Privacy Notice

Short and honest: what data is stored, what is not, who processes it, and how to delete it. This notice is for users in Malaysia and is written with the Personal Data Protection Act 2010 (Act 709, as amended in 2024) in mind.

Version 2026-10-21

Baca dalam Bahasa Melayu ยท JoyoRogo

Who we are (data controller)

The data controller for your personal data is PT Joyo Digitama Solusi, Malang, Jawa Timur, Indonesia. We make and run JoyoRogo (the app, the web app and JoyoFit).

Contact: Email dzulfikar@joyorogo.com, WhatsApp +62 896-8083-9591. See the Contact section below.

This notice applies to joyorogo.com, the JoyoRogo apps on Android and iPhone, and the JoyoRogo features in JoyoFit.

Age: 18 and over

JoyoRogo is for users aged 18 and over. If we learn that we hold data of someone under 18, we delete the account and its data.

Why we process your data

  • To provide your account and sign-in (Google or Apple).
  • To calculate your daily eat, burn and sleep targets from your personal details, and to show your progress.
  • To estimate calories from photos, text or voice stories, and from barcode scans or nutrition label photos.
  • To sync workouts, steps and sleep (Health Connect, Apple Health, Strava, JoyoFit) when you choose to.
  • Community features (feed, groups, challenges) when you choose to post something.
  • Pro payments, proving your subscription and emailing your receipt.
  • To send the push notifications you allow, never ads.
  • To measure and improve the accuracy of the AI, and to prevent abuse.
  • To understand which pages and buttons are used, with cookie-free analytics (Revklik): no name, email or health records.
  • To answer your requests and complaints.

We do not sell your data, do not use it for ads, and do not use it to train AI models.

Which data is required and which is voluntary

  • Required to create an account: your name and email from Google or Apple (the email can be an Apple relay address). Without them we cannot provide an account. JoyoRogo does not store passwords.
  • Needed for daily targets: year of birth, sex, height and weight. Without them we cannot calculate your targets.
  • Voluntary: food photos, stories, weight log, workouts, sleep, water, eatery locations, Health Connect, Apple Health, Strava, JoyoFit cloud, Family, sleep insights, notifications, community posts and AI connections. All of them are off until you turn them on or use them yourself, and you can turn them off at any time.

Sensitive personal data and explicit consent

Some data you enter is sensitive personal data under the PDPA because it relates to your health or body: weight and height, food, workouts, sleep, heart rate, blood oxygen (SpO2) and cycle (period) data, and pregnancy or breastfeeding mode details if you use them.

We process sensitive data only with your explicit consent. You give that consent when you enter the data or turn on the relevant optional feature, for the purposes above only. Cycle (period) data follows a Pro account and has its own switch (Sync cycle data).

You can withdraw consent at any time: turn the feature off, delete the data in Profile, or contact us. Withdrawing consent may mean the feature no longer works.

Data we store

  • Account: name, email and profile photo from the Google account you sign in with. If you sign in with Apple on the iPhone app, we store your name (when Apple provides it) and email, which can be an Apple relay address. JoyoRogo does not store passwords.
  • Personal details: year of birth, sex, height and weight.
  • Daily records: weigh-ins, food, workouts, sleep and water.
  • Daily plan: eat, burn and sleep targets calculated from your personal details.

One account = one set of data. We store nothing you did not enter yourself.

Everything sent between the app or browser and the JoyoRogo server uses HTTPS (TLS).

Camera, gallery and barcodes

The camera is used only when you photograph food to count its calories, scan a package barcode, or photograph the "Nutrition Information" table on a package. The gallery is used only for photos you pick yourself (food photos, label photos, profile photos, story photos). We do not read your gallery beyond the photos you pick. For barcodes, only the barcode number goes through our server and external product databases, such as Open Food Facts (an open product database), to fetch nutrition info. The number is not sent with your name or email.

If you photograph a product's nutrition label, the photo is sent once to our server to be read by AI, then discarded: the photo is not stored or kept. What is stored is only the product name and the nutrition figures you type or confirm yourself in the form. That product data is shared with all JoyoRogo users so they can scan the same product. Your contribution stays linked to your account so we can count how many people confirmed the figures and limit abuse, but your name is not shown to other users.

Food photos

Photos you send are passed to AI (Cloudflare Workers AI) to count calories and nutrients, and are not used to train models. The photo is held temporarily on the server so the "Recalculate" button can use the same photo, then deleted automatically after about 2 days (automatic deletion can run a little late). Original photos are not stored permanently. What we store is only the cut-out of each food (without background) as a diary sticker, at a random address that cannot be guessed; delete the food entry and its sticker is deleted too.

If you rate a scan result "Not accurate" or "Wrong", there is an optional, unticked box: "You may keep this photo to help improve the AI". Only if you tick it is the photo stored together with your note, the AI's food list and the result you saved. It is used only to test and improve JoyoRogo's AI, can be deleted on request, and is also deleted when you delete your account or all data. Without the tick, the photo is not kept beyond the temporary period above.

For every photo scan, the AI's answer text (food list, estimated weight, calories and nutrients, without the photo) is stored with the final result you log. The purpose is to measure and improve AI accuracy. That text is deleted when you delete your account or all data.

If you turn on "Keep original photo" in Profile, the original photo (a small version) of scans you save is kept so you can view it again in the diary. Only your account can open it. Turning the setting off, or deleting all data, deletes all stored original photos.

One exception: accounts in the internal accuracy dataset (currently only the JoyoRogo maker's own account) keep scan photos, AI answers, corrections and the saved final result, to evaluate the model. The photos are not used to train models and can be deleted on request. Other accounts are not affected.

Eatery locations

Location is off by default. If you turn on "Save eatery location" when logging a plate with a place name, we store the place's point rounded to about 100 metres, not the exact point. The location is used only for the map and the "Nearest" order in the Places tab, is visible only to your account, and never appears on a public profile or feed.

Locations can be deleted one place at a time or all at once from the Places tab without changing your food records. Deleting all data also deletes all stored locations.

Stories and voice recordings

When you describe your food, your text or voice recording is passed to AI (Cloudflare Workers AI) to be turned into text and have its calories counted. Voice recordings are not stored and not used to train models. Only the foods you choose to log are stored.

Health Connect (Android)

If you connect Health Connect in the Android app, you choose which data to allow, and you can revoke permission at any time from Health Connect. JoyoRogo reads workout sessions, steps, distance, active calories and sleep sessions from the last 7 days, only while the app is open, and does not read in the background.

  • Read: workout sessions, steps, distance, active calories and sleep.
  • Stored in your account: each workout (name, duration, calories), daily summaries (steps, distance, active calories) and sleep hours per night, so your daily targets can be calculated.
  • Written to Health Connect: food you log (name, calories, protein, carbohydrate, fat, fibre, meal type), so other health apps you allow can read it.

Health Connect data is not sold, not used for ads or ad profiling, and not shared with third parties. It is used only to calculate and show your progress. Deleting all data in Profile deletes all records already stored in your account; data we already wrote to Health Connect is deleted through the Health Connect app.

Apple Health (iPhone)

If you connect Apple Health in the iPhone app, iOS asks your permission through Apple Health's own dialog, and you can revoke it at any time in the Health app or iPhone Settings. JoyoRogo only reads; the app writes nothing to Apple Health. What is read is data from the last 7 days, when you run sync from Profile, and afterwards when the app is opened. There is no background reading.

  • Read: workouts (type, start and end time, calories), steps, walking and running distance, active calories and sleep.
  • Stored in your account: each workout (name, type, duration, calories), daily summaries (steps, distance, active calories, exercise minutes) and sleep hours per night, so your daily targets can be calculated.
  • Not read: heart rate, GPS routes, body weight, or any other health data outside the list above.

Apple Health data is not sold, not used for ads or ad profiling, and not shared with third parties. It is used only to calculate and show your progress. Deleting all data in Profile deletes all records already stored in your account.

Strava (optional)

If you connect Strava, JoyoRogo asks for permission to read your activities (read and activity:read_all) to turn them into calories burned in your diary. When you press Sync in Profile or Workouts, JoyoRogo fetches your last 30 activities.

  • Read from each activity: type, name, start time, moving time and calories. If Strava does not record calories, we estimate them from the workout type, duration and your weight.
  • Stored in your account as a workout, with the Strava activity number so it is not logged twice. Workouts from Strava are visible only to you: they do not count in groups, challenges or the feed, and are not used to adjust your targets.
  • Strava access tokens and athlete ID are stored in the JoyoRogo database. JoyoRogo and JoyoFit use one Strava app, so the connection is shared; workouts JoyoFit uploads to Strava are not imported again by JoyoRogo so they are not doubled.
  • Workouts from Strava are kept only 7 days from the activity, following the Strava API Agreement (section 6.2: Strava data may not be cached for more than seven days). After that the whole row, including calories, is deleted automatically every few minutes, so calories burned for older days no longer include it. Activities older than 7 days are not imported at all. For calories that stay stored, use Health Connect (Android) or Apple Health (iPhone).

Disconnecting Strava in JoyoRogo deletes the workouts imported from Strava earlier. Permission is revoked at Strava only if JoyoFit is not using it too; if it is still in use, the JoyoFit connection keeps working. If you revoke the app at strava.com (Settings, My Apps), all tokens and all workouts imported from Strava are deleted too. Deleting your data or account revokes Strava permission completely. JoyoRogo does not use Strava data for ads or analytics, and does not sell it.

JoyoFit workouts in the cloud (Pro)

If your account is Pro and you sign in to JoyoRogo in the JoyoFit app, workouts recorded by JoyoFit are stored in your account so they can be restored on a new phone and viewed on the JoyoFit Workouts page on the web. Free accounts and accounts not signed in on JoyoFit upload nothing; the workouts stay only on your phone.

  • Stored: workout summary, GPS route, heart rate, elevation, speed, cadence, power, and derived analysis (distance, moving time, climb, zones, splits).
  • Where: JoyoRogo's own Cloudflare storage, linked to your account and not openable without signing in.
  • Who can see it: only you. A workout you share to the feed or a group is a separate, filtered copy (for example without the route or heart rate if you hide them), not this cloud data. See the Community section.
  • Not used for ads or to train models, and not sold.

Delete one workout or all of them from the JoyoFit Workouts page on the web, or in the app under Settings, Health Connect and cloud (on iPhone: Apple Health and cloud), Cloud sync section, Delete cloud data. Deleting a workout also deletes it from the phone that synced it at the next sync. Deleting all data or the account also deletes all cloud workouts. If Pro ends, workouts already stored can still be read and deleted; new workouts are not uploaded until Pro is active again.

Old strength training history

Strength training is now logged in JoyoFit. Old history in JoyoRogo can still be viewed but not changed. History you brought to JoyoFit is stored in JoyoFit (on your phone, and in JoyoFit's cloud for Pro). Deleting data in JoyoRogo does not delete that copy.

JoyoFit Coach (Pro)

Coach in the JoyoFit app has two parts that touch the server: the plan document and Ask coach. Both are for Pro accounts only. Coach is not a doctor and its answers are not medical advice.

  • Plan document: your training plan choices (type, level, days, start date), sessions you tick or skip, and the reps and weights you log. Stored in the JoyoRogo database, linked to your account, so it is the same on all your phones and can be restored. Only you can read it. Deleted when you use Delete all my data or delete your account.
  • Ask coach: the message you type, a summary of fitness data from your phone (readiness, sleep, training load, last workout, plan), and a little of your account data (profile, latest weight, food summary) are sent to the AI provider, Cloudflare Workers AI, to be answered.
  • Ask coach messages and answers are not stored on our server. Only the number of messages per day (for the daily limit) and token usage are recorded.
  • Messages that mention injury, pain, symptoms, medicine or eating disorders are answered with advice to see a doctor or physiotherapist, with no exercise or diet advice.
  • Not used for ads or to train models, and not sold.

Settings across all your phones

So that two or three phones (Android and iPhone) show the same thing, the small choices you set are stored in your account and follow you to another phone after you sign in. This applies to all accounts in JoyoRogo; in JoyoFit only to Pro accounts.

  • JoyoRogo (all accounts): theme, reminders (time and days), view and filters in the Food tab, sticker privacy choices (hide numbers, show name, watermark), and announcements you dismissed. Language is stored in your profile.
  • JoyoFit (Pro): settings that follow the account (profile, daily targets, theme, language, temperature unit and weather city name, cycle switch and its reminders, sleep report), sticker templates you made, routes you saved, HRV, sleep score, health metrics reported by the watch, and the last 90 days of steps and sleep to restore on a new phone.
  • Cycle data (periods and daily notes) is health data. It only follows a Pro account and has its own switch, Sync cycle data, which is on by default. Turning it off deletes the cycle copy in the cloud.
  • Does not follow the account: notification permission, location switch, Health Connect or Apple Health connection, camera choice, raw heart-rate interval, and watch pairing key. A watch must be paired on each phone.
  • Health Connect (Android) and Apple Health (iPhone) data are never mixed. If two phones report the same day, the step count does not go down and the longer sleep is used, and the same workout is not logged twice.

Stored in the JoyoRogo database, linked to your account, and readable only by you. Not used for ads or to train models, and not sold. Deleted when you use Delete all my data or delete your account, and in JoyoFit through Delete cloud data.

Sleep insights (optional)

Sleep insights are off by default. Only after you turn them on (in JoyoRogo or in JoyoFit, one shared switch) does JoyoFit send one summary per night to your account. It contains:

  • Sleep start and wake time, and your phone's time zone offset.
  • Time asleep, time awake, and how many times you woke.
  • Total sleep stages (deep, REM, light) if your watch measures them.
  • Sleep score from the watch, night HRV and night resting heart rate.
  • Naps (start and end time).
  • If you set up a room thermometer in JoyoFit: average, lowest and highest room temperature and humidity during sleep (not minute-by-minute readings).

JoyoRogo lines the summary up with your food and workout records to describe patterns, for example when your last dinner was or the days you exercised. The AI text sees only counts and averages, never night by night or food names. Caffeine and alcohol are only counted from your existing food records, and no new workout data is sent from JoyoFit.

At most the last 90 nights are stored. Turning the switch off immediately deletes all stored nights, as do Delete all my data and deleting your account. This data is not shared with groups, the feed, family or MCP connectors, not used for ads or tracking, and not sold. Sleep insights are not medical advice; if your sleep stays disturbed, talk to a health professional.

In a food record there is also an optional "meal time" field. That time is stored with the food entry, used for time-based insights, and deleted together with your food record.

Community: feed and groups

Nothing is shared automatically. Only what you choose to post (food, workouts, weight or stories, with the photo and caption you write) is visible to others: to your group members, or to everyone if you choose public and turn on your public profile. Your name, profile photo, username (handle) and bio appear with your post. Public posts and comments can be reported, and users can block other users. You can delete your posts at any time.

Workouts from a watch that you post through JoyoFit (Share to JoyoRogo) can carry the GPS route, heart-rate chart and workout analysis, according to the switches you pick when posting. The workout summary is visible to the audience you chose (group or public); the details (map, charts, splits, zones) are visible to you and JoyoRogo Pro members. The post is a separate copy: deleting the workout on your phone or in the cloud does not delete the post, and deleting the post deletes its kudos, comments, route and charts. Posts and comments are kept until you delete them or your account is deleted.

Joining a group challenge means that group's members can see whether your target is met each day, your streak, and your steps, strain, sleep or workout count for that challenge. Your food numbers (calories and protein) are visible only to you; friends see only met or not met. You can leave a challenge at any time and your data on its leaderboard disappears too.

Family in JoyoFit (optional)

The JoyoFit app has a Family feature that is off until the person being monitored accepts an invitation. The monitor must sign in with a JoyoRogo account, and each person's JoyoRogo name is shown to the person connected with them.

  • Only a daily summary is sent: steps, resting heart rate, last night's sleep, blood oxygen (SpO2) if turned on, and when the watch last connected and its battery. Never sent: location, routes, per-minute heart rate, food and photos.
  • Where: the JoyoFit cloud server in the developer's Cloudflare account, separate from the JoyoRogo database and linked to your JoyoRogo account ID. Summary history is kept 30 days for Free monitors and 90 days for Pro monitors, then deleted automatically.
  • The monitored person sets each category, can pause or stop at any time (the monitor instantly sees nothing and summaries already sent are deleted), and can always see who is monitoring.
  • Deleting the JoyoRogo account deletes all Family links, summaries and push tokens, both as the monitored person and as a monitor.

Full details are at fit.joyorogo.com/privasi (Bahasa Indonesia).

Push notifications

Notifications are off until you allow them yourself. There are two kinds, and both are used only to tell you things, not for ads.

  • In the browser (web): if you allow notifications, we store your browser's push subscription (endpoint address and its encryption keys) for fasting reminders, kudos and comments on the feed, and group pokes. Notifications are sent through your browser's own push service. Subscriptions that are no longer valid are deleted automatically, and deleting all data or the account deletes them too.
  • In the JoyoFit app (Family): your phone's push token (Expo token) is stored on the JoyoFit server and used to tell the monitor when data looks unusual. Notifications are sent through the Expo push service, then Google Firebase Cloud Messaging (Android) or the Apple Push Notification service (iPhone). The token is deleted when you sign out in JoyoFit and when the account is deleted.

Payments

On the web, Pro is paid once per period on the payment page in the browser: QRIS through Pakasir or bank transfer through DOKU (rupiah methods). We store the order number, amount, status and payment time. DOKU receives your name and email to create the payment page. We do not store your card, bank account or e-wallet details; the payment provider handles them. A receipt is sent to your email.

Purchases in US dollars (USD) on the web are processed by Polar (polar.sh, Polar Software Inc.), the merchant of record for those transactions. Polar collects card details, name, email, country or billing address, and tax number (if any) to calculate tax and check for fraud. JoyoRogo receives the order number, amount, status, subscription status and the Polar customer ID. JoyoRogo never sees your card number. Polar's privacy policy: polar.sh/legal/privacy.

In the app, Pro is an automatic subscription through the App Store (iPhone) or Google Play (Android). Payment is handled by Apple or Google; we do not receive your card number or payment data. What we store to link the subscription to your account and to renew or revoke Pro when Apple or Google tell us (renewal, cancellation, refund):

  • App Store: original transaction ID, product ID, environment (Sandbox or Production), subscription status, end date, and the random token the app used when purchasing.
  • Google Play: purchase token, product and base plan IDs, subscription status, and last order ID.
  • A record of each transaction: transaction or order number, amount in rupiah, number of months, status and time.

Subscriptions are managed and cancelled in Apple or Google settings, not in JoyoRogo.

Purchase terms are in the Terms of Service and Refunds (Bahasa Indonesia).

Sign in with Apple

In the iPhone app you can sign in with Apple, as well as with Google. Apple sends an identity token to the app, then JoyoRogo checks it with Apple. What we receive and store: the Apple user ID for your account, your email (Apple's private relay address if you choose Hide My Email), and your name if Apple sends it. If there is no name, we use "Pengguna". We do not receive your Apple ID password.

When you delete your account from the app, JoyoRogo first revokes your account's Sign in with Apple token at Apple. For that the app asks you to sign in with Apple again, and if the revocation fails, your account is not deleted yet and you can try again.

What we do not do

  • We do not sell your data to anyone.
  • We do not share your data with third parties other than the processors listed in the Processors and third parties section, only as far as the features you use need.
  • We do not use your data for ads.

The only data other people can see is the public progress page and posts you share yourself to the feed or a group (see the Community section). The public progress page is active only if you turn it on in Profile, and contains only your starting weight to current weight, with no email and no food records.

To know which pages and buttons are used, we use cookie-free analytics (Revklik): the pages opened, visit source, device type, and steps such as sign-up or Pro payment. No name, email or health records.

AI connections (Claude and ChatGPT)

This JoyoRogo Pro feature lets an AI app of your choice, for example Claude from Anthropic or ChatGPT from OpenAI, read your data. Nothing is connected unless you add the connector yourself in that AI app, sign in to JoyoRogo, and press Allow on the permission screen that lists what data is requested.

  • What is shared: only data whose permission you approve (profile and targets, food records, body weight, workouts, sleep and recovery), and read-only. The AI app cannot log, change or delete anything in your account.
  • When and to whom: data is sent from JoyoRogo to that AI app and its provider, and only when you ask a question in your account there. JoyoRogo does not send your data anywhere on its own initiative through this connection.
  • Once at the AI provider, their privacy, retention and model-training rules apply. JoyoRogo cannot control them, so check the settings in your account there.
  • Audit log: we record the tool used and its date range (not the data itself), kept 90 days, and you can see it in AI connections.
  • Revocation: you can disconnect an app at any time in AI connections and its access stops immediately. Deleting your data in JoyoRogo disconnects all connected apps.
  • Token storage: the access token is valid for one hour, and its refresh token for up to 30 days or until you disconnect the app, whichever comes first.
  • Never shared: GPS routes and data imported from Strava.

Health data here is not medical advice, and AI answers can be wrong.

The steps to connect and the details are in the Claude and ChatGPT guide (Bahasa Indonesia).

Delete your account and data

You can permanently delete all your records (profile, weight, food, workouts, sleep, feed posts, photos, locations, browser notification subscriptions, JoyoFit cloud workouts, Coach plan documents, and sleep nights for sleep insights) with the Delete all my data button on the Profile page. Your account stays usable, so you can start again from scratch at any time. This button does not delete the account itself: payment history and Pro status remain.

In the iPhone and Android apps, the Delete account button in Profile deletes the account itself: all the records, photos, locations and cloud workouts above, the Strava connection (permission revoked at Strava), Google and Apple sign-in links, sessions, name, email and payment history. Pro cannot be restored afterwards. App Store or Google Play subscriptions must still be cancelled by you in Apple or Google settings.

In the JoyoFit app, the Delete JoyoRogo account button (Settings, Health Connect and cloud, or Apple Health and cloud on iPhone, Cloud sync section) deletes the same JoyoRogo account together with its JoyoFit data, including cloud workouts, Family links and push tokens. Details are at fit.joyorogo.com/privasi (Bahasa Indonesia).

From the web, or if you do not have the app, send an email from the address of the account you use to dzulfikar@joyorogo.com with the subject Delete JoyoRogo account. We delete the account and all its data and confirm by email when done. This page is also the account deletion request address for the JoyoRogo app on Google Play.

Processors and third parties

We do not sell your data. We share it only with the following classes of third parties and processors, as far as the features you use need, as described in the sections above:

  • Infrastructure and AI providers: Cloudflare (Workers AI for photos, stories and Coach; storage and servers, including the JoyoFit cloud server).
  • Payments: Polar (Polar Software Inc.) for USD purchases; DOKU and Pakasir for rupiah payments; Apple (App Store) and Google (Google Play) for in-app subscriptions.
  • Sign-in: Google and Apple.
  • Health and workout sync, when you choose it: Google (Health Connect), Apple (Apple Health) and Strava.
  • Product databases for barcodes: Open Food Facts and similar external product databases (barcode number only).
  • Push notifications: Expo, Google Firebase Cloud Messaging (Android), Apple Push Notification service (iPhone), and your browser's own push service.
  • Cookie-free analytics: Revklik.
  • AI apps you connect yourself through AI connections, for example Anthropic (Claude) or OpenAI (ChatGPT): only on your choice and request.

The only other people who see your data are other users, and only for what you choose to post.

Transfers outside Malaysia

Your data is processed by us in Indonesia (Malang, Jawa Timur, Indonesia) and by the processors above, which may be located in other countries outside Malaysia and Indonesia. We transfer data only as far as needed to provide the features you use, with your consent when you use that feature, and subject to each processor's terms and privacy policy.

If you do not agree to these transfers, do not use the feature concerned, or delete your account.

How long data is kept

  • Account and daily records: until you delete them (Delete all my data) or delete the account. Delete all my data does not delete payment history and Pro status; deleting the account does.
  • Food photos: held temporarily for about 2 days, then deleted. Nutrition label photos and voice recordings are not stored.
  • Workouts from Strava: 7 days from the activity.
  • Sleep insights: at most the last 90 nights.
  • Family summaries: 30 days (Free monitors) or 90 days (Pro monitors).
  • AI connections audit log: 90 days. Access tokens are valid for one hour, refresh tokens up to 30 days.
  • Community posts and comments: until you delete them or your account is deleted.
  • Photos you allowed us to keep to improve the AI: until you ask for deletion, or delete your account or all data.

Your rights and how to make a request

Under the PDPA you have the right to:

  • Access the personal data we hold about you.
  • Ask for correction of inaccurate data (you can also correct it yourself in the app).
  • Withdraw consent, including consent for sensitive data.
  • Ask for deletion. Deletion itself is already in the app: Delete all my data, and Delete account (see the Delete your account and data section).
  • Ask for a copy of your data to be given to you or to another data controller, as far as the Act allows.

How to make a request: Email dzulfikar@joyorogo.com, WhatsApp +62 896-8083-9591. Send it from the address of the account you use so we can verify you. Our target is to reply within 21 days. If we cannot fully meet a request, we will say why.

If there is a data breach

If a personal data breach occurs that is likely to cause significant harm, we commit to notifying the Personal Data Protection Commissioner and affected users within the periods the PDPA sets.

Complaints

Contact us first so we can put it right. You also have the right to complain to the Personal Data Protection Commissioner of Malaysia (Personal Data Protection Department): email aduan@pdp.gov.my, phone 03-7456 3888.

Language of this notice

This notice is available in Bahasa Melayu and English, and both are equally valid. If anything is unclear or seems to differ, contact us and we will explain. The original Indonesian privacy page is at joyorogo.com/privasi.

If this notice changes, the version and date above change with it.

Contact

Questions about your data? PT Joyo Digitama Solusi, Malang, Jawa Timur, Indonesia. dzulfikar@joyorogo.com, WhatsApp +62 896-8083-9591.