balance to another member first. Profile and activity data are deleted; transaction records are kept de-identified as described in section 6. Full details are on the Delete Account page.

8. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP"), you have the right to:

Access and update your profile at any time on the Account page, and ask us to correct locked data (such as your date of birth).
Request a copy of your personal data.
Delete your account and personal data (section 7).
Withdraw consent: delete your account, ask us to remove the Google link, turn off notifications in your browser/device settings, or turn off promotions on WhatsApp in the Account page (or reply STOP).
Object to promotional emails and to promotion targeting based on your profile and purchase history (section 2).
Lodge a complaint with the personal data protection authority designated by the Government if you believe we have breached the UU PDP.

Send requests to owner@koke.co.id. We respond within the time limits set by the UU PDP.

9. Children

My Koke is not directed at children under 13 and we do not knowingly collect their data. Users under 18 may only use My Koke with a parent's or guardian's permission. If we learn that an account belongs to a child under 13, we will delete it.

10. Contact & changes

Privacy questions or requests: owner@koke.co.id. We may update this policy; the latest effective date is always shown at the top of this page, and important changes are announced in the app.