Privacy Policy

Effective as of 22 Desember 2025

This Privacy Policy describes how Namalabs under PT Cipta Cita Indonesia ("Memoli," "we," "us," or "our") collects, uses, and shares information in connection with your use of the Memoli iOS application and related services.

This policy is designed to align with the Memoli Terms of Service and adheres to the principles of transparency and "Privacy by Design." By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Data: When you register via Apple Sign-In, we receive a unique identifier and, depending on your settings, your name and email address.

Inventory Data: This includes images of product labels, barcodes, and retail receipts (e.g., from Alfamart or Indomaret) that you upload to digitize your pantry.

User Preferences: Data regarding your household size, dietary sensitivities, or preferred alert frequencies.

1.2 Automatically Collected Information

Usage Metadata: We collect data on how you interact with the app, such as the frequency of scans, common categories of products tracked, and waste patterns (items marked as "expired" or "disposed").

Device Information: We collect technical details such as your iOS version and device model to optimize the performance of on-device AI-OCR (VisionKit).

2. Use of Information and AI Processing

2.1 Service Delivery and AI-OCR We use your information primarily to facilitate the "Safety Net" features of Memoli. Images of labels and receipts are processed using VisionKit (on-device) and Mistral AI (cloud-secured) to extract expiry dates and ingredient lists. This automated processing is essential for providing real-time safety alerts and inventory tracking.

2.2 B2B Data Analytics and Market Insights A core component of our "Waste to Value" mission involves analyzing household consumption patterns. Namalabs under PT Cipta Cita Indonesia may use your anonymized, aggregated usage data to generate B2B analytical reports for Fast-Moving Consumer Goods (FMCG) partners.

The Anonymization Standard: Before any data is utilized for B2B analytics, it is stripped of all Personal Identifiable Information (PII). FMCG partners receive insights such as "Regional waste trends for dairy products" or "Commonly ignored ingredient alerts," which are never linked back to an individual user or household.

Purpose: These insights help manufacturers improve supply chain efficiency and product safety, ultimately reducing global household waste.

3. Data Sharing and Third Parties

3.1 Third-Party Service Providers We share data with service providers who perform functions on our behalf, such as cloud hosting and database management. These partners are contractually obligated to protect your data and are prohibited from using it for their own marketing purposes.

3.2 Affiliate and Replenishment Links When you use the "Smart Replenishment" feature to purchase items via third-party marketplaces (e.g., Tokopedia, Shopee), you will be redirected to their platforms. Those entities have their own privacy policies, and Namalabs under PT Cipta Cita Indonesia is not responsible for their data handling practices.

3.3 Legal Compliance We may disclose your information if required to do so by Indonesian law (such as UU ITE) or in response to valid requests by public authorities.

4. Cross-Border Data Transfer

4.1 International Infrastructure While Memoli is operated by Namalabs under PT Cipta Cita Indonesia and primarily targets the Indonesian market, our Service utilizes global cloud infrastructure (such as AWS or Google Cloud).

4.2 Transfer Safeguards By using Memoli, you acknowledge and agree that your information may be transferred to, and processed in, countries other than Indonesia. We ensure that these transfers comply with the Indonesian Personal Data Protection Law (UU PDP) and utilize Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure your data receives a level of protection comparable to that in your home jurisdiction.

5. Security and Data Sovereignty

5.1 On-Device Processing To maximize privacy, Memoli prioritizes on-device processing for initial image recognition. This means that many of your photos are analyzed directly on your iPhone and are not necessarily uploaded to our servers unless required for cloud-based AI synthesis or database synchronization.

5.2 Security Measures We implement industry-standard administrative, technical, and physical security measures to protect your data from unauthorized access or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Updates You can view and modify your household inventory and account details directly within the Memoli app settings.

6.2 The "Right to be Forgotten" You may request the deletion of your account at any time. Upon deletion, Namalabs under PT Cipta Cita Indonesia will purge your PII from our active databases. Residual anonymized data used in B2B aggregate reports may remain, as it no longer constitutes "personal data" under applicable law.

6.3 Communication Preferences You may opt out of receiving non-essential notifications (such as marketing tips or "Memoli Moments") via your iOS system settings.

7. Changes to This Policy

We may update this Privacy Policy to reflect changes in our roadmap (Scenario 1) or regulatory requirements. We will notify you of any material changes by posting the new policy within the app and updating the "Effective Date" at the top of this document.

8. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Office:

Namalabs under PT Cipta Cita Indonesia

Email: hello@memoli.app

Address: Apple Developer Institute for Professionals Autograph Tower – 51st Floor | Thamrin Nine Complex Kota Jakarta Pusat, Daerah Khusus Ibukota Jakarta 10230

By continuing to use Memoli, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your data as outlined above.