Privacy Policy
How we collect, use, and protect your information
Last updated: July 14, 2026
Please read this Privacy Policy carefully before using the Sirsak Nasabah App.
This Privacy Policy explains how PT Sirkular Saka Indonesia ("Sirsak," "we," "us," or "our") collects, uses, stores, protects, and shares your personal data when you use the Sirsak Nasabah App mobile application (the "Service"). By accessing or using the Service, you consent to the practices described in this Privacy Policy.
This Privacy Policy should be read together with our Terms and Conditions.
1. Who We Are
The Service is operated by PT Sirkular Saka Indonesia, a company incorporated in the Republic of Indonesia. Sirsak is a green-tech company that leverages technology to ensure the traceability of post-consumer packaging waste and to facilitate proper waste disposal.
For any questions about this Privacy Policy or your personal data, you may contact us at:
- Email: support@sirsak.co
- Website: Contact Us
2. Personal Data We Collect
We collect the following categories of personal data in order to provide the Service:
2.1 Information you provide to us
- Account information: your name, email address, and password when you register.
- Phone number: used for account identification and verification.
- Profile information: display name, address, and an optional profile photo (JPEG or PNG, maximum 5MB, auto-resized to 512x512 pixels).
2.2 Information collected automatically
- Location data: with your permission, we collect your device's approximate or precise location to display your current position on the map and to filter nearby waste collection points (default radius: 10 km). You may disable location access at any time through your device settings, though this may limit certain features.
- Device and session data: authentication tokens, session identifiers, device operating system and version, and app usage information needed to operate the Service.
2.3 Transaction information
- Balance (saldo) and transaction history: records of credits and debits earned from waste deposit activities, including transaction ID, type, amount, date and time, and balance before and after each transaction.
2.4 Verification via WhatsApp
If you choose to verify your phone number using WhatsApp, we process the phone number you use to send the verification message solely to confirm ownership of that number and to complete verification. This verification is facilitated through the WhatsApp Business Platform provided by Meta Platforms, Inc. Your use of WhatsApp is also subject to WhatsApp's and Meta's own privacy policies.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To create and manage your user account and authenticate your access to the Service.
- To verify your identity and ownership of your phone number.
- To display nearby waste collection points and provide navigation assistance.
- To manage and display your balance (saldo) and transaction history.
- To provide collection point schedules and send you notifications you have subscribed to (such as schedule reminders, schedule changes, and balance updates).
- To maintain the security, integrity, and proper functioning of the Service.
- To respond to your inquiries and provide customer support.
- To comply with applicable legal and regulatory obligations.
4. Legal Basis for Processing
We process your personal data based on one or more of the following:
- Your consent, which you may withdraw at any time.
- Performance of a contract with you, to provide the Service you have requested.
- Compliance with legal obligations under the laws of the Republic of Indonesia, including Law No. 27 of 2022 on Personal Data Protection.
- Our legitimate interests in operating, securing, and improving the Service, provided these do not override your rights.
5. Notifications and Communications
With your consent, we may send you push notifications for schedule reminders, changes to subscribed collection points, and balance updates when a waste deposit is verified and credited. You can manage your notification preferences within the app, including enabling or disabling categories and setting quiet hours.
Verification and service-related messages sent via WhatsApp are initiated as part of your use of the Service. We do not use your WhatsApp number for marketing without your separate consent.
6. How We Share Your Personal Data
We do not sell your personal data. We may share your personal data only in the following circumstances:
- Service providers: with trusted third parties who process data on our behalf to operate the Service, such as cloud hosting, mapping services (Google Maps), and messaging platforms (WhatsApp Business Platform / Meta). These parties are only permitted to use your data as necessary to provide their services to us.
- Legal requirements: where required by law, regulation, legal process, or governmental request.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.
- With your consent: where you have otherwise agreed to the sharing.
Some of these service providers may process data outside Indonesia. Where this occurs, we take reasonable steps to ensure your data is protected in accordance with applicable law.
7. Third-Party Services
The Service integrates third-party services that may collect or process data under their own privacy policies, including:
- Google Maps (mapping and navigation)
- Google Sign-In and Apple Sign-In (authentication)
- WhatsApp Business Platform / Meta Platforms, Inc. (phone number verification and messaging)
We encourage you to review the privacy policies of these third parties.
8. Data Security
We implement technical and organizational measures to protect your personal data, including:
- Encryption of all data transmitted between the app and our servers using TLS 1.2 or higher.
- Encryption of sensitive user data at rest in our database.
- Secure storage of authentication tokens using platform-specific secure storage.
- Access controls limiting who can access personal data.
While we take reasonable measures to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When your data is no longer required, we will delete or anonymize it in accordance with applicable law.
10. Your Rights
Subject to applicable law, including Indonesia's Personal Data Protection Law (UU No. 27 of 2022), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Withdraw your consent to processing.
- Object to or restrict certain processing.
- Request a copy of your data in a portable format.
You may exercise these rights by contacting us at support@sirsak.co. You may also delete your account at any time through our Delete Account page. We may need to verify your identity before acting on your request.
11. Children's Privacy
The Service is not directed to children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If a revision is material, we will provide reasonable notice prior to the new policy taking effect, such as through the app or by other means. Your continued use of the Service after the changes become effective constitutes your acceptance of the revised Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: support@sirsak.co
- Website: Contact Us
By using the Sirsak Nasabah App, you acknowledge that you have read and understood this Privacy Policy.
