1. Data we collect
We collect data necessary to provide the Service, including:
- Identity & contact data — name, phone number (WhatsApp), email (optional), member ID, and age confirmation.
- Location & address data — delivery address, notes for the courier, and device location (precise or approximate, if permitted) to find the nearest outlet.
- Transaction data — order history, products, and payment details (without storing payment credentials).
- Device & usage data — device type, operating system, an anonymous analytics ID, in-app interactions (screens opened, taps, and other events), and screen session recordings (session replay). Session recordings may include text you type, such as your delivery address. Login/OTP and QRIS payment screens are not recorded.
2. How we use data
Data is used to: process and deliver orders, verify age, manage accounts and points, prevent fraud, and improve the Service. With your consent, we may also send promotional information.
3. Data sharing
We share data on a limited basis with parties needed to operate the Service:
- Partner outlets, to prepare your order.
- ESB (point-of-sale, ordering, and Loop membership system), to process orders and manage member accounts, points, and vouchers.
- Courier partners, to deliver your order.
- Payment providers, to process QRIS transactions.
- Google Maps/Places, to display maps and search for delivery addresses.
- PostHog, our analytics and session recording provider, to understand how the app is used and fix problems.
These parties process data on behalf of Outlet 23 as needed to operate the Service. We do not sell your personal data to third parties and do not use it for advertising.
4. Storage & security
Data is stored as long as needed for the purposes described or as required by law. We apply reasonable technical and organisational security measures, including encryption in transit, to protect your information.
5. Your rights
Under applicable regulations, you have the right to access, correct, or delete your personal data, and to withdraw processing consent. Requests can be submitted via the contact below.
To delete your account and related data, open Profile → Delete Account in the app or follow the steps on the Delete Account page.
7. Children's privacy
The Service is not intended for individuals under 21. We do not knowingly collect data from those who do not meet the age requirement. If such data is identified, we will delete it.
8. Contact
For privacy questions or data requests, contact privasi@outlet23.id or visit our Help Centre.