Privacy Policy
MezaHub - Privacy Policy
PT Aplikasi Solusi Anak Bangsa ("MezaHub," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect through the MezaHub mobile application (the "App"), how we use and share it, and the choices and rights available to you.
By using the App, you agree to the collection and use of information as described in this Policy.
1. Information We Collect
a. Account Information
When you sign in with Google, we collect your name, email address, and Google account ID to create and manage your MezaHub account. You may also add or edit an in-app username.
b. Profile and Preference Information
- Homebase store selections (one or more arcade/store locations you choose)
- Notification preferences (for example, push categories and watched tags)
c. Voice Detector Usage
The App requests microphone access so the Voice Detector feature can analyze audio and match it against known cry patterns on your device. We do not store or transmit your raw audio recordings to our servers as part of normal Voice Detector use.
During the current launch, Voice Detector access is unlimited and no credit balance is required. We may record feature usage counts for operations and analytics, but not the raw audio; Section 1.h describes exactly what those counts contain.
d. User-Generated Content
When you post to Feeds ("Meza moments") or use the Market feature, we collect and store the content you submit, including photos, captions, machine/location tags, city/store tags, seller city, trade or auction terms, and timestamps. This content, along with your username, is visible to other users of the App. Marketplace users must provide a WhatsApp number so interested users can contact them about a listing; the number itself is not published in the listing.
e. Location Information
Manual location tags: store or city selections you make when posting to Feeds or setting your homebase.
Device location (if enabled): if you grant location permission, we may use your device's approximate or precise location to power features like nearby feed alerts or to suggest store locations near you. You can disable this at any time through your device settings.
f. Payment Information
No paid credit packages are currently available. If paid packages are re-enabled in the future, payment will be processed through a designated payment gateway/provider. We do not collect or store your full payment card, bank, or e-wallet account details - these are handled directly by the payment provider. We may receive confirmation of a future transaction (for example, package purchased, amount, date, and a transaction/reference ID) to update your account.
g. Device, Usage, and Advertising Data
We may automatically collect device information (device model, OS version), app version, crash logs, general usage/analytics data (for example, feature interactions), and advertising events to maintain, improve, and monetize the App. Advertising-enabled versions of the App use Google AdMob and Google's User Messaging Platform. Depending on your region, age treatment, device settings, and privacy choices, Google and its advertising partners may process advertising identifiers, approximate location derived from network information, device information, consent signals, ad interactions, and diagnostic data to select, deliver, measure, protect, and report advertising. Where required, the App asks for advertising consent before requesting ads and provides a Privacy choices entry point.
h. Feature Usage Measurement
So we can see which parts of the App are actually used, the App reports counts of feature activity to our servers — for example, that the Voice Detector, Tag List, Battle Helper, Z-Move, Type Chart, Superstar Info, Trainer ID, Feeds, or News & Events was opened, and that an action inside it was completed (such as a cry being recorded, a match being found, a lineup being searched for, or a Trainer ID card being saved).
These are counts and nothing else. We do not collect audio, the Pokémon a match returned, Trainer ID numbers, the tags or Pokémon you select, text you type, or the time of day — only a per-day total for each feature. The counts cannot be used to reconstruct what you did in a session.
The counts are sent with a random identifier the App generates on your device the first time it runs (an "install identifier"). We create it ourselves; it is not your Google account ID and not an advertising identifier, it is not shared with advertising partners, and it is destroyed when you uninstall the App or clear its data — reinstalling produces a new one. Because most MezaHub tools work without an account, these counts are collected whether or not you are signed in. When you are signed in, that day's activity is also associated with your account, so we can see how registered trainers use the App and help you when you contact support.
i. Push Notification Data
If you enable push notifications, we collect a device/notification token to deliver notifications for the categories you've opted into (for example, events, feed activity near your homebase, and watched tags).
j. Communications
If you contact us for support, we collect the information you provide in that communication (for example, email address and message content).
2. How We Use Your Information
We use the information described above to:
- Create and maintain your account;
- Operate core features (Voice Detector, Feeds, Market, and notifications);
- Show your posts and username to other users as part of the community feed;
- Enable Marketplace contact through WhatsApp after you give the required consent;
- Process future purchases and maintain accurate credit balances if billing is re-enabled;
- Display, measure, and protect advertising in advertising-enabled App versions;
- Send you push notifications for the categories you've enabled;
- Detect, prevent, and investigate fraud, abuse, invalid advertising activity, or violations of our Terms;
- Maintain, secure, debug, and improve the App;
- Comply with legal obligations.
3. Public Nature of Certain Content
Posts you share on Feeds (including your display username, photos, captions, and store/city tag) and listings on Market are visible to other users of the App. Do not include sensitive personal information in posts you intend to share publicly. Feed posts are automatically removed from the visible feed after 30 days, but may be retained in our systems for a limited period afterward for moderation, safety, and legal purposes, as described in Section 5.
4. How We Share Information
We do not sell your personal information. We may share information with:
- Service providers who help us operate the App, such as cloud hosting providers, Google (Sign-In, push notifications, consent management, and AdMob advertising), advertising partners selected through AdMob, and analytics/crash-reporting providers, subject to their applicable terms and privacy controls;
- Other users, limited to content you choose to make visible (for example, Feed posts, Market listings, and public username);
- A Marketplace user who starts the seller-contact flow, only to facilitate the WhatsApp conversation you authorized. Your number is kept out of the public listing and is not included in the normal account response;
- Legal and safety authorities, where required by law, to protect our rights, or to protect the safety of users or the public;
- A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same protections described in this Policy.
5. Data Retention
We retain your account information for as long as your account remains active. Your encrypted Marketplace WhatsApp contact is retained while Marketplace contact is enabled or until you ask us to remove it. Feed posts are removed from public view after 30 days but may be retained internally for a limited additional period for safety, fraud-prevention, and legal compliance purposes before permanent deletion. Feature usage counts (Section 1.h) are kept indefinitely as per-day totals, because they are aggregate figures about the App rather than about a person. The records that tie a feature to an install identifier or to an account are deleted after 12 months. You may request deletion of your account and associated data as described in Section 7.
6. Children's Privacy
MezaHub is not directed to children under the age of 13, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can delete it.
7. Your Rights and Choices
Depending on your jurisdiction (including under Indonesia's Personal Data Protection Law, UU PDP No. 27/2022), you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Request deletion of your account and associated personal data;
- Withdraw consent for optional data uses (for example, device location and push notifications) at any time via your device or in-app settings;
- Object to or restrict certain processing;
- Request a copy of your data in a portable format.
To exercise these rights, contact us at support@mezahub.id. We may need to verify your identity before completing certain requests. One limit is worth stating plainly: feature usage counts collected while you were signed out are tied only to an install identifier we cannot connect to you, so we are unable to locate or delete them individually. Clearing the App's data or uninstalling it retires that identifier, and the remaining per-day totals are aggregate figures that identify no one.
You can also manage many of these choices directly in the App:
- Notification preferences: toggle push categories in Settings.
- Location permission: manage via your device's app permission settings.
- Profile data: edit your username and homebase stores from your profile page.
8. Data Security
We use HTTPS for data in transit, access-controlled server-side processing, and encryption for sensitive Marketplace contact data. WhatsApp numbers are normalized and stored as authenticated AES-256-GCM ciphertext; the encryption key is kept outside the public website directory and is not returned in API responses. We also limit Marketplace contact access to authenticated users and do not place the number in public listing payloads. These measures are designed to protect information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
Our service providers (for example, cloud hosting providers and Google services) may process or store data in countries other than your own. Where this occurs, we take steps intended to ensure your information continues to receive an appropriate level of protection consistent with this Policy and applicable law.
10. Third-Party Links and Services
The App integrates with third-party services such as Google Sign-In, Google AdMob, Google's User Messaging Platform, push notification infrastructure, and payment infrastructure. Your use of those services is also governed by their own terms and privacy policies, which we encourage you to review. Google's privacy policy is available at policies.google.com/privacy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the App or other reasonable means. The Last Updated date at the top of this Policy indicates when it was last revised.
12. Contact Us
If you have questions or requests regarding this Privacy Policy or your personal data, contact us at:
support@mezahub.id
PT Aplikasi Solusi Anak Bangsa
Jl Meruya Ilir Raya blok B no 8, Meruya Utara, Kembangan, Jakarta Barat 11620