Oyanu Privacy Policy
Oyanu is operated by PT AMCORE TECH INDONESIA (AmcoreAI), Jl. Cihampelas No.201A, Kelurahan Cipaganti, Kecamatan Coblong, Kota Bandung, West Java 40131, Indonesia ("we"), the controller of your personal data. This policy explains what we collect, why, who processes it, how long we keep it and how you can delete it. Contact: privacy@amcoreai.com.
1. What we collect
| Category | Details | Why |
|---|---|---|
| Account | User ID; the e-mail, phone number or basic Google account info (name, e-mail) of the sign-in method you choose; nickname, profile photo; app language; privacy settings (who can message / add you) | Sign-in, showing your profile, notifications in your language, applying your privacy settings |
| Location | Your device's precise location when you post a safety report (its coordinates are shown publicly with the report); the city you pick for a post and its coordinates; your location when you tap "suggest from my location" or look for nearby meetups (used on the device only to match a city or measure distance) | Placing reports on the map and tagging posts with a city. Only when you act; apart from live location sharing below, never in the background |
| Live location sharing (SOS) | Once you start sharing on the SOS page: your phone's latest position (coordinates and accuracy), updated about every 30 seconds, the friends you chose and the duration (1, 4 or 8 hours). While sharing, the app runs a foreground service with a persistent notification; it does not ask for background location permission. Only the latest position is kept, never a track | Letting the friends you chose see where you are in an emergency |
| Meetups | Title, description, time, city and meeting point (with coordinates) and group size of meetups you host; user IDs and nicknames of those who join | Providing travel-buddy meetups |
| Followed cities | Up to 5 cities you follow (name, country, coordinates); your device subscribes to their alert topics | Alerting you to new danger reports near those cities |
| Photos | Photos you take or pick and upload (posts, profile photo, messages). They are compressed and re-encoded on the device first, so location and other EXIF data are not uploaded. Photos in hostel reviews also have all metadata removed on your device before upload (including GPS location, device model and capture time); only the processed image is stored. Please don't upload photos that identify other people (faces, IDs, licence plates) unless they agreed. | Showing what you publish |
| Voice messages in chats | Voice clips you hold to record in a direct message (up to 60 seconds, encoded on the phone as AAC / .m4a, about 32 kbps mono) and their length. They are uploaded to Firebase Cloud Storage under dm/{chat ID}/{your user ID}/; the message stores only the storage path, never a public download link, and the rules let only the two members of that chat read them (no folder listing). Clips you play are cached in the app's cache on your phone. The microphone is used only while you hold to record | Sending and playing voice messages in direct messages |
| Your content | Posts, comments, likes, safety reports, direct messages (text and photos), friend requests, reports, your block list, travel ledger (visible to you only) | Community, messaging, friends and ledger features; reviewing reports |
| Hostels and reviews | Hostel entries you submit (name, city, approximate location, description); reviews you write (overall and category ratings, text, warning tags, photos); your "accurate / outdated" votes on reviews; reports you file; edit and deletion records; temporary counters used for rate limits (include your user ID, expire automatically) | Showing hostel listings and reviews, computing scores and ranking, moderating reports, preventing fake or bulk reviews. We process this to provide the review feature under our Terms; by posting a review you choose to make it public. |
| Device push token | Firebase Cloud Messaging token and your notification switches | Notifications for messages, comments, likes and friend requests |
| Crash logs | Stack trace, device model, OS and app version and a random installation ID when the app crashes (Firebase Crashlytics). No name, e-mail or user ID | Finding and fixing crashes |
| App integrity | Device and app integrity attestations from Firebase App Check / Google Play Integrity | Keeping unofficial clients from abusing our services |
| Text you send to the AI | The destination for AI tips and receipt text you paste for AI receipt scan | Forwarded by our server to Google Gemini to produce the answer; we don't store the text, only a call count for rate limiting |
| Receipt photos for AI receipt scan | The receipt or bill photo you take or pick for AI receipt scan (compressed to JPEG on your phone first) | Forwarded by our server to Google Gemini to read the amounts and items into your ledger; the photo is not stored on our servers or in cloud storage, we only keep a call count for rate limiting |
| City search | What you type in city search | Forwarded by our server to Google Places; not stored |
| Ad statistics | Impressions and clicks per ad per day, plus short-lived records (with your user ID, deleted automatically within a few days) that stop double counting | Measuring our own ad slots. We don't use the advertising ID and share nothing with ad networks |
| Smart deals clicks | How often each partner site in Smart deals is opened (per partner and day, without user IDs), and short-lived records to avoid counting repeats (with your user ID, deleted within days) | Knowing which recommendations help; commissions on affiliate links are settled by the affiliate platform |
| Live streaming | Your camera and microphone while you are live (sent in real time through Agora; not recorded or stored); live title, city tag and cover image; while watching, your presence (updated about every 30 seconds), danmaku and likes; the host's mute / remove decisions | Providing live streaming. Live streaming is currently available only to invited users and is not yet open to everyone. |
| 1:1 voice and video calls | Your camera and microphone during a call (sent in real time through Agora; not recorded or stored); call details: the caller's and callee's user IDs, the caller's nickname, the chat it belongs to, voice or video, the outcome (answered, declined, missed, busy, cancelled) and when it started, was answered and ended; after the call, a call entry in that chat (type, outcome and duration); the incoming-call notification is sent to the callee's devices through Firebase Cloud Messaging | Connecting calls, alerting you to incoming and missed calls, showing the call in your chat; an hourly limit on calls against harassment |
| Offline city packs | The scam alerts, emergency numbers and phrases you download for a city | Stored only on your phone for use without a connection; delete them any time |
| Nationality (optional) | The country you choose in Me → Settings → Nationality | Stored only on your phone, to show your country's foreign ministry line and embassy in SOS; never uploaded. Clear it any time |
| Low-fare calendar | The departure city, destination and month you type. Our server passes them to Travelpayouts to look up fares, without your account details; the answer to the same search is cached on the server for 6 hours. A short-lived counter that limits searches includes your user ID and resets after an hour | Showing the cheapest one-way fare for each day; a tapped day opens Aviasales in your browser through an affiliate link |
We don't sell your data, don't use the advertising ID and don't include third-party advertising or behavioural analytics SDKs.
2. Who can see it
- Other users: your nickname, photo, friend count, posts, comments and safety reports (with their location) are visible to signed-in users. Messages are visible to the two people in the chat only. Your e-mail, phone number, push tokens, ledger, block list and followed cities are readable by you only.
- Live location: only the friends you chose, and only while sharing lasts; nobody can read it afterwards.
- Meetups: the meetup, its place and the nicknames of the host and those who join are visible to signed-in users.
- Live streams: the video, title, cover, city, danmaku and viewers' nicknames are visible to signed-in users in the room.
- Calls: call audio, video and call details are visible to the two people on the call only; the call entry is part of the chat and visible to its two people only.
- Hostels and reviews: hostel entries are shown publicly once approved by a moderator. Your reviews, ratings, photos and warning tags are shown together with your nickname and profile photo to all signed-in users; votes are shown only as totals, never who voted.
- Moderators: see reports and can remove reported posts, comments and safety reports; they cannot read direct messages. Moderators can view and act on reported reviews and hostel entries.
- Processors: Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Remote Config, Crashlytics, App Check, Gemini API, Places API), stored in Google Cloud's Singapore region (asia-southeast1). Hostel and review data is likewise stored in Google Cloud's Singapore region (asia-southeast1). Audio and video of live streams and 1:1 calls are carried in real time by Agora, without passing through our servers and without being recorded. Exchange rates come from the European Central Bank via frankfurter.dev, without personal data. Fares and city names in the low-fare calendar come from Travelpayouts; our server sends it only the cities and the month, no personal data.
- International transfers: your data is stored in Google Cloud's Singapore region and may be processed outside your country. Google processes it as our processor under the Google Cloud Data Processing Addendum; for users in the EU and the UK, transfers rely on the standard contractual clauses incorporated in that addendum; for users in Indonesia, transfers are made in accordance with Article 56 of Law No. 27 of 2022.
- Legal requests: only when the law requires it.
3. How long we keep it
- Your account and content stay until you delete them or your account.
- Deleting your account removes it immediately; reports you filed stay for moderation without your identity; the deletion log keeps only a one-way hash and the time.
- Crash logs are kept for up to 90 days; rate-limit, ad and Smart deals counting records expire automatically.
- Your live location is deleted when sharing ends, when you stop it or when you sign out; anything left after it expires is removed by the server within 10 minutes.
- Meetups are archived 6 hours after they start (no more joins); the host can cancel (delete) them at any time.
- After a live ends, its record (title, cover, city, danmaku, like count) stays until the host deletes their account; audio and video are not stored.
- Call audio and video are not stored; call details stay until either person on the call deletes their account, and the call entry in a chat is deleted with that chat. Receipt photos are discarded once they are read and never stored.
- Voice messages stay until either member of the chat deletes their account, when that chat's messages, photos and voice files are all deleted from our servers; the copy cached on your phone goes when you clear the app's cache or uninstall it.
- Reviews and photos are kept until you delete them or your account. Deleted items disappear from public view immediately; copies in system backups are overwritten within 1 day, except where we must keep them by law or for an open dispute (deleted once it is resolved). If you delete your account, hostel entries you submitted may be kept without your identity so others' reviews still have a listing; your reviews, photos and votes are deleted with your account.
4. Your choices and rights
- Delete your account: in the app, Me → Settings → Delete account, or on the web at ranger-520.web.app/delete-account.
- Change: edit your nickname, photo, privacy and notification settings; delete your own posts, comments and reports; edit or delete your own hostel reviews and photos.
- Permissions: camera, location and notifications can be turned off in system settings; only the related features stop working.
- Access or correction: e-mail privacy@amcoreai.com; we reply within 30 days.
- Hostel owners or representatives: if you believe a listing or review is inaccurate, infringes your rights or contains personal data, report it in the app or e-mail privacy@amcoreai.com to request a correction or removal, stating who you are and why. Requests about your own personal data (correction, deletion or access) are handled within the time limits set by law; we reply to other requests within 30 days.
- Device backup: app data is excluded from cloud backup and phone-to-phone transfer.
5. Children
Oyanu is for people aged 13 and over (or older where local law requires). We don't knowingly collect children's data; contact us and we will delete it. Hostel reviews and photos can only be posted by users aged 18 or over.
6. Security
All traffic is encrypted (HTTPS/TLS); access is enforced by Firebase security rules; API keys live only in Secret Manager on the server, never in the app.
7. Changes
Changes are published here with a new effective date; important changes are announced in the app.
8. Website cookies and the affiliate script (Travelpayouts)
The home page and the add-friend page of this website use the Drive script of the affiliate marketing platform Travelpayouts. It turns travel-related links on the page into affiliate links: if you buy through them we may earn a commission, at no extra cost to you. These legal pages, the account-deletion page and the admin console do not load that script.
- Cookies and data: the script is loaded from Travelpayouts' servers (emrldtp.com) and may set or read cookies and record your IP address, browser details and the links you click, to count clicks and attribute purchases. Travelpayouts processes this data under its own privacy policy.
- Visitors in the EU, EEA and UK: the script is not loaded until you choose "Allow" (based on your browser's time zone).
- Everywhere else: it loads by default, and the notice at the bottom of those pages can turn it off.
- How to opt out: on the home page or the add-friend page, use "Cookie settings" at any time to turn it off or back on; your choice is stored only in this browser. You can also clear this site's cookies or block third-party cookies in your browser.
- The Oyanu app loads no third-party web scripts. Any affiliate links in the app only carry an affiliate id in the link address and are labelled as such.
9. Language
The English version of this document is the official text. For users in Indonesia, the Indonesian version prevails. All other language versions (including Chinese) are reference translations and may be machine-translated; if they differ from the English version, the English version prevails, or the Indonesian version for users in Indonesia. Where mandatory local law requires otherwise, that law applies.
Google Play and the Google Play logo are trademarks of Google LLC.