Kebijakan Privasi

1. Introduction

Hobbestie is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy describes how we collect, use, disclose, and protect information through your use of our Hobbestie services — including our iOS app and our website.

By using Hobbestie, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Personal / User-Provided Information

• Account Information: Username, email address, password (encrypted), profile picture, bio
• Profile Data: Hobbies, interests, location (if you choose to share it), social media links
• User Content: Posts, comments, messages, media uploads, forum contributions
• Payment & Transaction Data: Billing address, payment method (handled by third-party providers), Hobbix token purchases, transaction history, subscription status
• Subscription & Premium Features Data: When you subscribe, upgrade, or change plans

2.2 Automatically Collected & Technical Information

• Usage & Analytics Data: Features used, pages visited, session durations, interactions
• Device & System Data: IP address, device identifiers, OS version, app version, browser type
• Location Data: Approximate location (based on IP or optionally via device geolocation, only if enabled by you)
• Cookies & Tracking Technologies: Data from cookies, web beacons, SDKs, and similar tools

3. How We Use Your Information

• Core Service Delivery: To create and maintain your account, deliver content, enable interactions
• Personalization: To suggest content, matches, hobby communities, or features likely relevant to you
• Communication: For account notifications, updates, customer support, and optionally promotion (if you opt in)
• Payment Processing & Monetization: To process your Hobbix token purchases, subscriptions, marketplace transactions
• Security & Fraud Prevention: To detect abuse, ensure safety, enforce policies
• Analytics & Improvement: To analyze trends, monitor usage, improve product features
• Legal & Compliance: To respond to legal requests, enforce our terms, protect rights

3.1 Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal bases:

4. Information Sharing & Disclosure

• Public / User-Shared Content: Anything you post publicly (e.g. profile info, posts, comments) is visible to other users and potentially indexed by search engines
• Service Providers & Vendors: Third parties who help us with hosting, analytics, payment processing, communications — under strict confidentiality obligations
• Legal Requirements & Protection: If required by law, regulation, court order, or to protect rights, safety, property (ours or others)
• Business Transfers: In the event of merger, acquisition, or sale of assets, user data may be transferred (under confidentiality and legal safeguards)

4.1 Specific Third-Party Services

We share data with the following third-party services:

5. Data Security

• Encryption of data in transit (HTTPS/TLS) and at rest
• Access controls and authentication safeguards
• Regular security audits, testing, and updates
• Use of secure data centers and infrastructure
• Internal policies and training for our staff

No system is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights & Choices

• Access: View the personal information we hold about you
• Correction / Update: Update or correct inaccurate or incomplete data
• Deletion / Erasure: Request deletion of your account and personal data
• Portability: Request a copy of your data in a commonly used format
• Restriction: Request limitations on how we process your data
• Objection: Object to direct marketing or processing based on particular grounds
• Withdraw Consent: If processing is based on consent, you may withdraw it

To exercise these rights, contact us using the details in Section 12.

7. Cookies & Tracking Technologies

We (and our service providers) use cookies, SDKs, web beacons, and similar technologies to enhance your experience, analyze usage, and deliver personalized content and ads (if enabled). You may control cookies through your browser or device settings. For more information, see our Cookie Policy.

8. Data Retention & Deletion

We retain your information for the following specific periods:

• Account Data: Until account deletion + 30 days for recovery purposes
• Transaction Data: 7 years (legal requirement for tax/accounting)
• Analytics Data: 2 years, then anonymized
• Marketing Data: Until consent withdrawn + 30 days
• Support Communications: 3 years from last contact
• Content (Posts, Comments): Until account deletion or content removal
• Cookies: See Cookie Policy for specific cookie retention periods

If you delete your account, we will erase or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

Some anonymized or aggregated data may persist indefinitely for analytics.

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your home country (including the U.S.). When we transfer data internationally, we will implement appropriate safeguards (e.g. standard contractual clauses, encryption) to protect your privacy.

10. Children’s Privacy

Hobbestie is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected such data, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make changes, we will update the “Last Updated” date. For material changes, we may notify you via email, app notice, or a prominent message. Continued use of Hobbestie after changes indicates acceptance.

12. Contact Us

13. Data Breach Notification

If we experience a data breach that may affect your personal information, we will:

13.1 Notification to Authorities

We will report to relevant data protection authorities within 72 hours of becoming aware of the breach (as required by GDPR).

13.2 Notification to Users

If the breach poses a high risk to your rights and freedoms, we will notify you without undue delay via:

• Email to your registered email address
• In-app notification
• Prominent notice on our website

13.3 Information Provided

Our notification will include:

• Description of the breach
• Types of data affected
• Steps we're taking to address the breach
• Recommendations for protecting yourself
• Contact information for questions

13.4 Low-Risk Breaches

For breaches that do not pose a high risk, we may not notify individual users but will still report to authorities as required by law.