Privacy Policy

1. Introduction

PT Trendcas Global Digital ("we," "our," or "us") operates the mobile and desktop application Baska (the "Application"). This Privacy Policy explains how we collect, store, process, and protect your personal data when you use the Baska Application and associated services.

We are committed to respecting your privacy and protecting your personal data in full compliance with the General Data Protection Regulation (GDPR), the Indonesian Personal Data Protection Law (UU No. 27 Tahun 2022 / UU PDP), and Apple App Store & Google Play Store developer guidelines.

2. Data Controller

The data controller responsible for processing your personal data is:

PT Trendcas Global Digital
Epiwalk, Jl. H. R. Rasuna Said Lantai 5, Jakarta, Indonesia
Contact Email: [email protected]

3. Categories of Data We Collect

We collect and process the following categories of data required to operate, maintain, and enhance the Baska Application, in full alignment with our App Store and Google Play disclosures:

• Account & Profile Data (Personal Info): When you create an account, register, or sign in, we collect your name, display name, email address, and unique user identifier.
• Photos & Videos: The Application accesses or processes photos and videos imported or uploaded by the user to enable in-app features and support data/file export options.
• Calendar Data: The Application accesses or processes calendar events and schedules created or written by the user within the Application.
• Device & Other Identifiers: Device model, operating system version, app version, language preference, and unique installation tokens used solely for license verification, security, and notification delivery.
• App Info & Performance (Diagnostics): Anonymous operational logs, feature usage statistics, performance metrics, and crash reports/logs to help us troubleshoot bugs and optimize stability.
• App Store & Google Play Purchase Data: Purchase confirmation tokens, transaction IDs, subscription status, and expiration dates. We do not collect or store credit card numbers, bank details, or direct billing credentials.
• Support Communications: Information provided when you contact customer support, including your email address, message contents, and relevant diagnostic screenshots.

4. How We Collect Data

We collect data through the following methods:

• Direct interactions when you register an account, configure app preferences, or contact our support team.
• Automated receipt verification through Apple App Store Media Services API and Google Play Billing API upon in-app purchase or subscription renewal.
• Automated diagnostic systems for anonymous error reports and app stability metrics.

5. Legal Basis for Processing (GDPR & UU PDP)

We process your personal data under the following legal bases:

• Contractual Necessity: To fulfill our agreement with you, grant access to Baska features, and manage active subscriptions.
• Legitimate Interests: To maintain system security, analyze app performance, prevent fraud, and continuously improve Baska.
• Consent: For optional features such as marketing updates or push notifications, which you can grant or withdraw at any time.
• Legal Compliance: To satisfy mandatory legal obligations, accounting standards, or legal requests from competent authorities.

6. How We Use Your Data

Your data is used strictly for the following purposes:

• To activate, authenticate, and provide access to Baska features and services.
• To verify subscription validity with Apple App Store and Google Play Store.
• To deliver critical security updates, technical notices, and administrative announcements.
• To deliver responsive user support and assist with customer inquiries.
• To diagnose crashes, fix software bugs, and optimize app performance.
• To protect against unauthorized access, intellectual property infringement, and fraudulent transactions.

7. Third-Party Service Providers & App Stores

We do not sell, rent, or trade your personal data. We share necessary data only with trusted third-party providers bound by confidentiality and data processing agreements:

• App Store Service Providers: Apple Inc. (Apple App Store) and Google LLC (Google Play Store) serve as the exclusive payment processors and distribution platforms for Baska in-app purchases and subscriptions.
• Infrastructure & Cloud Hosting: Enterprise cloud hosting services (e.g., AWS, Supabase, or Google Cloud) for secure user authentication and database infrastructure.
• Analytics & Error Monitoring: Standard anonymized crash reporting tools used exclusively to monitor software performance.

8. Data Security & Local Storage

We enforce robust technical and organizational security measures to protect your personal information against unauthorized access, loss, or alteration. All communication between Baska and backend services is encrypted using Industry-Standard TLS/SSL protocols.

Sensitive localized credentials stored by Baska on your device (such as authentication tokens or encryption keys) are protected using standard hardware-backed secure storage, including the iOS Keychain and Android Keystore.

9. International Data Transfers

Your personal data may be processed on secure servers located outside your country of residence. When cross-border data transfers occur, we implement legal safeguards such as Standard Contractual Clauses (SCCs) or legal mechanisms recognized under the Indonesian UU PDP and European GDPR to ensure an equivalent level of protection.

10. Data Retention

We retain your personal data only for as long as necessary to provide Baska services and comply with legal requirements:

• Account Data: Retained for as long as your account remains active, and deleted within 12 months after account termination upon request.
• Subscription Records: Retained for the duration required by applicable financial and tax regulations.
• Diagnostic Logs: Automatically anonymized or purged within 24 months.

11. Your Data Subject Rights (GDPR & UU PDP)

Under applicable data protection laws, you possess the following rights regarding your personal data:

• Right to Access & Information: Request confirmation and details of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and personal data, subject to statutory retention requirements.
• Right to Restriction of Processing: Limit how we process your personal data under specific circumstances.
• Right to Data Portability: Obtain a structured, machine-readable copy of your personal data.
• Right to Object & Withdraw Consent: Object to processing based on legitimate interests or revoke consent for optional features at any time.

To submit a data rights request, please email us at [email protected]. We will process your request within 30 days.

12. Children's Privacy

The Baska Application is not directed to children under the age of 16 (or 13 depending on jurisdiction). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal information, we will delete it immediately from our systems.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect software enhancements, regulatory changes, or store policy updates. Revised policies will be published on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact & Inquiries

For questions, privacy inquiries, or data protection rights requests regarding Baska, please contact:

PT Trendcas Global Digital
Email: [email protected]
Website: https://trendcas.com