Kebijakan Privasi

1. Introduction

Welcome to Bahasa Ibu's Privacy Policy. Your privacy is fundamental to our mission. This policy explains how we collect, use, protect, and share your information.

Our Commitment:

We believe data contributors deserve complete transparency about how their information is handled. We design privacy protection into every feature, not as an afterthought.

What This Covers:

• What information we collect
• How we use it
• How we protect it
• Your rights and choices
• How to contact us

Language: This policy is available in English and Bahasa Indonesia. The Bahasa Indonesia version prevails in case of conflict.

2. Information We Collect

2.1 Information You Provide

Account Registration:

• Full name
• Email address
• Phone number
• Date of birth
• Region/city of residence
• Preferred languages

Payment Information:

• E-wallet account details (GoPay phone number/ID)
• Bank account information (if applicable)
• Tax identification number (for earnings above threshold)

Profile Information (Optional):

• Education level
• Household information (for program customization)
• Areas of expertise or interest

Contributed Content:

• Text submissions in Indonesian languages
• Language and domain selections
• Notes or context you provide with submissions

2.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Time spent on platform
• Submission history and patterns
• Device type and operating system
• IP address (anonymized after 30 days)
• Browser type and language settings

App Performance Data:

• Bandwidth and connectivity quality
• App crashes or errors
• Load times and technical issues

Location Data (Approximate Only):

• City/region level location (never precise GPS)
• Used only to connect you with nearest Rumah Data Ibu hub
• You can opt out in settings

2.3 Information We DO NOT Collect

We never collect:

• Precise GPS coordinates
• Content of your personal messages outside of what you explicitly submit
• Browsing history outside our platform
• Contact lists or phone contents
• Financial information beyond payment account details

3. How We Use Your Information

3.1 Primary Uses

To Provide Our Service:

• Process your contributions
• Calculate and distribute payments
• Provide technical support
• Send important service notifications

To Improve Quality:

• Train validation algorithms
• Improve platform usability
• Identify technical issues
• Develop new features

To Ensure Safety and Compliance:

• Prevent fraud and abuse
• Verify eligibility
• Comply with legal obligations
• Enforce our Terms of Service

To Communicate With You:

• Respond to your inquiries
• Send payment notifications
• Provide training and educational content
• Share community updates (you can opt out)

3.2 Research and Development

Aggregate Analysis:

We analyze contributor data in aggregate (never individually) to:

• Measure program impact
• Publish research on data empowerment models
• Report to funders and partners
• Improve our methodology

Academic Research:

Anonymized, aggregate data may be shared with research partners to study digital literacy, economic empowerment, and ethical AI development.

4. How We Handle Your Contributed Content

This is the most important section. Here's exactly what happens to text you submit:

4.1 Immediate Processing

Step 1: Automatic PII Removal

Within seconds of submission, automated systems scan for and remove:

• Names of people
• Phone numbers
• Email addresses
• Physical addresses
• ID numbers (KTP, SIM, etc.)
• Bank account numbers
• Specific dates (beyond year)
• Company names (when identifying)
• Any other identifying information

Step 2: Manual Review

Human reviewers check for:

• Quality and authenticity
• Any PII that automated systems missed
• Compliance with content guidelines
• Appropriate language classification

Step 3: Final Anonymization

Before data enters our training datasets:

• All metadata linking content to your account is permanently removed
• Content is assigned a random identifier
• Only language, domain, and region are retained
• The connection between you and the content is mathematically irreversible

4.2 What This Means

You Cannot Be Identified: Once anonymized, even we cannot determine which contributor submitted which content.

You Cannot Withdraw Specific Content: After anonymization, the content is technically "orphaned" from your account. You can close your account, but previously submitted and anonymized content remains in datasets.

Your Privacy Is Protected: Even if our datasets are shared with partners, your personal identity remains protected.

4.3 Chat Data on chat.baibu.id

The Baibu chat product requires explicit consent before use. If you choose to enable chat, your chat conversations may be used for AI training and product improvement under the same privacy and anonymization principles described in this policy.

• Chat access is available only after you opt in to training use
• Authorized staff may review chat conversations for operations, quality, and safety
• We attempt to remove personally identifiable information from chat material before training use
• You may later request deletion of your chat data
• If you withdraw chat consent later, access to the chat product is removed

5. How We Share Information

5.1 We NEVER Sell Personal Information

We do not and will never sell, rent, or trade your personal information (name, email, phone, etc.) to third parties.

5.2 Sharing of Anonymized Data

With AI Research Partners:

• Anonymized, de-identified language datasets
• Used for training AI models
• Subject to data usage agreements
• Partners cannot re-identify contributors

With Academic Researchers:

• Aggregate statistics about program participation
• Anonymized datasets for linguistic research
• Published research papers (no personal information)

Open Source Datasets:

• A portion of contributed data will be released as open-source datasets
• All content is fully anonymized before release
• Released under appropriate open data licenses

5.3 Sharing of Personal Information

We only share personal information when:

Service Providers:

• Payment processors (to send your earnings)
• Cloud hosting providers (with strict security requirements)
• Customer support tools
• All providers are contractually bound to protect your data

Legal Requirements:

• When required by Indonesian law
• To comply with valid legal processes (court orders, subpoenas)
• To protect rights, safety, or property
• To investigate fraud or security issues

With Your Consent:

• When you explicitly authorize sharing
• For features you choose to use (e.g., social sharing)
• For chat-specific training use after explicit in-product consent

Business Transfers:

• If Bahasa Ibu is acquired or merged, your data may transfer to the successor entity
• You'll be notified and can choose to close your account

6. Data Security

6.1 Technical Safeguards

Encryption:

• All data in transit is encrypted (TLS 1.3)
• Personal information at rest is encrypted (AES-256)
• Payment information uses industry-standard security

Access Controls:

• Personal data accessible only to authorized staff on need-to-know basis
• Multi-factor authentication required for system access
• Regular access audits and reviews

Infrastructure:

• Data stored on secure cloud servers with redundancy
• Regular security updates and patches
• Automated backups
• Intrusion detection systems

Separation of Data:

• Personal account information stored separately from contributed content
• Anonymized datasets stored separately from attribution data
• Financial information isolated with additional protections

6.2 Organizational Safeguards

• Background checks for staff with data access
• Regular security training
• Incident response procedures
• Third-party security audits

6.3 Your Role in Security

Please:

• Keep your password confidential
• Use a strong, unique password
• Log out on shared devices
• Report suspicious activity immediately
• Enable two-factor authentication if available

7. Data Retention

7.1 Account Information

While Your Account Is Active:

• We retain all account information
• Contribution history and earnings records maintained

After Account Closure:

• Personal information deleted within 90 days (except as required by law)
• Financial records retained for 7 years (tax and audit requirements)
• Contributed content remains anonymized in datasets (cannot be individually removed)

7.2 Contributed Content

Pre-Anonymization:

• Raw submissions retained for 30 days during validation
• Then anonymized and originals permanently deleted

Post-Anonymization:

• Retained indefinitely as part of research datasets
• Used for AI training and development
• May be shared with partners or released open-source

7.3 Technical Data

• IP addresses anonymized after 30 days
• Usage logs aggregated after 90 days
• Error logs retained for 1 year

8. Your Rights and Choices

8.1 Access and Correction

You Have the Right To:

• Access your personal account information
• Download your contribution history
• Correct inaccurate information
• Update your preferences

How to Exercise:

Email support@baibu.id or use in-app account settings.

8.2 Account Deletion

You Can:

• Close your account at any time
• Request deletion of personal information

What Happens:

• Personal account data deleted within 90 days
• Financial records retained as required by law
• Anonymized contributions remain in datasets (irreversibly de-identified)

8.3 Marketing Communications

You Can:

• Opt out of promotional emails (unsubscribe link in every email)
• Opt out of SMS marketing
• Customize notification preferences in app settings

You Cannot Opt Out Of:

• Transactional emails (payment notifications, account security alerts)
• Critical service announcements

8.4 Data Portability

You can request:

• A copy of your account information (JSON or CSV format)
• Your contribution history
• Your earnings records

Delivered within 30 days of verified request.

8.5 Object to Processing

In some cases, you may object to how we use your information. Contact us to discuss specific concerns.

9. Children's Privacy

Bahasa Ibu is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a child has provided information to us, please contact us immediately so we can delete it.

10. International Data Transfers

Your data is primarily stored in Indonesia. If transferred internationally for processing (e.g., cloud services), we ensure:

• Adequate protection under Indonesian law
• Appropriate safeguards (standard contractual clauses)
• Compliance with local regulations

11. Cookies and Tracking

11.1 What We Use

Essential Cookies:

• Required for platform functionality
• Session management and authentication
• Cannot be disabled

Analytics Cookies:

• Understand how platform is used
• Identify technical issues
• Improve user experience
• You can opt out in settings

We Do NOT Use:

• Third-party advertising cookies
• Cross-site tracking
• Social media tracking pixels (beyond explicit share buttons)

11.2 Your Choices

Most browsers allow you to control cookies through settings. Note that disabling essential cookies will prevent platform use.

12. Third-Party Links

Our platform may contain links to external websites (e.g., partner organizations, educational resources). We're not responsible for their privacy practices. Please review their policies before sharing information.

13. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes via:

• Email to your registered address
• In-app notification
• Prominent notice on our website

Changes effective 30 days after notice (unless legal requirements dictate otherwise).

Your Options:

• Continue using the platform (constitutes acceptance)
• Close your account if you disagree with changes
• Contact us with concerns before changes take effect

14. Your Legal Rights (Indonesian Data Protection)

Under Indonesian data protection regulations, you have rights including:

• Right to information about data processing
• Right to access your personal data
• Right to correct inaccurate data
• Right to delete data (with limitations)
• Right to restrict processing
• Right to object to certain processing
• Right to lodge complaints with supervisory authorities

Exercising Rights:

Contact us using the information below. We'll respond within 30 days.

15. Contact Us

Privacy Questions or Concerns:

Email: support@baibu.id

To Exercise Your Rights:

Email: support@baibu.id

Subject Line: "Data Rights Request - [Your Name]"

Include: Your registered email and specific request

For Security Issues:

Email: support@baibu.id

Report: Suspected data breaches or security vulnerabilities

General Support:

Email: support@baibu.id

In-App: Support chat feature

16. Consent and Acknowledgment

By using Bahasa Ibu, you acknowledge:

• You've read and understood this Privacy Policy
• You consent to the collection and use of information as described
• You understand how contributed content is anonymized
• You agree to the sharing of anonymized data with partners
• You understand that anonymized contributions cannot be withdrawn

For those requiring formal consent documentation: We can provide signed consent forms. Contact support@baibu.id.

Effective Date: November 24, 2025