Andu Privacy Policy

Effective Date: September 4, 2026

This is the Privacy Policy of PT. MIKALON SKS LTD ("we," "us," or "our"), the operator of the Andu mobile application and related services (collectively, the "App" or "Service"). This Privacy Policy is incorporated into and subject to our Terms of Service.

We take your privacy seriously and are committed to safeguarding the personal information you entrust to us. This Policy outlines the types of data we collect, how we use that information, and the choices and rights available to you regarding your data. By accessing or using the Andu App or any of our Services, you acknowledge that you have read and agree to the terms of this Privacy Policy. If you do not agree with these terms, please refrain from using the Service.

1. What Information Do We Collect?

We limit our collection of personal data to what is genuinely needed to deliver and maintain our Services. The types of information we collect depend on how you interact with the App and which features you choose to use.

1.1 Information You Provide
  • Basic Account Information: Such as your name, gender, date of birth, phone number, email address, and friend list.
  • Social Media-Related Information: Such as your social account nickname, likes and preferences, number of friends, and friend list.
  • User-Uploaded Content: Such as profile pictures and chat messages you submit through the App.
  • Usage Data: Records of your interactions with the Services, including browsing activity and related data.
  • User-Generated Content (UGC): Comments, text, images, videos, and audio you create or share while using the App. This content may be recorded and processed during upload, transmission, or live streaming to comply with legal and regulatory obligations.
  • Payment Information: When you make purchases within the App, payment details are submitted directly to third-party payment processors and are not stored by us. We may retain limited transaction records, such as merchant name, date, and amount.
  • Third-Party Social Media Data: If you log in through a social media account (such as Google), we may access your public profile information or other data you authorize through that platform.
1.2 Information Collected Automatically

When you access or use the App, certain technical information is automatically collected from your device to ensure smooth operation, improve performance, and maintain security. This includes:

  • Identification Data: Device type, browser type, brand and model, serial number, screen resolution, and similar identifiers.
  • Region and Language Settings: Used solely to provide localized content and language support based on your country or region.
  • Device Information: Operating system, browser type and version, language preferences, and other configuration details.
  • MAC Address: Collected for fraud prevention and identity verification purposes.
  • Technical Tools: Cookies, web beacons, and similar tracking technologies used to enhance user experience, remember preferences, and analyze usage patterns.
  • Third-Party App Detection: The App may detect whether certain applications (such as WhatsApp or Google Play) are installed on your device. This is used solely to enable related features, provide compatibility support, or guide user actions. No content or personal data from those apps is accessed.
1.3 Information Collected with Your Permission

Certain features of the App require access to specific permissions on your device. We only request these permissions when you choose to use the corresponding features, and you can withdraw your consent at any time through your device settings.

  • Mobile Advertising Identifiers: With your consent, we may collect identifiers such as Apple's IDFA or Google's AAID to deliver more relevant advertisements.
  • Identity Verification: You may choose to upload an identity document to help us verify your account or identity.
  • Camera and Microphone: Required for video calls, voice chats, and capturing photos or audio within the App.
  • Photo Album: Accessed when you upload profile pictures, share images in chats, or save media to your device.
  • Clipboard: Accessed only when you actively perform a copy or paste action within the App. We do not read or collect clipboard content in the background.
  • Bluetooth: Used solely to connect to Bluetooth audio devices during calls or voice interactions.
  • Push Notifications: With your permission, we send service-related alerts and updates. You may opt out at any time through your device settings.
  • IP Address and Network Status: We collect your IP address and network type (Wi-Fi or mobile data) to diagnose connectivity issues, prevent data loss, and maintain smooth service operation.
  • External Storage Access: On devices running Android 10 or below, we may request permission to access external storage if you choose to save images or media files to your device.

2. How We Use Your Information

We use your personal information only for the purposes described below, in compliance with applicable laws. Our processing is always based on legitimate interests, the performance of a contract, legal obligations, or your consent (where required).

2.1 To Provide and Maintain the Service

We use your information to create and manage your account, enable core features such as messaging and video chat, and ensure the App functions as intended. This includes processing your login credentials, displaying your profile to other users, and delivering the features you request.

2.2 To Improve and Develop Our Services

We analyze usage patterns and technical data to better understand how users interact with Andu. This helps us identify areas for improvement, fix bugs, enhance performance, and develop new features. Our goal is to continuously refine the user experience based on real-world usage and feedback.

2.3 To Personalize Your Experience

We use information such as your language preferences, region, and usage behavior to tailor content and recommendations to your needs. This includes adapting the App's interface language and providing a more customized experience that aligns with your preferences.

2.4 To Ensure Safety, Security, and Integrity

We process your data to detect and prevent fraudulent activity, unauthorized access, and other harmful behaviors. This includes identity verification, monitoring for suspicious activity, and enforcing our Terms of Service. These measures help us maintain a secure environment for all users.

2.5 To Provide Customer Support

When you contact us with questions, concerns, or technical issues, we use the information you provide—along with relevant account and usage data—to investigate and resolve your inquiry. This enables us to respond effectively and improve our support services.

2.6 To Process Payments

When you make purchases within Andu, we use limited transaction data (such as order details and purchase confirmations) to complete your transaction, manage subscriptions, and provide you with the products or services you have purchased. Full payment details are processed directly by our third-party payment processors and are not stored by us.

2.7 To Communicate with You

We may send you service-related communications, such as account updates, security alerts, and policy changes. These messages are essential to keeping you informed about your account and the Service. Where permitted by law, we may also send you promotional communications, which you can opt out of at any time.

2.8 To Comply with Legal Obligations

We may process and retain your data as necessary to comply with applicable laws, regulations, or legal requests, and to assist law enforcement agencies when required.

3. How We Share Your Information

We do not sell or rent your Personal Data to third parties. Any sharing of your information is done only as necessary to operate, provide, and improve our Services, and in accordance with applicable laws.

We may share your information with the following parties:

3.1 Service Providers and Partners

We engage third-party vendors to help us deliver our Services, including cloud hosting, analytics, customer support, fraud detection, and payment processing. These partners are authorized to access your data only to the extent required to perform their specific functions and are contractually obligated to protect your information.

3.2 Business Transfers

If we are involved in a merger, acquisition, asset sale, or similar corporate transaction, your information may be transferred as part of that deal. We will take appropriate steps to ensure your data remains protected under this Privacy Policy.

3.3 Legal and Regulatory Compliance

We may disclose your information if required by law, court order, or governmental request. We may also share data to enforce our Terms of Service, investigate potential violations, detect or prevent fraud, or protect the rights, safety, and property of our users, the public, or our company.

3.4 Third-Party Integrations

When you connect your account with third-party platforms (such as Google), we may share limited information—such as your user ID, public profile details, or authentication tokens—to enable the integration. You can disconnect these links at any time through your account or device settings. We may also share your information with third parties when you have provided your explicit consent for a specific purpose.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or service improvement purposes.

4. International Transfer

As Andu is operated by PT. MIKALON SKS LTD, your information may be stored, processed, or accessed in countries outside your own, including countries where we or our affiliates, service providers, or partners maintain facilities.

By using our Services, you acknowledge and consent to the transfer of your data to such countries. Where required by applicable law, we rely on recognized transfer mechanisms—such as Standard Contractual Clauses—to ensure your data receives adequate protection in accordance with this Privacy Policy and applicable data protection laws. Regardless of where your data is stored, we remain committed to safeguarding your information in line with the standards described in this Policy.

5. How Long We Store Your Information

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law.

5.1 Retention Periods

How long we keep your information depends on the type of information, the purpose for which it is collected, and our legal obligations:

  • Account Information: We retain your account data for as long as your account remains active, plus a reasonable period afterward to ensure service continuity and address any post-termination inquiries.
  • Usage Data: Information about your interactions with the Services is kept for the duration of your account activity and may be retained in aggregated or anonymized form for analytical purposes.
  • Legal and Regulatory Requirements: Where required by applicable laws, regulations, or court orders, we may retain certain data beyond our standard retention periods to comply with such obligations.
  • Fraud Prevention and Security: We may retain information related to suspected fraud, abuse, or violations of our Terms of Service as necessary to prevent future misconduct and protect the integrity of our Services.
  • Dispute Resolution: Data relevant to unresolved disputes, claims, or legal proceedings will be retained until the matter is fully resolved.
5.2 Backup and Archival

We may retain backup copies of certain information for a limited period for system recovery, auditing, or disaster recovery purposes. Aggregated or anonymized data that no longer identifies you may be retained indefinitely for analytical and service improvement purposes.

6. How We Protect Your Information

Protecting your personal information is a priority for us. We have implemented reasonable and appropriate security measures designed to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

Our security practices include:

  • Encryption of Data Transmissions: We protect information exchanged between your device and our servers using industry-standard encryption protocols (such as HTTPS/TLS).
  • Strict Access Management: Only authorized employees who need to access personal information for legitimate business purposes are granted permission, and all such access is subject to monitoring.
  • Regular Security Assessments: We routinely review our systems for vulnerabilities and potential threats, and we update our security practices as needed.
  • Employee Training: Our team members receive training on data protection and security best practices to ensure they understand their responsibilities.
  • Data Minimization: We limit the collection and retention of personal information to what is strictly necessary for the purposes described in this Policy.

Despite our efforts, no security measures are perfect or impenetrable. We cannot guarantee that information transmitted over the internet or stored on our systems will be absolutely secure. You should also take steps to protect your information, such as keeping your login credentials confidential and avoiding sharing sensitive data in public areas of the Service.

If we detect a security incident that affects your personal information, we will take appropriate action and notify you as required by applicable laws. If you have any security concerns or suspect unauthorized access to your account, please contact us immediately through the channels provided in the "Contact Us" section.

7. How to Delete Your Account Information

You may request to delete your account and the Personal Data associated with it at any time. To initiate this process, log in to your account, navigate to your account settings, and follow the instructions for account deletion. Once your request is submitted, your account will be deactivated, and your profile, posts, and other content you have created will no longer be visible on the Services. Please be aware that reactivation will not be possible once the deletion is complete.

Please keep in mind:

  • Information that other users have shared about you—such as messages they sent or posts they made—will not be deleted as part of this process, as it is not part of your account.
  • We may retain certain data where required by law, or for legitimate purposes such as fraud prevention, dispute resolution, or regulatory compliance.
  • Backup copies may be kept temporarily for system recovery, auditing, or other lawful purposes. Additionally, cached or archived versions of content may remain accessible through third-party search engines or other sites that have indexed them; you may need to contact those third parties directly to request removal, subject to their own policies.

If you need help with the deletion process or have any questions, please reach out to us at happybuata@gmail.com.

8. Third-Party Services and Websites

Our Services may contain links to external websites, apps, or platforms that are not operated or controlled by us. Please be aware that this Privacy Policy does not apply to the data practices of those third parties. Once you leave our Service or interact with a third-party integration, any information you provide will be governed by that third party's own privacy policies and terms.

We encourage you to review the privacy policies of any third-party websites or services you visit or use. We do not endorse, control, or assume any responsibility for the content, security, or privacy practices of these external platforms. Your interactions with third-party services are at your own risk.

9. Children’s Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from minors. If we discover that we have inadvertently collected such data, we will take prompt steps to delete it and deactivate the associated account.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at happybuata@gmail.com. We will assist you in reviewing, deleting, or managing your child's data.

We are committed to protecting children's privacy and complying with all applicable child protection laws in the regions where we operate. In cases where parental consent is required by law, we will not process a minor's personal data without obtaining verifiable permission from a parent or legal guardian.

For more detailed information, please refer to the Child Safety Policy.

10. Your Privacy Rights

Depending on where you live and the data protection laws that apply to you, you may have certain rights regarding your Personal Data. These rights may include:

  • Access Your Data: You can ask us whether we are processing your Personal Data and request a copy of the information we hold about you.
  • Transfer Your Data: You may request that we provide your Personal Data in a structured, commonly used, and machine-readable format, or transmit it directly to another controller where technically feasible.
  • Delete Your Data: You may request the deletion of your Personal Data, subject to certain legal exceptions that may require us to retain it.
  • Correct Your Data: If you believe any information we hold about you is inaccurate, incomplete, or outdated, you may ask us to update or correct it.
  • Restrict or Object to Processing: You may ask us to limit or stop processing your Personal Data in specific circumstances.
  • Withdraw Consent: Where we rely on your consent to process your data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
  • Opt Out of Automated Decisions: You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects on you, except where necessary for providing our Services or where you have explicitly consented.
  • Non-Discrimination: We will not treat you differently for exercising your privacy rights. This means we will not deny you services, charge different rates, or provide a lower level of service simply because you have made a privacy-related request.

To exercise any of these rights, please contact us at happybuata@gmail.com. Please note that these rights may not be absolute and are subject to applicable legal exceptions—we may need to retain certain information for security, legal, or operational reasons. We will respond to your request in accordance with applicable law, and if you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

11. Updates to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other relevant factors. If we make significant changes, we will notify you in advance through in-app notifications, email, or other suitable channels. The updated version will always show a revised "Last Updated" date at the top of this Policy. By continuing to use our Services after the changes become effective, you acknowledge and agree to the updated terms.

12. Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy or how we handle your information, please don't hesitate to reach out. You can contact us through any of the following channels:

  • Email: happybuata@gmail.com
  • In-App Support: You can reach us directly through the "Help" or "Feedback" options available within the Andu app.

We will respond to your inquiry as quickly as possible and do our best to assist you.