Kebijakan Privasi

20FIT Profile (my.20fit.id) · Versi draf

⚠️ DRAF — belum disahkan. Dokumen ini disusun sebagai draf awal berdasarkan cara kerja aplikasi. Isinya wajib direview & disahkan oleh tim hukum/DPO 20FIT sebelum dianggap final. Ini bukan nasihat hukum.

1. Data yang kami kumpulkan

Identitas: nama, email, nomor HP/WhatsApp, jenis kelamin, tanggal lahir, foto profil.
Data fisik & tujuan: berat, tinggi, BMI, tujuan kesehatan, kondisi kesehatan yang kamu isi.
Data kesehatan (sensitif): hasil Medical Check-Up (MCU) yang kamu unggah, beserta analisa AI-nya.
Aktivitas harian: tidur, air minum, puasa, catatan kalori/makanan, latihan.
Data transaksi: pembelian paket scan, voucher, riwayat order.
Data corporate (opsional): keanggotaan program kesehatan perusahaan — hanya jika kamu bergabung.

2. Untuk apa data dipakai

Menyediakan & mempersonalisasi layanan kamu: profil kesehatan, analisa MCU, scan kalori, rekomendasi olahraga & nutrisi, serta memproses pembelian. Data kamu dipakai untuk kepentinganmu sendiri.

3. Data kesehatan (MCU, BMI)

Data kesehatan adalah data paling sensitif. Kami memperlakukannya dengan akses terbatas. Analisa AI atas MCU bersifat edukasi untuk membantumu memahami hasil — bukan diagnosa medis dan bukan pengganti dokter.

4. Berbagi data

Kami tidak menjual data pribadimu ke pihak ketiga.
Program Corporate: data tertentu (status BMI, hasil MCU, jenis kelamin, umur, frekuensi pemakaian) hanya dibuka ke admin HR perusahaanmu jika kamu menyetujui secara eksplisit saat bergabung. Kamu bisa keluar kapan saja.
Penyedia infrastruktur: kami memakai penyedia layanan (mis. hosting database & email) yang memproses data atas perintah kami.
Kewajiban hukum: jika diwajibkan hukum yang berlaku.

5. Keamanan

Akses ke data dibatasi per pengguna (row-level security): kamu hanya bisa mengakses datamu sendiri. Koneksi dienkripsi (HTTPS/TLS). Kredensial rahasia disimpan di server, tidak di aplikasi.

6. Penyimpanan & lokasi

Data disimpan di infrastruktur cloud yang dikelola penyedia layanan kami. (Catatan untuk tim hukum: konfirmasi & cantumkan lokasi/negara penyimpanan dan pengungkapan transfer lintas-negara sesuai UU PDP.)

7. Hak kamu

Akses & unduh: unduh salinan datamu dari halaman Profil → "Unduh data saya".
Hapus: hapus akun & seluruh datamu dari Profil → "Hapus akun saya".
Tarik persetujuan: keluar dari Program Corporate kapan saja.

8. Retensi

Kami menyimpan data selama akunmu aktif. Saat kamu menghapus akun, data pribadimu dihapus. (Catatan hukum: tentukan kebijakan retensi & kewajiban penyimpanan rekam medis yang berlaku.)

9. Anak-anak

Layanan ditujukan untuk pengguna dewasa. Jika kamu di bawah umur, gunakan dengan pendampingan wali sesuai ketentuan yang berlaku.

10. Perubahan

Kebijakan ini dapat diperbarui. Perubahan penting akan kami informasikan melalui aplikasi.

11. Kontak

Pertanyaan soal privasi: [email protected].

← Kembali

Privacy Policy

20FIT Profile (my.20fit.id) · Draft version

⚠️ DRAFT — not yet ratified. This is an initial draft based on how the app works. It must be reviewed & approved by 20FIT's legal team/DPO before it is treated as final. This is not legal advice.

1. Data we collect

Identity: name, email, phone/WhatsApp number, gender, date of birth, profile photo.
Body & goals: weight, height, BMI, health goals, and health conditions you enter.
Health data (sensitive): Medical Check-Up (MCU) results you upload, plus their AI analysis.
Daily activity: sleep, water, fasting, calorie/food logs, workouts.
Transaction data: scan-package purchases, vouchers, order history.
Corporate data (optional): company health-program membership — only if you join.

2. How we use it

To provide and personalise your service: health profile, MCU analysis, calorie scanning, exercise & nutrition recommendations, and processing purchases. Your data is used for your own benefit.

3. Health data (MCU, BMI)

Health data is the most sensitive category. We handle it with restricted access. AI analysis of your MCU is educational to help you understand your results — it is not a medical diagnosis and not a replacement for your doctor.

4. Sharing

We do not sell your personal data to third parties.
Corporate Program: certain data (BMI status, MCU results, gender, age, usage frequency) is shared with your company's HR admin only if you explicitly consent when joining. You can leave anytime.
Infrastructure providers: we use service providers (e.g. database hosting & email) that process data on our instructions.
Legal obligations: where required by applicable law.

5. Security

Access is restricted per user (row-level security): you can only access your own data. Connections are encrypted (HTTPS/TLS). Secret credentials are stored on the server, never in the app.

6. Storage & location

Data is stored on cloud infrastructure managed by our service providers. (Note for legal: confirm & state the storage location/country and cross-border transfer disclosure per applicable data-protection law.)

7. Your rights

Access: request a copy of your data by contacting us at [email protected].
Erase: delete your account & all your data from Profile → "Delete my account".
Withdraw consent: leave the Corporate Program anytime.

8. Retention

We keep data while your account is active. When you delete your account, your personal data is deleted. (Legal note: define the retention policy and any applicable medical-record retention obligations.)

9. Children

The service is intended for adult users. If you are a minor, use it with guardian supervision as applicable.

10. Changes

This policy may be updated. We'll notify you of material changes in the app.

11. Contact

Privacy questions: [email protected].

← Back