Pewarisgroup Privacy Policy

1. Introduction

Pewarisgroup ("we," "our," "the studio") respects the privacy of every user of the websites and mobile apps we operate. This policy explains what data we collect, why we use it, how we protect it, and your rights over your personal data — aligned with the Republic of Indonesia's Law Number 27 of 2022 on Personal Data Protection ("UU PDP").

This is the master policy. Each app we publish has its own annex describing exactly what data that specific app collects. App annex links are at the bottom of this document.

2. Data Controller Identity

• Name: Pewarisgroup (also known as Pewaris Group)
• Position: Technology division of the Pewaristoto family
• Location: Jakarta, DKI Jakarta, Indonesia
• Privacy email: [email protected]
• WhatsApp: +6281241750437

3. Scope

This policy applies to:

• The pewaris.dev website and all its subpages
• Mobile apps we publish on Google Play: Buku Mimpi Pewaris, Live Draw Pewaristoto, and Primbon & Weton Jawa
• Direct communication with you via email, WhatsApp, and our official social channels

4. What Data We Collect

Data collection differs per app:

Fully offline apps

Buku Mimpi Pewaris and Primbon & Weton Jawa run entirely on your device. They do not collect, send, or store any personal data on our servers. Searches, favourites, history, and calculation results remain on your device only.

Connected app

Live Draw Pewaristoto collects limited data for specific functions (push notifications and ad campaign measurement). See the Live Draw Privacy Annex for the full breakdown, including the TikTok Business SDK.

pewaris.dev website

Our servers record standard access logs (IP address, browser type, pages visited, access time) for operational purposes, security, and technical diagnostics. We do not use advertising cookies, cross-site tracking cookies, or behavioural analytics.

5. Legal Basis for Processing

Per UU PDP Article 20, we process your data under the following bases:

• Lawful, explicit, informed, and revocable consent
• Legitimate interest in operating the service
• Legal obligations binding on us as data controller

6. Purposes of Processing

• Providing and operating app features
• Sending notifications you explicitly opt into
• Measuring the effectiveness of our marketing campaigns (Live Draw only)
• Maintaining security, preventing abuse, and meeting legal obligations
• Improving and maintaining the service

7. Third-Party Recipients

We never sell or rent your personal data to anyone. We share limited data with the following categories of recipients, only as needed for service function:

• Push notification provider (Firebase Cloud Messaging or OneSignal) — to deliver notifications you've enabled
• TikTok Business SDK — only in the Live Draw app, for ad campaign measurement
• Technical infrastructure providers (web hosting, logging services) — acting as data processors on our instructions
• Competent authorities — when required by valid legal process

8. Cross-Border Data Transfers

Some third-party service providers (including TikTok and push notification providers) process data on servers outside Indonesia. Per UU PDP Article 56, we ensure the receiving country or organisation provides a level of personal data protection equal to or higher than required by UU PDP.

9. Data Retention

We keep data only as long as needed for legitimate purposes:

• Server access logs: maximum 90 days, then anonymised or deleted
• Push notification tokens: until the app is uninstalled or notifications are disabled
• TikTok ad attribution data: per TikTok's own retention policy
• Email/WhatsApp correspondence: as long as needed to handle inquiries, then archived or deleted

10. Your Rights Over Personal Data

Per UU PDP Articles 5–13, you have the following rights over your personal data:

• Get clear information about the data we process
• Access and obtain a copy of your personal data
• Correct or complete inaccurate data
• Delete or destroy your personal data
• Stop or limit processing
• Withdraw consent at any time
• Object to specific processing
• Data portability — request your data in a transferable format
• File a complaint with the Indonesian Personal Data Protection Authority

11. Children's Data

Our apps and website are not targeted at children under 13. We do not knowingly collect personal data from children. If you believe your child has provided personal data to us, contact us immediately for deletion.

12. Cookies and Similar Technologies

The pewaris.dev website does not use advertising cookies, third-party analytics cookies, or cross-site tracking technologies. Only minimal session cookies may be used for essential site function.

13. Relationship with Pewaristoto

Pewarisgroup is the technology division of the Pewaristoto family. For clarity: personal data collected by Pewarisgroup apps is not shared with the Pewaristoto platform. The two brands operate separate technical systems with no automatic data exchange between them.

14. Data Security

We apply reasonable technical and organisational security measures, including encryption of data in transit (HTTPS/TLS), internal access controls, and monitoring of security updates. No system is fully secure; if you suspect a data breach involving your information, contact us immediately.

15. Changes to This Policy

We may update this policy from time to time. Significant changes will be announced in-app or on this site before they take effect. The latest version is always available on this page with the current effective date shown at the top.

16. Contact Us

For questions, data-related requests, or privacy complaints:

• Email: [email protected]
• WhatsApp: +6281241750437
• Location: Jakarta, Indonesia

17. App Annexes

App-specific privacy details:

• Buku Mimpi Pewaris annex
• Live Draw Pewaristoto annex
• Primbon & Weton Jawa annex