Privacy Policy

a. Account Data

• Full name or display name
• Email address (required for registration)
• Phone number (optional, for OTP verification)
• Profile photo (if uploaded)

b. Ticketing & Transaction Data

• Travel pass purchase history (Daily, Weekly, Monthly)
• Tourist attraction tickets purchased
• QR code scan history for ticket validation
• Transaction IDs and payment method used (QRIS, Virtual Account, Debit, Credit Card)
• Reward point balance and redemption history
• Promo codes redeemed

c. Activity & Fitness Data (Lait Run)

• Running distance, duration, average pace
• GPS route data (only during active sessions)
• Strava sync data (if connected, only with explicit consent)
• Personal diary entries you write
• Event and running challenge participation

d. Device & Technical Data

• Device type, OS version, and app version
• Push notification token (Firebase Cloud Messaging)
• Crash logs and error reports (for app improvement)
• Feature usage for product analytics (anonymous aggregate)

• Full payment card details (card number, CVV, PIN)
• Private messages between users
• Contacts or friend lists from your device
• Private/unpublished Strava activity data
• Biometric data
• Location data outside of active tracking sessions you initiate

LAIT requests location access only when you actively use run tracking or transit routing features. We do not track your location in the background without your explicit permission.

We integrate third-party services to operate the platform. Each third party has its own privacy policy:

• Data is stored on secure servers with encryption in transit (TLS) and at rest.
• Account data is retained while your account is active.
• Transaction data is kept for 5 years for accounting and legal requirements.
• Run activity and diary data is retained as long as you use the service.
• Upon account deletion, all personal data is erased within 30 days.

To exercise your rights, email us at privacy@lait.co.id or delete your account directly from the app settings.

We implement reasonable technical and organizational measures to protect your data, including:

LAIT services are intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us data, please contact us for removal.

With your permission, we send notifications for: booking confirmations, ticket status updates, event news, promo offers, and activity reminders. You can disable notifications at any time via device or app settings.

We may periodically update this Privacy Policy. Material changes will be announced via in-app notification or email before taking effect. The "Effective date" at the top reflects the latest revision.