ONO CUAN Privacy Policy

This policy explains how PT Anugerah Kreasi Utama (“we”) collects, uses, stores and protects your personal data when you use the ONO CUAN app and onocuan.com, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

Data controller

PT Anugerah Kreasi Utama, NIB 2408260080503, Jl. Panjang No. 68, Rukan Graha Arteri Mas Kav. 73, Kedoya Selatan, Kebon Jeruk, West Jakarta 11520, Indonesia. Contact: [email protected], WhatsApp +62 858-9375-3152.

Data we collect

• Identity and account: WhatsApp number, full name, gender, member code, and who invited you (sponsor).
• Invitations: the WhatsApp number you enter on an onocuan.com invite page, with the inviter's code. It is kept for up to 30 days to match your sign-up.
• Transactions: product orders, airtime and bill payments, travel tickets, therapy bookings, balances, points (ONO Point), commissions and withdrawals.
• Delivery addresses: recipient name, phone and address for shipped products.
• Passenger data: for train, ship, flight and hotel bookings, the passenger names and the identity details the provider requires, such as national ID number or date of birth.
• Withdrawal account: bank name, account number and account holder when you withdraw a balance.
• Health data (ONO Terapi): your answers to the pre-session readiness form, such as body condition, complaint and relevant history. This is specific personal data. We process it only with your explicit consent on that form, and only the therapist and branch staff handling your booking can see it.
• Technical data: server access logs and basic device data needed to run and secure the service.

We do not sell your personal data.

How we use it

• To create and secure your account, including sign-in with a one-time code via WhatsApp.
• To process the transactions you request and send receipts or tickets.
• To record the affiliate network and calculate commissions, ONO Point, Missions, Achievements and Draws under the program rules.
• To match invitations, so you are placed under the person who invited you without typing a code.
• To prepare safe therapy sessions.
• To meet legal obligations, including bookkeeping and tax.
• To prevent fraud and abuse.

Legal bases

Performance of our agreement with you (the Terms), your consent (in particular for health data and invitations), legal obligations, and our legitimate interest in keeping the service secure.

Who receives data

Only as needed:

• Meta Platforms (WhatsApp), to send sign-in codes and service messages;
• PT Mahadata (our infrastructure provider), for OTP and file storage;
• travel and bill-payment partners (including Welfares and their suppliers: airlines, KAI, PELNI, hotels and billers), to issue tickets and process bills;
• ONO Terapi branches, for your booking;
• banks or payment providers, for payments and withdrawals;
• authorities, when the law requires.

Some providers, such as WhatsApp, may process data outside Indonesia with equivalent safeguards.

Retention

• Account data is kept while the account is active.
• Transaction and commission records are kept as bookkeeping and tax law requires (up to 10 years).
• Invite claims are deleted automatically after 30 days or when you sign up.
• Therapy health data stays with its booking and is not used for anything else.

Security

Data is encrypted in transit (HTTPS). Access is role-based, and access to sensitive data is logged.

Your rights

You have the right to:

• access your data and get a copy;
• correct inaccurate data;
• delete your data or account (see Data Deletion);
• withdraw consent;
• restrict or object to certain processing.

Contact [email protected] or WhatsApp +62 858-9375-3152 from your registered number. We respond within 3×24 hours.

Children

ONO CUAN membership is for people aged 18 and over.

Changes

We will announce material changes in the app or on this site before they take effect.