Privacy Policy
Effective Date: February 18, 2026 · Last Updated: February 18, 2026
This Privacy Policy explains how Calm Stoic, developed and operated by Neurakara Labs ("Neurakara Labs", "we", "us", or "our"), collects, uses, stores, shares, and protects your personal data when you use the Calm Stoic mobile application ("the App"). This policy is drafted in compliance with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022, "UU PDP"), Government Regulation No. 17 of 2025 on Child Online Protection, the European Union General Data Protection Regulation (GDPR) where applicable, and Google Play Store policies.
1. Data Controller
The data controller responsible for your personal data is:
For any questions regarding the processing of your personal data, you may contact our Data Protection Officer at dpo@calmstoic.com.
2. Definitions
In this Privacy Policy:
- "Personal Data" means any information relating to an identified or identifiable individual, as defined by Article 1(1) of UU PDP.
- "General Personal Data" means personal data such as full name, email address, and device identifiers.
- "Specific Personal Data" (Sensitive Data) means personal data requiring heightened protection, including health data, biometric data, children's data, and financial data, as defined by Article 4(2) of UU PDP.
- "Processing" means any operation performed on personal data, including collection, storage, modification, disclosure, transfer, and deletion.
- "AI Personas" means the artificial intelligence-powered virtual characters in the App (Fannia, Epictetus, Seneca, and Marcus Aurelius) that generate conversational responses using large language models.
3. Data We Collect
We collect the following categories of personal data. Under UU PDP, much of this data qualifies as Specific Personal Data due to its health-related and sensitive nature.
3.1 Account Information (General Personal Data)
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | Account creation, authentication, communication | Consent + Contract |
| Display name | Personalization within the App | Consent |
| Password (hashed) | Account security | Contract |
| Authentication method preference | Login (email, biometric, PIN) | Contract |
3.2 Chat & Conversation Data (Specific Personal Data)
| Data | Purpose | Legal Basis |
|---|---|---|
| Chat messages (text) | AI persona responses, memory building, personalization | Explicit Consent |
| Chat history (per session) | Contextual AI responses within a conversation | Explicit Consent |
| Session metadata (timestamps, duration) | Usage analytics, quality improvement | Legitimate Interest |
| Message embeddings (numerical vectors) | Semantic memory search for personalization | Explicit Consent |
| Images uploaded in chat (Sage tier) | Multimodal AI analysis | Explicit Consent |
3.3 Journal Data (Specific Personal Data)
| Data | Purpose | Legal Basis |
|---|---|---|
| Free-form journal text | Personal journaling, AI insights | Explicit Consent |
| Guided journal responses | Structured reflection exercises | Explicit Consent |
| Journal entry type (free, morning, evening, guided) | Feature personalization | Legitimate Interest |
| AI-generated journal insights | Reflective feedback | Explicit Consent |
3.4 Mood & Emotion Data (Specific Personal Data)
| Data | Purpose | Legal Basis |
|---|---|---|
| Daily mood check-ins (scale 1-5, emoji) | Mood tracking, pattern visualization | Explicit Consent |
| Emotion coordinates (valence & arousal, 0-1) | Emotional context for AI responses | Explicit Consent |
| Primary & secondary emotion labels | Emotion analysis, session context | Explicit Consent |
| Emotion source (manual, chat-derived, journal-derived) | Data attribution | Legitimate Interest |
3.5 AI Memory Data (Specific Personal Data)
The App's AI memory system extracts and stores the following from your interactions to provide increasingly personalized guidance:
| Memory Category | Description | Volatility |
|---|---|---|
| Boundaries | Topics you prefer to avoid | Instant update |
| Top of Mind | Current issues you're dealing with | High |
| Identity | Who you are (background, context) | Low |
| Personality | How you think and communicate | Low |
| Patterns & Coping | Behavioral triggers and strategies | Medium |
| Values & Goals | What matters to you | Medium |
| Growth & Timeline | Milestones and breakthroughs | Cumulative |
Memory consolidation occurs automatically via AI processing (nightly). Memories with low relevance (importance score below 0.2) are automatically archived after 90 days.
3.6 Assessment & Profile Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Onboarding assessment answers (challenges, life stage, triggers, preferences) | Philosopher recommendation, personalization | Consent |
| Preferred persona | Default chat companion | Consent |
| Goals | Personalized guidance | Consent |
| Notification preferences | Communication settings | Consent |
3.7 Subscription & Transaction Data (Specific Personal Data)
| Data | Purpose | Legal Basis |
|---|---|---|
| Subscription tier (Free, Premium, Sage) | Feature access control | Contract |
| Subscription status & expiration | Billing management | Contract |
| Transaction ID (from Google Play) | Payment verification | Contract + Legal Obligation |
| Stoic Seeds balance & transaction history | In-app economy | Contract |
We do not directly collect or store your payment card details. All payment processing is handled by Google Play and RevenueCat.
3.8 Device & Technical Data (General Personal Data)
| Data | Purpose | Legal Basis |
|---|---|---|
| Device model, OS, OS version | Compatibility, crash diagnostics | Legitimate Interest |
| App version | Feature availability, debugging | Legitimate Interest |
| IP address (hashed) | Security, rate limiting | Legitimate Interest |
| Firebase Cloud Messaging token | Push notifications | Consent |
| Crash reports and stack traces | App stability improvement | Legitimate Interest |
| Session identifiers (anonymous) | Analytics | Legitimate Interest |
3.9 Biometric Data (Specific Personal Data)
If you enable biometric authentication (fingerprint, face recognition), the biometric data itself is processed and stored exclusively on your device within its secure enclave (iOS Keychain / Android Keystore). We do not transmit, access, or store your biometric data on our servers. We only store a boolean flag indicating that biometric authentication is enabled for your account.
3.10 Usage & Analytics Data
We collect anonymized and pseudonymized usage events to improve the App, including:
- App lifecycle events (open, close, background, foreground)
- Feature usage (chat started, journal entry created, lesson completed, exercise completed)
- Navigation and screen views
- Quest and streak progress
- Onboarding completion steps
These events are associated with a pseudonymous user ID and do not contain the content of your messages, journal entries, or mood data.
4. How We Use Your Data
4.1 Providing the Service
- Generating AI persona responses based on your messages, emotional context, and memory
- Building and maintaining the AI memory system to personalize your experience over time
- Performing emotion analysis to adapt tone and recommendations
- Generating AI insights for journal entries
- Processing mood check-ins and displaying trends
- Managing your subscription and in-app economy (Stoic Seeds)
- Delivering push notifications (reminders, daily quotes, quest updates)
4.2 Safety & Crisis Detection
We operate a dual-layer safety system that analyzes message content to detect potential crisis situations (self-harm, suicidal ideation). This system:
- Uses keyword matching (Indonesian and English) as a fast pre-check
- Uses AI-based contextual analysis for nuanced detection
- Triggers an immediate compassionate response with crisis resources when confidence exceeds 75%
- Does not notify third parties or authorities — it provides resources directly to the user
Legal basis: Vital interests of the data subject (UU PDP Article 20(d); GDPR Article 6(1)(d) and Article 9(2)(c)).
4.3 Improvement & Analytics
- Analyzing aggregated, anonymized usage patterns to improve features
- Monitoring app performance and fixing crashes
- Conducting A/B testing for feature optimization
Legal basis: Legitimate interest.
4.4 Communication
- Sending service-related notifications (account verification, password reset, subscription updates)
- Responding to support inquiries
Legal basis: Contract performance + Consent.
5. AI Processing & Automated Decision-Making
Calm Stoic relies extensively on artificial intelligence. This section provides transparency about how AI processes your data, as required by UU PDP and GDPR.
5.1 AI Models Used
Your data is processed by third-party large language models (LLMs) via the OpenRouter API. We use multiple specialized models for different purposes:
| Function | Purpose | Data Sent |
|---|---|---|
| Conversational AI | Chat responses, journal insights, Ask AI | Current message, chat history (up to 10 messages), memory context, emotion state, persona instructions |
| Analysis AI | Emotion analysis, text extraction, summarization | Message text, recent context (3 messages) |
| Reasoning AI | Memory consolidation, breakthrough detection | Accumulated memories, interaction patterns |
| Embedding AI | Semantic memory search | Text content (converted to numerical vectors for similarity matching) |
| Multimodal AI | Image analysis (Sage tier only) | Uploaded images + text prompt |
The specific models used may change over time as we improve the service. All models are accessed through OpenRouter, Inc. (United States) as an intermediary API provider.
5.2 What Data is Sent to AI Providers
When you interact with AI personas, the following data may be included in the AI prompt:
- Your current message
- Recent chat history (up to 10 messages for context)
- Relevant AI memories (top 3 semantic matches + top 2 recent)
- Your current emotional state (valence, arousal, primary emotion)
- Persona personality and instructions (not your data)
- Conversation summary (for longer sessions)
- Images you upload (Sage tier, multimodal analysis only)
Your data is not used by AI model providers for training their models. We use API endpoints that contractually prohibit the use of input/output data for model training.
5.3 Automated Decision-Making
The App makes the following automated decisions based on your data:
- Emotion analysis: Automatically determines your emotional state from messages to adjust AI tone
- Crisis detection: Automatically flags potential crisis situations and overrides normal AI responses
- Memory consolidation: Automatically categorizes and prioritizes information from your conversations
- Memory decay: Automatically archives memories deemed less relevant over time
- Exercise recommendations: Suggests breathing or grounding exercises based on emotional state
- Quest generation: Creates personalized daily challenges based on your usage
Under UU PDP Article 10 and GDPR Article 22, you have the right to object to automated decision-making. See Section 9 (Your Rights) for details.
6. Third-Party Services & Data Sharing
We share your data with the following third-party service providers, solely for the purposes described. We do not sell your personal data to any third party.
| Service | Provider | Country | Data Shared | Purpose |
|---|---|---|---|---|
| AI Model API | OpenRouter, Inc. | United States | Chat messages, journal text, emotion data, images (Sage) | AI response generation |
| Subscription Management | RevenueCat, Inc. | United States | User ID, subscription status, transaction IDs | In-app purchase processing |
| Product Analytics | PostHog, Inc. | United States | Pseudonymous user ID, usage events, device info, IP hash | Product analytics and improvement |
| Crash Reporting | Google LLC (Firebase Crashlytics) | United States | Crash logs, stack traces, device info, user ID | App stability monitoring |
| Push Notifications | Google LLC (Firebase Cloud Messaging) | United States | FCM token, notification payload | Sending push notifications |
| Database & Auth | Supabase (self-hosted) | Indonesia (VPS) | All user data | Data storage, authentication |
Each third-party provider processes data under their own privacy policy and our data processing agreements:
- OpenRouter: https://openrouter.ai/privacy
- RevenueCat: https://www.revenuecat.com/privacy
- PostHog: https://posthog.com/privacy
- Firebase: https://firebase.google.com/support/privacy
7. Cross-Border Data Transfer
Your primary data is stored on our self-hosted servers in Indonesia. However, certain data is transferred to third-party service providers located in the United States, as detailed in Section 6.
In accordance with UU PDP and MOCI Regulation 20/2016, we ensure the following safeguards for cross-border data transfers:
- Contractual safeguards: We maintain data processing agreements with all third-party providers that include obligations equivalent to or exceeding the protections of UU PDP.
- Explicit consent: During account registration, you will be asked to provide explicit consent for the transfer of your data to third-party AI and analytics providers located outside Indonesia.
- Regulatory reporting: We report cross-border data transfers to the relevant Indonesian regulatory authority as required.
For EU/EEA users: Transfers to the United States are governed by Standard Contractual Clauses (SCCs) as adopted by the European Commission, or other applicable transfer mechanisms under GDPR Chapter V.
8. Data Retention
| Data Category | Retention Period | After Account Deletion |
|---|---|---|
| Account information | Duration of account | Deleted within 30 days |
| Chat messages | Duration of account | Deleted within 30 days |
| Journal entries | Duration of account | Deleted within 30 days |
| Mood & emotion data | Duration of account | Deleted within 30 days |
| AI memory data | Active memories: duration of account. Auto-archived after 90 days if importance < 0.2 | Deleted within 30 days |
| Message embeddings (vectors) | Duration of account | Deleted within 30 days |
| Subscription & transaction records | Duration of account + 5 years (legal/tax requirement) | Retained for legal compliance |
| Stoic Seeds transaction history | Duration of account + 1 year | Anonymized after deletion |
| Usage analytics (PostHog) | Up to 7 years (PostHog retention) | Pseudonymized; cannot be linked to deleted account |
| Crash reports (Firebase) | 90 days (Firebase default) | Automatically expired |
| Redis caches (conversation, semantic, response) | 1 hour / 30 minutes / 24 hours respectively | Auto-expired |
When you delete your account, we initiate a cascading deletion of all personal data from our databases within 30 days. Data that has already been transmitted to third-party providers is subject to their respective retention policies. Anonymized or aggregated data that cannot be used to identify you may be retained indefinitely for statistical purposes.
9. Your Rights
Under UU PDP (Articles 5-14) and GDPR (Articles 15-22), you have the following rights regarding your personal data:
9.1 Right to Information (UU PDP Art. 5; GDPR Art. 13-14)
You have the right to know what personal data we collect, how it is processed, and who has access to it. This Privacy Policy serves as our primary disclosure.
9.2 Right of Access (UU PDP Art. 6; GDPR Art. 15)
You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format (JSON) within 30 days of your request.
9.3 Right to Rectification (UU PDP Art. 7; GDPR Art. 16)
You may request correction of inaccurate or incomplete personal data. You can update your display name and profile information directly in the App. For other corrections, contact us.
9.4 Right to Deletion (UU PDP Art. 8; GDPR Art. 17)
You may request deletion of your personal data. You can delete your account through the App settings, which triggers a cascading deletion of all associated data. We will complete the deletion within 30 days, except where retention is required by law.
9.5 Right to Withdraw Consent (UU PDP Art. 9; GDPR Art. 7(3))
You may withdraw your consent for data processing at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal. You can withdraw consent by:
- Disabling specific features (e.g., AI memory, analytics) in App settings
- Deleting your account
- Contacting us at privacy@calmstoic.com
9.6 Right to Object to Automated Decision-Making (UU PDP Art. 10; GDPR Art. 22)
You have the right to object to decisions made solely based on automated processing, including AI-generated emotion analysis, memory consolidation, and crisis detection. If you object, we will review the automated decision with human involvement. Contact us to exercise this right.
9.7 Right to Restrict Processing (UU PDP Art. 11; GDPR Art. 18)
You may request that we limit the processing of your personal data in certain circumstances, such as while a rectification request is being processed or while an objection is being considered.
9.8 Right to Data Portability (UU PDP Art. 13; GDPR Art. 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON), and to request that we transmit this data to another service provider where technically feasible.
9.9 Right to Lodge a Complaint (UU PDP Art. 14)
If you believe your data protection rights have been violated, you may:
- Contact us at privacy@calmstoic.com
- File a complaint with the Indonesian Personal Data Protection Agency (Lembaga PDP) once operational
- For EU/EEA residents: File a complaint with your local Data Protection Authority
9.10 Right to Compensation (UU PDP Art. 12)
If you suffer damages due to a violation of your data protection rights, you are entitled to seek compensation in accordance with applicable law.
How to exercise your rights: Send a written request to privacy@calmstoic.com with the subject line "Data Subject Request". We will verify your identity and respond within 30 days. Requests are free of charge unless manifestly unfounded or excessive.
10. Data Security
We implement comprehensive technical and organizational measures to protect your personal data:
10.1 Encryption
- In transit: All data transmissions use HTTPS/TLS 1.2 or higher
- At rest (server): PostgreSQL database with disk-level encryption
- At rest (device): Local data stored in AES-256 encrypted Hive database
- Secrets: Authentication tokens and encryption keys stored in iOS Keychain / Android Keystore
10.2 Access Control
- Row-Level Security (RLS): PostgreSQL policies ensure users can only access their own data
- API authentication: JWT-based authentication with token expiry and refresh
- Rate limiting: Redis-based rate limiting to prevent abuse
- Input validation: All API inputs validated via Pydantic schemas
10.3 Infrastructure
- Self-hosted database infrastructure in Indonesia
- Regular security updates and patches
- Automated daily database backups with 7-day retention
- Environment-based API key management (keys not stored in code)
11. Data Breach Notification
In the event of a personal data breach, we will:
- Notify affected data subjects in writing within 3 x 24 hours of becoming aware of the breach, as required by UU PDP Article 46
- Notify the Indonesian Personal Data Protection Agency within the same timeframe
- Include the following in the notification: the nature of the data involved, when and how the breach occurred, remedial measures taken, and contact information for further inquiries
- For EU/EEA users: Notify the relevant supervisory authority within 72 hours as required by GDPR Article 33
12. Children's Privacy
Calm Stoic is intended for users aged 18 and above.
In compliance with Government Regulation No. 17 of 2025 on Child Online Protection, we implement the following measures:
- Age gate: Users must confirm they are 18 years or older during account registration
- No intentional collection: We do not knowingly collect personal data from individuals under 18
- Discovery & deletion: If we discover that we have collected data from a minor under 18 without appropriate parental consent, we will promptly delete all associated data
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@calmstoic.com and we will take steps to delete the information.
13. Cookies & Local Storage
The Calm Stoic mobile application does not use browser cookies. However, we use the following local storage mechanisms:
- Encrypted Hive database: Stores chat history, journal entries, and mood data locally for offline access
- Secure storage: Stores authentication tokens, PIN (encrypted), and encryption keys
- Shared preferences: Stores non-sensitive app settings (theme, language, notification preferences)
For our website (calmstoic.app), we do not use tracking cookies. We may use essential cookies for functionality (language preference).
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:
- We will update the "Last Updated" date at the top of this policy
- We will notify you via in-app notification or email for significant changes
- We will request renewed consent where required by law
- Continued use of the App after notification constitutes acceptance of the updated policy
15. Governing Law & Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Indonesia, particularly UU No. 27 Tahun 2022 (Personal Data Protection). Any disputes arising from this policy shall be resolved through the courts of Jakarta, Indonesia.
For EU/EEA residents, this policy also complies with the General Data Protection Regulation (EU) 2016/679, and you retain the right to lodge complaints with your local Data Protection Authority.
16. Contact Us
General privacy inquiries: privacy@calmstoic.com
Data Protection Officer: dpo@calmstoic.com
Data subject requests: privacy@calmstoic.com (subject: "Data Subject Request")
Mailing address: Neurakara Labs, Jakarta, Indonesia
Kebijakan Privasi
Tanggal Berlaku: 18 Februari 2026 · Terakhir Diperbarui: 18 Februari 2026
Kebijakan Privasi ini menjelaskan bagaimana Calm Stoic, yang dikembangkan dan dioperasikan oleh Neurakara Labs ("Neurakara Labs", "kami"), mengumpulkan, menggunakan, menyimpan, membagikan, dan melindungi data pribadi Anda saat menggunakan aplikasi seluler Calm Stoic ("Aplikasi"). Kebijakan ini disusun sesuai dengan Undang-Undang Perlindungan Data Pribadi Indonesia (UU No. 27 Tahun 2022, "UU PDP"), Peraturan Pemerintah No. 17 Tahun 2025 tentang Perlindungan Anak di Ruang Digital, Peraturan Perlindungan Data Umum Uni Eropa (GDPR) jika berlaku, dan kebijakan Google Play Store.
1. Pengendali Data
Pengendali data yang bertanggung jawab atas data pribadi Anda adalah:
Untuk pertanyaan mengenai pemrosesan data pribadi Anda, silakan hubungi Pejabat Perlindungan Data kami di dpo@calmstoic.com.
2. Definisi
Dalam Kebijakan Privasi ini:
- "Data Pribadi" berarti setiap informasi yang berkaitan dengan orang perseorangan yang teridentifikasi atau dapat diidentifikasi, sebagaimana didefinisikan dalam Pasal 1 ayat (1) UU PDP.
- "Data Pribadi Umum" berarti data pribadi seperti nama lengkap, alamat email, dan pengenal perangkat.
- "Data Pribadi Spesifik" (Data Sensitif) berarti data pribadi yang memerlukan perlindungan lebih tinggi, termasuk data kesehatan, data biometrik, data anak, dan data keuangan, sebagaimana didefinisikan dalam Pasal 4 ayat (2) UU PDP.
- "Pemrosesan" berarti setiap operasi yang dilakukan terhadap data pribadi, termasuk pengumpulan, penyimpanan, perubahan, pengungkapan, transfer, dan penghapusan.
- "Persona AI" berarti karakter virtual bertenaga kecerdasan buatan dalam Aplikasi (Fannia, Epictetus, Seneca, dan Marcus Aurelius) yang menghasilkan respons percakapan menggunakan model bahasa besar (large language models).
3. Data yang Kami Kumpulkan
Kami mengumpulkan kategori data pribadi berikut. Berdasarkan UU PDP, sebagian besar data ini termasuk Data Pribadi Spesifik karena sifatnya yang berkaitan dengan kesehatan dan sensitif.
3.1 Informasi Akun (Data Pribadi Umum)
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Alamat email | Pembuatan akun, autentikasi, komunikasi | Persetujuan + Kontrak |
| Nama tampilan | Personalisasi dalam Aplikasi | Persetujuan |
| Kata sandi (di-hash) | Keamanan akun | Kontrak |
| Preferensi metode autentikasi | Login (email, biometrik, PIN) | Kontrak |
3.2 Data Percakapan & Chat (Data Pribadi Spesifik)
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Pesan chat (teks) | Respons persona AI, pembangunan memori, personalisasi | Persetujuan Eksplisit |
| Riwayat chat (per sesi) | Respons AI kontekstual dalam percakapan | Persetujuan Eksplisit |
| Metadata sesi (waktu, durasi) | Analitik penggunaan, peningkatan kualitas | Kepentingan Sah |
| Embedding pesan (vektor numerik) | Pencarian memori semantik untuk personalisasi | Persetujuan Eksplisit |
| Gambar yang diunggah di chat (tier Sage) | Analisis AI multimodal | Persetujuan Eksplisit |
3.3 Data Jurnal (Data Pribadi Spesifik)
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Teks jurnal bebas | Penjurnalan pribadi, wawasan AI | Persetujuan Eksplisit |
| Respons jurnal terpandu | Latihan refleksi terstruktur | Persetujuan Eksplisit |
| Jenis entri jurnal | Personalisasi fitur | Kepentingan Sah |
| Wawasan jurnal yang dihasilkan AI | Umpan balik reflektif | Persetujuan Eksplisit |
3.4 Data Suasana Hati & Emosi (Data Pribadi Spesifik)
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Check-in suasana hati harian (skala 1-5, emoji) | Pelacakan suasana hati, visualisasi pola | Persetujuan Eksplisit |
| Koordinat emosi (valensi & arousal, 0-1) | Konteks emosional untuk respons AI | Persetujuan Eksplisit |
| Label emosi primer & sekunder | Analisis emosi, konteks sesi | Persetujuan Eksplisit |
| Sumber emosi (manual, dari chat, dari jurnal) | Atribusi data | Kepentingan Sah |
3.5 Data Memori AI (Data Pribadi Spesifik)
Sistem memori AI Aplikasi mengekstrak dan menyimpan informasi berikut dari interaksi Anda untuk memberikan panduan yang semakin personal:
| Kategori Memori | Deskripsi | Volatilitas |
|---|---|---|
| Batasan | Topik yang ingin Anda hindari | Pembaruan instan |
| Hal Terkini | Masalah yang sedang Anda hadapi | Tinggi |
| Identitas | Siapa Anda (latar belakang, konteks) | Rendah |
| Kepribadian | Cara Anda berpikir dan berkomunikasi | Rendah |
| Pola & Koping | Pemicu perilaku dan strategi | Sedang |
| Nilai & Tujuan | Apa yang penting bagi Anda | Sedang |
| Pertumbuhan & Garis Waktu | Pencapaian dan terobosan | Kumulatif |
Konsolidasi memori terjadi secara otomatis melalui pemrosesan AI (setiap malam). Memori dengan relevansi rendah (skor kepentingan di bawah 0,2) secara otomatis diarsipkan setelah 90 hari.
3.6 Data Asesmen & Profil
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Jawaban asesmen onboarding | Rekomendasi filsuf, personalisasi | Persetujuan |
| Persona yang disukai | Pendamping chat default | Persetujuan |
| Tujuan | Panduan yang dipersonalisasi | Persetujuan |
| Preferensi notifikasi | Pengaturan komunikasi | Persetujuan |
3.7 Data Langganan & Transaksi (Data Pribadi Spesifik)
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Tier langganan (Free, Premium, Sage) | Kontrol akses fitur | Kontrak |
| Status langganan & kedaluwarsa | Manajemen penagihan | Kontrak |
| ID Transaksi (dari Google Play) | Verifikasi pembayaran | Kontrak + Kewajiban Hukum |
| Saldo Stoic Seeds & riwayat transaksi | Ekonomi dalam aplikasi | Kontrak |
Kami tidak secara langsung mengumpulkan atau menyimpan detail kartu pembayaran Anda. Semua pemrosesan pembayaran ditangani oleh Google Play dan RevenueCat.
3.8 Data Perangkat & Teknis (Data Pribadi Umum)
| Data | Tujuan | Dasar Hukum |
|---|---|---|
| Model perangkat, OS, versi OS | Kompatibilitas, diagnostik kerusakan | Kepentingan Sah |
| Versi aplikasi | Ketersediaan fitur, debugging | Kepentingan Sah |
| Alamat IP (di-hash) | Keamanan, pembatasan laju | Kepentingan Sah |
| Token Firebase Cloud Messaging | Notifikasi push | Persetujuan |
| Laporan kerusakan dan stack trace | Peningkatan stabilitas aplikasi | Kepentingan Sah |
| Pengenal sesi (anonim) | Analitik | Kepentingan Sah |
3.9 Data Biometrik (Data Pribadi Spesifik)
Jika Anda mengaktifkan autentikasi biometrik (sidik jari, pengenalan wajah), data biometrik itu sendiri diproses dan disimpan secara eksklusif di perangkat Anda dalam secure enclave (iOS Keychain / Android Keystore). Kami tidak mengirim, mengakses, atau menyimpan data biometrik Anda di server kami. Kami hanya menyimpan tanda boolean yang menunjukkan bahwa autentikasi biometrik diaktifkan untuk akun Anda.
3.10 Data Penggunaan & Analitik
Kami mengumpulkan event penggunaan yang dianonimkan dan dipseudoanonimkan untuk meningkatkan Aplikasi, termasuk:
- Event siklus hidup aplikasi (buka, tutup, latar belakang, latar depan)
- Penggunaan fitur (chat dimulai, entri jurnal dibuat, pelajaran diselesaikan, latihan diselesaikan)
- Navigasi dan tampilan layar
- Progres quest dan streak
- Langkah penyelesaian onboarding
Event ini dikaitkan dengan ID pengguna pseudonim dan tidak mengandung konten pesan, entri jurnal, atau data suasana hati Anda.
4. Bagaimana Kami Menggunakan Data Anda
4.1 Menyediakan Layanan
- Menghasilkan respons persona AI berdasarkan pesan, konteks emosional, dan memori Anda
- Membangun dan memelihara sistem memori AI untuk mempersonalisasi pengalaman Anda dari waktu ke waktu
- Melakukan analisis emosi untuk menyesuaikan nada dan rekomendasi
- Menghasilkan wawasan AI untuk entri jurnal
- Memproses check-in suasana hati dan menampilkan tren
- Mengelola langganan dan ekonomi dalam aplikasi (Stoic Seeds)
- Mengirimkan notifikasi push (pengingat, kutipan harian, pembaruan quest)
4.2 Keselamatan & Deteksi Krisis
Kami mengoperasikan sistem keselamatan dua lapis yang menganalisis konten pesan untuk mendeteksi potensi situasi krisis (menyakiti diri sendiri, ideasi bunuh diri). Sistem ini:
- Menggunakan pencocokan kata kunci (Bahasa Indonesia dan Inggris) sebagai pemeriksaan cepat
- Menggunakan analisis kontekstual berbasis AI untuk deteksi yang lebih bernuansa
- Memicu respons penuh empati dengan sumber daya krisis ketika kepercayaan melebihi 75%
- Tidak memberi tahu pihak ketiga atau otoritas — sistem menyediakan sumber daya langsung kepada pengguna
Dasar hukum: Kepentingan vital subjek data (UU PDP Pasal 20 huruf d; GDPR Pasal 6(1)(d) dan Pasal 9(2)(c)).
4.3 Peningkatan & Analitik
- Menganalisis pola penggunaan agregat dan anonim untuk meningkatkan fitur
- Memantau kinerja aplikasi dan memperbaiki kerusakan
- Melakukan pengujian A/B untuk optimasi fitur
Dasar hukum: Kepentingan sah.
4.4 Komunikasi
- Mengirimkan notifikasi terkait layanan (verifikasi akun, pengaturan ulang kata sandi, pembaruan langganan)
- Menanggapi pertanyaan dukungan
Dasar hukum: Pelaksanaan kontrak + Persetujuan.
5. Pemrosesan AI & Pengambilan Keputusan Otomatis
Calm Stoic sangat bergantung pada kecerdasan buatan. Bagian ini memberikan transparansi tentang bagaimana AI memproses data Anda, sebagaimana diwajibkan oleh UU PDP dan GDPR.
5.1 Model AI yang Digunakan
Data Anda diproses oleh model bahasa besar (LLM) pihak ketiga melalui API OpenRouter. Kami menggunakan beberapa model khusus untuk tujuan yang berbeda:
| Fungsi | Tujuan | Data yang Dikirim |
|---|---|---|
| AI Percakapan | Respons chat, wawasan jurnal, Ask AI | Pesan saat ini, riwayat chat (hingga 10 pesan), konteks memori, keadaan emosi, instruksi persona |
| AI Analisis | Analisis emosi, ekstraksi teks, ringkasan | Teks pesan, konteks terkini (3 pesan) |
| AI Penalaran | Konsolidasi memori, deteksi terobosan | Memori akumulasi, pola interaksi |
| AI Embedding | Pencarian memori semantik | Konten teks (diubah menjadi vektor numerik) |
| AI Multimodal | Analisis gambar (tier Sage saja) | Gambar yang diunggah + prompt teks |
5.2 Data yang Dikirim ke Penyedia AI
Saat Anda berinteraksi dengan persona AI, data berikut dapat disertakan dalam prompt AI:
- Pesan Anda saat ini
- Riwayat chat terkini (hingga 10 pesan untuk konteks)
- Memori AI yang relevan (3 kecocokan semantik teratas + 2 terbaru)
- Keadaan emosional Anda saat ini (valensi, arousal, emosi primer)
- Kepribadian dan instruksi persona (bukan data Anda)
- Ringkasan percakapan (untuk sesi yang lebih panjang)
- Gambar yang Anda unggah (tier Sage, analisis multimodal saja)
Data Anda tidak digunakan oleh penyedia model AI untuk melatih model mereka.
5.3 Pengambilan Keputusan Otomatis
Aplikasi membuat keputusan otomatis berikut berdasarkan data Anda:
- Analisis emosi: Secara otomatis menentukan keadaan emosional Anda dari pesan untuk menyesuaikan nada AI
- Deteksi krisis: Secara otomatis menandai potensi situasi krisis dan mengganti respons AI normal
- Konsolidasi memori: Secara otomatis mengkategorikan dan memprioritaskan informasi dari percakapan Anda
- Peluruhan memori: Secara otomatis mengarsipkan memori yang dianggap kurang relevan seiring waktu
- Rekomendasi latihan: Menyarankan latihan pernapasan atau grounding berdasarkan keadaan emosional
- Pembuatan quest: Membuat tantangan harian yang dipersonalisasi berdasarkan penggunaan Anda
Berdasarkan UU PDP Pasal 10 dan GDPR Pasal 22, Anda memiliki hak untuk menolak pengambilan keputusan otomatis. Lihat Bagian 9 (Hak Anda) untuk detail.
6. Layanan Pihak Ketiga & Pembagian Data
Kami membagikan data Anda dengan penyedia layanan pihak ketiga berikut, semata-mata untuk tujuan yang dijelaskan. Kami tidak menjual data pribadi Anda kepada pihak ketiga mana pun.
| Layanan | Penyedia | Negara | Data yang Dibagikan | Tujuan |
|---|---|---|---|---|
| API Model AI | OpenRouter, Inc. | Amerika Serikat | Pesan chat, teks jurnal, data emosi, gambar (Sage) | Pembuatan respons AI |
| Manajemen Langganan | RevenueCat, Inc. | Amerika Serikat | ID pengguna, status langganan, ID transaksi | Pemrosesan pembelian dalam aplikasi |
| Analitik Produk | PostHog, Inc. | Amerika Serikat | ID pengguna pseudonim, event penggunaan, info perangkat, hash IP | Analitik produk dan peningkatan |
| Pelaporan Kerusakan | Google LLC (Firebase Crashlytics) | Amerika Serikat | Log kerusakan, stack trace, info perangkat, ID pengguna | Pemantauan stabilitas aplikasi |
| Notifikasi Push | Google LLC (Firebase Cloud Messaging) | Amerika Serikat | Token FCM, payload notifikasi | Pengiriman notifikasi push |
| Database & Autentikasi | Supabase (self-hosted) | Indonesia (VPS) | Semua data pengguna | Penyimpanan data, autentikasi |
7. Transfer Data Lintas Batas
Data utama Anda disimpan di server yang kami kelola sendiri di Indonesia. Namun, data tertentu ditransfer ke penyedia layanan pihak ketiga yang berlokasi di Amerika Serikat, sebagaimana dirinci di Bagian 6.
Sesuai dengan UU PDP dan Peraturan Menkominfo No. 20/2016, kami memastikan perlindungan berikut untuk transfer data lintas batas:
- Perlindungan kontraktual: Kami memiliki perjanjian pemrosesan data dengan semua penyedia pihak ketiga.
- Persetujuan eksplisit: Saat pendaftaran akun, Anda akan diminta untuk memberikan persetujuan eksplisit untuk transfer data.
- Pelaporan regulasi: Kami melaporkan transfer data lintas batas kepada otoritas regulasi Indonesia yang berwenang sesuai ketentuan.
8. Retensi Data
| Kategori Data | Periode Retensi | Setelah Penghapusan Akun |
|---|---|---|
| Informasi akun | Selama akun aktif | Dihapus dalam 30 hari |
| Pesan chat | Selama akun aktif | Dihapus dalam 30 hari |
| Entri jurnal | Selama akun aktif | Dihapus dalam 30 hari |
| Data suasana hati & emosi | Selama akun aktif | Dihapus dalam 30 hari |
| Data memori AI | Memori aktif: selama akun aktif. Otomatis diarsipkan setelah 90 hari jika kepentingan < 0,2 | Dihapus dalam 30 hari |
| Embedding pesan (vektor) | Selama akun aktif | Dihapus dalam 30 hari |
| Catatan langganan & transaksi | Selama akun aktif + 5 tahun (kewajiban hukum/pajak) | Disimpan untuk kepatuhan hukum |
| Riwayat transaksi Stoic Seeds | Selama akun aktif + 1 tahun | Dianonimkan setelah penghapusan |
| Analitik penggunaan (PostHog) | Hingga 7 tahun | Dipseudoanonimkan |
| Laporan kerusakan (Firebase) | 90 hari | Kedaluwarsa otomatis |
| Cache Redis | 1 jam / 30 menit / 24 jam | Kedaluwarsa otomatis |
Ketika Anda menghapus akun, kami memulai penghapusan bertingkat semua data pribadi dari database kami dalam 30 hari.
9. Hak Anda
Berdasarkan UU PDP (Pasal 5-14) dan GDPR (Pasal 15-22), Anda memiliki hak-hak berikut terkait data pribadi Anda:
9.1 Hak atas Informasi
Anda berhak mengetahui data pribadi apa yang kami kumpulkan, bagaimana data tersebut diproses, dan siapa yang memiliki akses.
9.2 Hak Akses
Anda dapat meminta salinan semua data pribadi yang kami miliki tentang Anda dalam format JSON dalam 30 hari.
9.3 Hak Perbaikan
Anda dapat meminta koreksi data pribadi yang tidak akurat atau tidak lengkap.
9.4 Hak Penghapusan
Anda dapat meminta penghapusan data pribadi Anda melalui pengaturan Aplikasi. Penghapusan diselesaikan dalam 30 hari.
9.5 Hak Menarik Persetujuan
Anda dapat menarik persetujuan Anda untuk pemrosesan data kapan saja melalui pengaturan Aplikasi, menghapus akun, atau menghubungi kami di privacy@calmstoic.com.
9.6 Hak Menolak Pengambilan Keputusan Otomatis
Anda berhak menolak keputusan yang dibuat semata-mata berdasarkan pemrosesan otomatis. Hubungi kami untuk menggunakan hak ini.
9.7 Hak Membatasi Pemrosesan
Anda dapat meminta agar kami membatasi pemrosesan data pribadi Anda dalam keadaan tertentu.
9.8 Hak Portabilitas Data
Anda berhak menerima data pribadi Anda dalam format JSON yang dapat dibaca mesin.
9.9 Hak Mengajukan Keluhan
Hubungi kami di privacy@calmstoic.com atau ajukan keluhan ke Lembaga Perlindungan Data Pribadi Indonesia.
9.10 Hak Ganti Rugi
Anda berhak menuntut ganti rugi jika hak perlindungan data Anda dilanggar.
Cara menggunakan hak Anda: Kirim permintaan ke privacy@calmstoic.com dengan subjek "Permintaan Subjek Data". Kami akan merespons dalam 30 hari.
10. Keamanan Data
10.1 Enkripsi
- Dalam transit: HTTPS/TLS 1.2 atau lebih tinggi
- Saat diam (server): Database PostgreSQL dengan enkripsi tingkat disk
- Saat diam (perangkat): Database Hive terenkripsi AES-256
- Rahasia: iOS Keychain / Android Keystore
10.2 Kontrol Akses
- Row-Level Security (RLS): Pengguna hanya dapat mengakses data mereka sendiri
- Autentikasi API: JWT dengan kedaluwarsa dan pembaruan token
- Pembatasan laju: Redis-based rate limiting
- Validasi input: Skema Pydantic
10.3 Infrastruktur
- Infrastruktur database yang dikelola sendiri di Indonesia
- Pembaruan dan patch keamanan berkala
- Pencadangan database harian otomatis dengan retensi 7 hari
11. Notifikasi Pelanggaran Data
Dalam hal terjadi pelanggaran data, kami akan memberitahu subjek data yang terkena dampak dalam 3 x 24 jam sesuai UU PDP Pasal 46.
12. Privasi Anak
Calm Stoic ditujukan untuk pengguna berusia 18 tahun ke atas. Kami tidak secara sadar mengumpulkan data dari individu di bawah 18 tahun.
13. Cookie & Penyimpanan Lokal
Aplikasi seluler tidak menggunakan cookie browser. Situs web kami tidak menggunakan cookie pelacakan.
14. Perubahan Kebijakan Ini
Kami dapat memperbarui Kebijakan Privasi ini. Perubahan material akan diberitahukan melalui notifikasi dalam aplikasi atau email.
15. Hukum yang Berlaku & Yurisdiksi
Kebijakan ini diatur oleh hukum Republik Indonesia, khususnya UU No. 27 Tahun 2022. Sengketa diselesaikan melalui pengadilan di Jakarta, Indonesia.
16. Hubungi Kami
Pertanyaan privasi umum: privacy@calmstoic.com
Pejabat Perlindungan Data: dpo@calmstoic.com
Permintaan subjek data: privacy@calmstoic.com (subjek: "Permintaan Subjek Data")
Alamat surat: Neurakara Labs, Jakarta, Indonesia