Privacy Policy

Last updated: 29 October 2026

PENTANA Mobile (“the app”) is the member companion to a welfare & membership fund operated by Kelab Sosial & Rekreasi PENTANA (“we”, “us”, “our”). This policy explains what personal information we handle when you use PENTANA and the PENTANA web portal, and your rights over it.

Information we collect

We only collect what’s needed to run your membership:

• Account details: your name, email address, membership category, date of birth, and welfare-credit balance. These are provided by your organisation and/or by you when you claim your account.
• Dues & payments: your monthly dues, balances and payment history, and any payment-proof images, amounts and notes you submit.
• Lunch responses: the meal option you choose, or that you are not attending.
• Activity registrations: your sign-ups and the answers you give to event questions.
• Notifications: an anonymous device token so we can send push notifications about lunches, activities and updates. You can turn notifications off in your device settings at any time.
• Sign-in credentials: a securely hashed password and/or a passkey (a public key registered on your device; we never receive your biometric data).
• Technical data: basic server logs (such as IP address and request time) kept for security and troubleshooting.

We do not use third-party advertising or analytics/tracking SDKs, and we do not track you across other apps or websites.

How we use your information

• To show your dues, accept payment proof, and record your lunch and activity responses.
• To send the notifications you’ve allowed.
• To authenticate you and keep your account secure.
• To operate, maintain and improve the service, and to meet welfare-administration and legal obligations.

Legal basis

We process your data to administer your membership of the welfare fund, and (for push notifications) on the basis of your consent.

How your information is shared

We do not sell your personal data. We share it only:

• with Apple Push Notification service (and Google, on Android) solely to deliver push notifications;
• with service providers that host our servers, under confidentiality obligations; and
• where required by law.

Data retention

We keep your information for as long as you are a member and as needed for welfare-fund records and legal obligations, after which we delete or anonymise it.

Security

Data is encrypted in transit (HTTPS). Passwords are stored only as salted hashes; passkeys use public-key cryptography and never expose a secret. Payment-proof images are held on access-controlled storage.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent for notifications at any time. Contact us using the details below.

Children

PENTANA is intended for members of the organisation and is not directed at children under 13.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new “last updated” date.

Contact

Questions or requests about your data: [email protected].