Privacy Policy
This policy follows Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP).
1. Who holds your data
LEGA acts as the Personal Data Controller.
Questions about your data can be raised through the Help menu in the app.
2. What we collect
You give us: your name, email and WhatsApp number; the session address and map pin if you allow it; address notes; the content of your conversations with the LEGA team; and any reviews you write.
Collected through use: order history, times, durations, statuses and price breakdowns; your last sign-in; and the location photograph, GPS and timestamps recorded by the therapist at check-in and check-out — not by your device.
We do NOT collect your card or payment details — payment is handled by a licensed payment provider and card numbers never touch LEGA’s systems. We do not track your location in the background, and we do not access your contacts, photos or device contents.
If you allow notifications, we also keep your device’s notification address (a push token). It is not a phone number and it does not identify you — it is a random code pointing at one app on one device, issued by the operating system, and it lasts only as long as you keep that permission.
3. What we use it for
Your name, number, address and pin are used to carry out your order; your email and password to sign you in. Both on the basis of performing our contract with you.
Order history and prices are kept as transaction records for tax and accounting — a legal obligation.
Conversation content is used to answer complaints and mediate disputes. Check-in evidence and contact-sharing screening rest on legitimate interest.
Your map pin is used to compute distance and the therapist’s route, on the basis of your consent. You may decline; an order can still be placed with a written address.
If you tick “Save this address” when booking, that address along with its note and map pin is kept on your account so your next order is a single tap — purely for convenience, on the basis of your consent. The order’s address is kept in your order history either way. You can view, name and delete saved addresses at any time under Account → Saved addresses; deleting one does not change your order history.
The device address is used for one thing: telling you about your own bookings — a therapist has accepted, payment has arrived, and anything else that needs you to act. The basis is your consent, given through the notification permission on your device and withdrawable at any time in its settings. We do not use it for marketing. Notification text deliberately names no service, no therapist and no address — only an order code, a time and an amount — because a notification is displayed on a lock screen, where anyone who sees your phone can read it.
4. Who can see your data
The therapist who accepts your order sees: the name you use in the app; the session address and map pin — only after they accept, never before; your WhatsApp number, to tell you when they will arrive — they may use it for that alone, and are forbidden from contacting you about anything else or after the order ends; the service, time and duration; and your average rating from previous therapists.
A therapist NEVER sees your email, your password, your order history with other therapists, or your conversations with the LEGA team.
The LEGA team sees order data and conversations as far as needed for support and mediation. A licensed payment provider receives what it needs to process payment. Authorities only where there is a valid legal basis.
We never sell your data, and we do not use it for third-party advertising.
If you allow notifications, the device address and the notification text pass through Expo (United States) and then Google (Firebase Cloud Messaging, on Android) or Apple (APNs) to reach your device — so that data leaves Indonesia. What they receive is limited to the device address and the notification text itself, which names no service, no therapist and no address.
5. You and the therapist cannot contact each other
There is no customer-to-therapist message channel anywhere in LEGA. Conversations are always between you and the LEGA team. This is a design decision, not a temporary limitation.
6. Security
The connection between the app and our servers is encrypted.
Passwords are stored hashed, never as plain text. The LEGA team cannot see your password.
Sensitive therapist data (national ID, bank account) is encrypted at rest and only ever displayed masked.
Staff access is limited by role and logged.
7. How long we keep it
Active account: for as long as your account exists.
Order history and payment records: 10 years, for accounting and tax obligations.
Support conversations: 2 years after the conversation is closed. Check-in evidence: 2 years, or until a dispute is settled.
If you delete your account: personal data is deleted; transaction records are kept in de-identified form to meet accounting obligations.
The in-app notification list: one year, then deleted automatically. The device notification address: until you sign out on that device, withdraw the permission, or remove the app.
8. Your rights under UU PDP
You have the right to know what we hold about you, to obtain a copy, to correct anything wrong, to delete your data and close your account, to withdraw consent at any time, to object to certain processing, and to complain to the data protection supervisory authority.
Make a request through the Help menu. We respond within 3 × 24 hours and complete it within 14 working days.
Some data cannot be deleted immediately where it is still needed for accounting, tax, or an ongoing dispute. Where that applies we tell you why and when it will be deleted.
9. Children
LEGA is for people aged 18 and over. We do not knowingly collect children’s data. If we learn of an account belonging to a child, we close it and delete the data.
10. Changes to this policy
Meaningful changes are announced in the app before they take effect. The version and effective date are always shown at the top.