HeyPocket Trip
Last updated: 29 October 2026
This policy explains what information HeyPocket Trip (“we”) collects, how we use it, who can see it and how you can manage it.
1. Information we collect
Account details: your email address, display name, profile photo and your password, which is stored in hashed form (we cannot see the original).
Content you create: trips, schedules, places and their notes, notes, packing lists, expenses, saved places, uploaded photos and links you add, and the booking status, booking numbers and booking screenshots you keep in the booking list.
Usage: when you last used the app, which days you used it, roughly for how long, your language setting and your device's time zone (used to get a rough idea of which country or region our users are in).
Technical data: a cookie that keeps you signed in. For security and troubleshooting, the server may temporarily keep access logs (such as IP address and browser type).
Location: only when you tap “Distance from me” and allow your browser or the HeyPocket Trip app to use it. Your location is read on your device to work out the distance and is not uploaded or stored by us.
Offline copies: so you can see your trips without a connection, the trips, place details and photos you have viewed are kept on your own device. They are removed when you sign out or delete your account.
Sign in with Apple: Apple gives us an account number used only for this app, your email (an Apple relay address if you chose Hide My Email) and the name you agree to share, to create and sign in to your account. When you delete your account, we ask Apple to revoke the sign-in.
Trip reminders (app only, off until you turn them on): we keep this phone's push token and time zone to send reminders before and during your trips in local time. They are deleted when you turn reminders off, sign out or delete your account.
2. How we use it
To provide and sync the app's features, and to let you and your companions view and edit a trip together.
To send verification codes to your email for signing up and resetting your password.
To keep accounts and the service secure and prevent abuse.
To run and improve the service, administrators may view trip content and usage, including schedules, places and the photos you upload. This is only for operations, troubleshooting, handling misuse and improving the product.
Administrators may keep a copy of a trip's schedule and places (without photos, notes, lists or expenses) to improve the service and prepare recommended content.
To produce overall statistics, such as how many users we have and which destinations are popular.
3. Who can see your content
By default only you can see a trip.
Companions you invite can view and edit that trip's schedule and attachments. Notes, packing lists and expenses are kept separately by each person and stay visible only to you unless you choose to sync them to your companions. Companions can read what you sync but cannot change it.
People who have a read-only share link from you can see the schedule and places, but not your photos, booking numbers, notes, lists or expenses.
Administrators may view it for the purposes described in the previous section.
For places you add, public details such as the name and location may be added to the shared place catalogue; your notes and photos are not.
4. Third-party services
Maps: we use Apple Maps, and OpenStreetMap when Apple Maps isn't available. Your device requests map images from them directly, so they may learn your IP address.
Booking links: tapping a booking button in place details opens a partner site such as Trip.com. The link carries our affiliate ID (used to calculate commission) but not your account or any personal information. We only count how many times each button is tapped, not who tapped it. What you do and book on the partner's site is covered by its own privacy policy.
Place search, weather and place descriptions: the keywords you search for and the location of a destination are sent by our server to the relevant service (for example Photon, Open-Meteo and Wikipedia) without your account details. Some place photos are loaded directly from the site that hosts them.
Email: your email address is passed to our email provider when a verification code is sent.
We do not sell your personal information or use it for advertising.
5. How long we keep it and how to delete it
We keep your content for as long as your account exists.
A deleted trip goes to the recycle bin first and can be restored; once permanently deleted from the recycle bin it cannot be recovered.
You can delete your account under Account → Account & security: the account and all its data are permanently deleted at once, including the trips you created (your companions can no longer open them), the notes, lists and expenses you wrote in other people's trips, and any copies of your trips kept by administrators.
You can also email trip@heypocket.my and ask us to delete it for you; we will handle it within a reasonable time.
6. Your rights
You can view and change your profile and content in the app at any time.
You can also email us to ask to access, correct, export or delete your personal information, or to withdraw your consent (after which you may not be able to keep using the service).
7. Security
Passwords are stored in hashed form, data is sent over an encrypted connection and only authorised administrators can open the admin area. No system is perfectly secure, so please do not store bank card numbers, ID numbers or similar sensitive details in a trip.
8. Children
The service is not intended for children under 13. If you are a minor, please use it with your guardian's consent.
9. Updates to this policy
We may update this policy and will change the date at the top of this page when we do.
10. Contact us
If you have any questions about this policy or your personal information, email trip@heypocket.my.
HeyPocket Money
Effective 30 October 2026
This policy explains how Linkco Enterprise ("we", "us") handles personal data in HeyPocket Money (the "Service"), in line with Malaysia's Personal Data Protection Act 2010 (PDPA). Questions: cs@heypocket.my.
1. What we collect
- Account details: your name, email address and password (stored only as a secure hash), and an optional profile photo.
- Sign in with Google or Apple: if you choose one, we receive and keep the account ID that provider gives us, your name, and your email address if the provider confirms it. We do not receive your Google or Apple password, and we do not keep their profile photos or access tokens.
- What you record: entries, income, bills, budgets, savings goals, ledger names, notes and receipt images.
- Shared ledgers (Pro): when you invite people to a ledger or join one, we keep who belongs to it. Invite links are stored only as one-way hashes.
- Bill reminders (Pro): if you turn on notifications, we keep the push address your browser or phone gives us for each device, and when we last sent to it.
- Sign-in and security: session and "stay signed in" cookies, and security logs such as failed sign-in attempts (network addresses are stored as one-way hashes), and the date you last used the Service.
- Usage analytics: a random visitor code, which pages are opened, device type (mobile or desktop), how you arrived (direct, search, social or another site) and which features are used. Analytics never include amounts, notes, names or email addresses.
- Emails: verification and password-reset codes we send you.
In guest mode, your records stay in your browser and are not sent to us. If you later create an account or sign in, you can choose to import them; they are then uploaded once and removed from the browser.
2. Why we use it
- To provide the Service: keep your records, sync them across your devices and show your figures.
- To send bill reminders you have turned on.
- To keep accounts secure: sign-in, verification codes, fraud and abuse prevention.
- To manage your plan, including the Pro trial.
- To improve the Service using anonymous usage analytics.
- To reply when you contact us.
We do not sell your personal data, use it for advertising, or read your records except when needed to fix a problem you report or when required by law.
3. Usage analytics
Analytics are on by default to help us understand which features are useful. You can turn them off at any time under Menu → Help & info → Usage analytics. If your browser sends a "Do Not Track" signal, we do not collect analytics. Analytics records are deleted after 90 days.
4. Cookies and device storage
- pocket_session — keeps you signed in during a visit.
- pocket_remember — keeps your device signed in for up to a year. Removed when you sign out.
- hpm_lang — remembers your language.
- hpm_oauth — protects a Google or Apple sign-in while it is in progress. Expires after 10 minutes.
- Browser storage for your theme, analytics choice, unsaved drafts and guest records.
We do not use third-party advertising or tracking cookies.
5. Who we share it with
- People in a shared ledger: members can see and add records in that ledger, including notes and receipt images. Members see each other's names; only the ledger owner sees members' email addresses. Your other ledgers stay private.
- Hosting and email: our web hosting and email provider (Hostinger) stores data on our behalf.
- Google and Apple: only if you choose to sign in with them. They see that you signed in to HeyPocket Money, under their own privacy policies.
- Push services: reminders are delivered through the push service your browser or phone uses (for example Google, Apple, Mozilla or Microsoft). The message we send through them is empty; your device then fetches the reminder text directly from us, so bill names and amounts do not pass through them.
Some of these providers' servers may be outside Malaysia; we use providers with appropriate safeguards. We may disclose data if required by law or to protect our users and the Service.
6. How long we keep it
- Account data and records: while your account exists. Deleted items stay in the recycle bin for 7 days.
- Usage analytics: 90 days.
- Reminder devices: until you turn notifications off, sign out of that device, or the device stops accepting them.
- Backups: kept for a limited period for recovery, then overwritten.
- When you delete your account, we delete your data, except copies in backups that expire on their normal schedule. Ledgers you own are deleted too, including for anyone you shared them with. Records you added to someone else's shared ledger stay in that ledger.
7. Your rights
Under the PDPA you can ask to access or correct your personal data, withdraw consent, or limit how we process it. You can edit most details in the Service, export your records (Pro), turn off analytics, and delete your account yourself under Menu → profile photo → Delete account. We reply within 21 days.
8. Security
We use encrypted connections (HTTPS), hashed passwords, private storage for receipts, and access controls. No system is perfectly secure, so please use a strong, unique password.
9. Children
The Service is not intended for children under 13.
10. Changes
We may update this policy. Significant changes will be announced in the Service or by email. The date at the top shows the latest version.
11. Contact
Linkco Enterprise · cs@heypocket.my
HeyPocket Trip
最后更新: 2026 年 10 月 29 日
这份政策说明 HeyPocket Trip（以下称“我们”）收集哪些信息、怎么使用、谁能看到，以及你可以怎么管理它们。
一、我们收集哪些信息
账号信息：邮箱、昵称、头像，以及加密后保存的密码（我们看不到你的密码原文）。
你创建的内容：行程、日程、地点和备注、便签、行李清单、账本、收藏的地点、上传的图片和添加的链接，以及预订清单里记下的预订状态、订单号和订单截图。
使用情况：最近一次使用的时间、哪些日子用过、大致的使用时长、语言设置，以及设备的时区（用来粗略了解用户在哪个国家或地区）。
技术信息：用来保持登录状态的 Cookie；为了安全和排查问题，服务器可能临时记录访问日志（例如 IP 地址和浏览器类型）。
位置：只有在你点“距我多远”并允许浏览器或 HeyPocket Trip App 使用位置时，才会在你的设备上读取位置用来计算距离，我们不会上传或保存它。
离线资料：为了没有网络时也能看行程，你看过的行程、地点资料和照片会存一份在你自己的设备上；退出登录或注销账号时会清掉。
用 Apple 登录：苹果会给我们一个只属于这个 App 的账号编号和你的邮箱（如果你选了“隐藏邮件地址”，就是苹果代转的地址），以及你同意提供的名字，用来建立和登录你的账号。注销账号时，我们会通知苹果解除授权。
行程提醒（只在 App 里，需要你自己打开）：会保存这台手机的推送编号和时区，用来在出发前和旅行中按当地时间发提醒；关掉提醒、退出登录或注销账号时删除。
二、我们怎么使用这些信息
提供和同步应用的各项功能，让你和同行者能一起查看、编辑行程。
给你的邮箱发送验证码，用于注册和找回密码。
保护账号和服务的安全，防止滥用。
为运营和改进服务，管理员可能查看行程内容和使用情况，包括日程、地点和你上传的图片。这只用于运营、排查问题、处理违规和改进产品。
管理员可能保留一份行程的日程和地点（不包含图片、便签、清单和账本），用于改进服务和整理推荐内容。
统计整体的使用情况，例如有多少用户、常去哪些目的地。
三、谁能看到你的内容
默认情况下，行程只有你自己能看到。
你邀请加入的同行者可以查看和编辑这趟行程的日程和资料；便签、行李清单和账本每人各记各的，默认只有你自己能看到，除非你选择同步给同行者。同步出去的内容，同行者只能看，不能修改。
你发出只读分享链接后，拿到链接的人可以看到日程和地点，看不到你的图片、订单号、便签、清单和账本。
管理员可以按上一节所说的目的查看。
你添加的地点，其名称、位置等公开信息可能收录进公共的地点资料；你的备注和图片不会被收录。
四、第三方服务
地图：使用 Apple 地图，暂时用不了时改用 OpenStreetMap。地图图片由你的设备直接向它们请求，对方可能因此获知你的 IP 地址。
预订链接：点地点详情里的预订按钮时，会打开 Trip.com 等合作网站，链接里带着我们的推广编号（用来计算佣金），不带你的账号或任何个人信息。我们只统计每个按钮被点了几次，不记录是谁点的。你在对方网站上的浏览和订单适用对方的隐私政策。
地点搜索、天气和地点介绍：你搜索的关键词、目的地的位置会由我们的服务器发给相应的服务（例如 Photon、Open-Meteo、维基百科），请求里不带你的账号信息。部分地点图片直接从图片所在的网站加载。
邮件：发送验证码时，你的邮箱地址会交给邮件服务商。
我们不出售你的个人信息，也不会把它用于广告投放。
五、保存多久，怎么删除
只要账号还在，我们就会保存你的内容。
删除的行程会先进入回收站，可以恢复；在回收站里永久删除后就无法找回。
你可以在“我的 → 账号与安全”里注销账号：账号和其中的全部数据会立即永久删除，包括你创建的行程（同行者也将无法再打开）、你写在别人行程里的便签、清单和账本，以及管理员保留的你的行程副本。
也可以发邮件到 trip@heypocket.my 让我们代为删除，我们会在合理的时间内处理。
六、你的权利
你可以随时在应用里查看和修改自己的资料与内容。
你也可以发邮件给我们，要求查询、更正、导出或删除你的个人信息，或撤回同意（撤回后可能无法继续使用本服务）。
七、安全
密码经过加密保存，数据传输使用加密连接，只有获得授权的管理员可以进入后台。不过没有任何系统是绝对安全的，请不要在行程里保存银行卡号、证件号等敏感信息。
八、未成年人
本服务不面向 13 岁以下的儿童。如果你是未成年人，请在监护人同意后使用。
九、政策的更新
我们可能更新这份政策，更新后会修改本页顶部的日期。
十、联系我们
对这份政策或你的个人信息有任何疑问，请发邮件到 trip@heypocket.my。
HeyPocket Money
生效日期：2026年10月30日
本政策说明 Linkco Enterprise（"我们"）如何依据马来西亚《2010年个人资料保护法令》(PDPA)，处理 HeyPocket Money（"本服务"）中的个人资料。如有疑问，请联系：cs@heypocket.my。
1. 我们收集哪些资料
- 账户资料：你的姓名、电邮地址和密码（仅以安全哈希值形式储存），以及可选的头像照片。
- 使用 Google 或 Apple 登录：如果你选择其中一种，我们会收到并保存该服务提供的账户编号、你的姓名，以及经对方确认的电邮地址。我们不会收到你的 Google 或 Apple 密码，也不会保存他们的头像照片或访问令牌。
- 你记录的内容：记录、收入、账单、预算、储蓄目标、账本名称、备注和收据图片。
- 共享账本 (Pro)：当你邀请他人加入账本或加入他人的账本时，我们会保存账本有哪些成员。邀请链接只以单向哈希值形式储存。
- 账单提醒 (Pro)：如果你开启通知，我们会为每台设备保存浏览器或手机提供的推送地址，以及上次发送的时间。
- 登录与安全：会话 Cookie 和"保持登录" Cookie，以及登录失败尝试等安全日志（网络地址以单向哈希值形式储存），以及你最后一次使用本服务的日期。
- 使用情况统计：一个随机访客代码、打开了哪些页面、设备类型（手机或电脑）、你是如何进入的（直接访问、搜索、社交媒体或其他网站），以及使用了哪些功能。统计数据绝不包含金额、备注、姓名或电邮地址。
- 电邮：我们发送给你的验证码和重设密码验证码。
在访客模式下，你的记录保留在你的浏览器中，不会发送给我们。如果你之后注册或登录，可以选择导入这些记录；它们会被上传一次，然后从浏览器中移除。
2. 我们为何使用这些资料
- 为了提供本服务：保存你的记录、在你的设备之间同步，并显示你的各项数字。
- 为了发送你已开启的账单提醒。
- 为了保障账户安全：登录、验证码、防范欺诈和滥用。
- 为了管理你的配套方案，包括 Pro 试用。
- 为了通过匿名的使用情况统计改进本服务。
- 为了在你联系我们时作出回复。
我们不会出售你的个人资料，不会将其用于广告，也不会查看你的记录，除非是为了修复你所报告的问题或法律要求。
3. 使用情况统计
使用情况统计默认开启，以帮助我们了解哪些功能有用。你可随时在菜单 → 帮助与说明 → 使用情况统计中将其关闭。如果你的浏览器发送"请勿追踪"(Do Not Track) 信号，我们就不会收集统计数据。统计记录会在 90 天后删除。
4. Cookie 与设备储存
- pocket_session——在你访问期间保持登录状态。
- pocket_remember——让你的设备保持登录最长一年。登出时会被移除。
- hpm_lang——记住你选择的语言。
- hpm_oauth——在使用 Google 或 Apple 登录的过程中提供保护，10 分钟后失效。
- 浏览器储存，用于保存你的主题、统计设置、未保存的草稿和访客记录。
我们不使用第三方广告 Cookie 或追踪 Cookie。
5. 我们与谁分享资料
- 共享账本的成员：成员可以查看和新增该账本中的记录，包括备注和收据图片。成员之间可以看到彼此的姓名；只有账本主人可以看到成员的电邮地址。你的其他账本仍然保密。
- 托管与电邮：我们的网站托管及电邮服务供应商 (Hostinger) 代表我们储存数据。
- Google 和 Apple：仅在你选择使用它们登录时。它们会知道你登录了 HeyPocket Money，并适用它们自己的隐私政策。
- 推送服务：提醒会通过你的浏览器或手机所使用的推送服务送达（例如 Google、Apple、Mozilla 或 Microsoft）。我们经由它们发送的消息是空的，你的设备随后直接向我们获取提醒内容，因此账单名称和金额不会经过这些服务。
部分供应商的服务器可能位于马来西亚境外；我们选用具备适当保障措施的供应商。如法律要求，或为保护我们的用户和本服务，我们可能会披露资料。
6. 我们保留资料多久
- 账户资料和记录：在你的账户存在期间保留。已删除的项目会在回收站中保留 7 天。
- 使用情况统计：90 天。
- 提醒设备：直到你关闭通知、在该设备登出，或该设备不再接收通知为止。
- 备份：为恢复用途保留一段有限的时间，之后会被覆盖。
- 当你删除账户时，我们会删除你的资料，但备份中的副本除外，这些副本会按其正常周期到期。你拥有的账本也会一并删除，包括你共享给其他人的账本。你在他人共享账本中新增的记录会保留在该账本中。
7. 你的权利
根据 PDPA，你可以要求查阅或更正你的个人资料、撤回同意，或限制我们处理资料的方式。你可以在本服务中编辑大部分资料、导出你的记录 (Pro)、关闭使用情况统计，也可以在 菜单 → 头像 → 删除账户 自行删除账户。我们会在 21 天内回复。
8. 安全
我们使用加密连接 (HTTPS)、经哈希处理的密码、收据专用的私密储存空间以及访问控制。没有任何系统是绝对安全的，因此请使用强度高且独一无二的密码。
9. 儿童
本服务不适用于未满 13 岁的儿童。
10. 政策变更
我们可能会更新本政策。重大变更将在本服务中或通过电邮公布。页面顶部的日期显示最新版本。
11. 联系我们
Linkco Enterprise · cs@heypocket.my
HeyPocket Trip
Dokumen HeyPocket Trip ini tersedia dalam Bahasa Inggeris dan Bahasa Cina sahaja.
Last updated: 29 October 2026
This policy explains what information HeyPocket Trip (“we”) collects, how we use it, who can see it and how you can manage it.
1. Information we collect
Account details: your email address, display name, profile photo and your password, which is stored in hashed form (we cannot see the original).
Content you create: trips, schedules, places and their notes, notes, packing lists, expenses, saved places, uploaded photos and links you add, and the booking status, booking numbers and booking screenshots you keep in the booking list.
Usage: when you last used the app, which days you used it, roughly for how long, your language setting and your device's time zone (used to get a rough idea of which country or region our users are in).
Technical data: a cookie that keeps you signed in. For security and troubleshooting, the server may temporarily keep access logs (such as IP address and browser type).
Location: only when you tap “Distance from me” and allow your browser or the HeyPocket Trip app to use it. Your location is read on your device to work out the distance and is not uploaded or stored by us.
Offline copies: so you can see your trips without a connection, the trips, place details and photos you have viewed are kept on your own device. They are removed when you sign out or delete your account.
Sign in with Apple: Apple gives us an account number used only for this app, your email (an Apple relay address if you chose Hide My Email) and the name you agree to share, to create and sign in to your account. When you delete your account, we ask Apple to revoke the sign-in.
Trip reminders (app only, off until you turn them on): we keep this phone's push token and time zone to send reminders before and during your trips in local time. They are deleted when you turn reminders off, sign out or delete your account.
2. How we use it
To provide and sync the app's features, and to let you and your companions view and edit a trip together.
To send verification codes to your email for signing up and resetting your password.
To keep accounts and the service secure and prevent abuse.
To run and improve the service, administrators may view trip content and usage, including schedules, places and the photos you upload. This is only for operations, troubleshooting, handling misuse and improving the product.
Administrators may keep a copy of a trip's schedule and places (without photos, notes, lists or expenses) to improve the service and prepare recommended content.
To produce overall statistics, such as how many users we have and which destinations are popular.
3. Who can see your content
By default only you can see a trip.
Companions you invite can view and edit that trip's schedule and attachments. Notes, packing lists and expenses are kept separately by each person and stay visible only to you unless you choose to sync them to your companions. Companions can read what you sync but cannot change it.
People who have a read-only share link from you can see the schedule and places, but not your photos, booking numbers, notes, lists or expenses.
Administrators may view it for the purposes described in the previous section.
For places you add, public details such as the name and location may be added to the shared place catalogue; your notes and photos are not.
4. Third-party services
Maps: we use Apple Maps, and OpenStreetMap when Apple Maps isn't available. Your device requests map images from them directly, so they may learn your IP address.
Booking links: tapping a booking button in place details opens a partner site such as Trip.com. The link carries our affiliate ID (used to calculate commission) but not your account or any personal information. We only count how many times each button is tapped, not who tapped it. What you do and book on the partner's site is covered by its own privacy policy.
Place search, weather and place descriptions: the keywords you search for and the location of a destination are sent by our server to the relevant service (for example Photon, Open-Meteo and Wikipedia) without your account details. Some place photos are loaded directly from the site that hosts them.
Email: your email address is passed to our email provider when a verification code is sent.
We do not sell your personal information or use it for advertising.
5. How long we keep it and how to delete it
We keep your content for as long as your account exists.
A deleted trip goes to the recycle bin first and can be restored; once permanently deleted from the recycle bin it cannot be recovered.
You can delete your account under Account → Account & security: the account and all its data are permanently deleted at once, including the trips you created (your companions can no longer open them), the notes, lists and expenses you wrote in other people's trips, and any copies of your trips kept by administrators.
You can also email trip@heypocket.my and ask us to delete it for you; we will handle it within a reasonable time.
6. Your rights
You can view and change your profile and content in the app at any time.
You can also email us to ask to access, correct, export or delete your personal information, or to withdraw your consent (after which you may not be able to keep using the service).
7. Security
Passwords are stored in hashed form, data is sent over an encrypted connection and only authorised administrators can open the admin area. No system is perfectly secure, so please do not store bank card numbers, ID numbers or similar sensitive details in a trip.
8. Children
The service is not intended for children under 13. If you are a minor, please use it with your guardian's consent.
9. Updates to this policy
We may update this policy and will change the date at the top of this page when we do.
10. Contact us
If you have any questions about this policy or your personal information, email trip@heypocket.my.
HeyPocket Money
Berkuat kuasa 30 Oktober 2026
Dasar ini menerangkan cara Linkco Enterprise ("kami") mengendalikan data peribadi dalam HeyPocket Money ("Perkhidmatan"), selaras dengan Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia. Pertanyaan: cs@heypocket.my.
1. Apa yang kami kumpul
- Butiran akaun: nama, alamat e-mel dan kata laluan anda (disimpan hanya sebagai cincangan selamat), serta foto profil pilihan.
- Log masuk dengan Google atau Apple: jika anda memilih salah satu, kami menerima dan menyimpan ID akaun yang diberikan oleh penyedia itu, nama anda, dan alamat e-mel anda jika penyedia mengesahkannya. Kami tidak menerima kata laluan Google atau Apple anda, dan tidak menyimpan foto profil atau token akses mereka.
- Apa yang anda rekodkan: catatan, pendapatan, bil, bajet, matlamat simpanan, nama lejar, nota dan imej resit.
- Lejar dikongsi (Pro): apabila anda menjemput orang ke lejar atau menyertai lejar, kami menyimpan senarai ahlinya. Pautan jemputan disimpan hanya sebagai cincangan sehala.
- Peringatan bil (Pro): jika anda menghidupkan pemberitahuan, kami menyimpan alamat tolak (push) yang diberikan oleh pelayar atau telefon anda bagi setiap peranti, dan masa terakhir kami menghantar kepadanya.
- Log masuk dan keselamatan: kuki sesi dan kuki "kekal log masuk", serta log keselamatan seperti percubaan log masuk yang gagal (alamat rangkaian disimpan sebagai cincangan sehala), serta tarikh terakhir anda menggunakan Perkhidmatan.
- Analitik penggunaan: kod pelawat rawak, halaman yang dibuka, jenis peranti (mudah alih atau desktop), cara anda tiba (terus, carian, media sosial atau laman lain) dan ciri yang digunakan. Analitik tidak sekali-kali merangkumi jumlah, nota, nama atau alamat e-mel.
- E-mel: kod pengesahan dan kod tetapan semula kata laluan yang kami hantar kepada anda.
Dalam mod tetamu, rekod anda kekal dalam pelayar anda dan tidak dihantar kepada kami. Jika anda kemudian membuat akaun atau log masuk, anda boleh memilih untuk mengimportnya; rekod itu dimuat naik sekali dan kemudian dibuang daripada pelayar.
2. Mengapa kami menggunakannya
- Untuk menyediakan Perkhidmatan: menyimpan rekod anda, menyegerakkannya merentas peranti anda dan memaparkan angka anda.
- Untuk menghantar peringatan bil yang telah anda hidupkan.
- Untuk memastikan akaun selamat: log masuk, kod pengesahan, pencegahan penipuan dan penyalahgunaan.
- Untuk mengurus pelan anda, termasuk percubaan Pro.
- Untuk menambah baik Perkhidmatan menggunakan analitik penggunaan tanpa nama.
- Untuk membalas apabila anda menghubungi kami.
Kami tidak menjual data peribadi anda, tidak menggunakannya untuk pengiklanan, dan tidak membaca rekod anda kecuali apabila perlu untuk membaiki masalah yang anda laporkan atau apabila dikehendaki oleh undang-undang.
3. Analitik penggunaan
Analitik dihidupkan secara lalai untuk membantu kami memahami ciri yang berguna. Anda boleh mematikannya pada bila-bila masa di bawah Menu → Bantuan & maklumat → Analitik penggunaan. Jika pelayar anda menghantar isyarat "Do Not Track" (Jangan Jejak), kami tidak mengumpul analitik. Rekod analitik dipadam selepas 90 hari.
4. Kuki dan storan peranti
- pocket_session — memastikan anda kekal log masuk semasa sesuatu lawatan.
- pocket_remember — memastikan peranti anda kekal log masuk sehingga setahun. Dibuang apabila anda log keluar.
- hpm_lang — mengingati bahasa anda.
- hpm_oauth — melindungi log masuk Google atau Apple semasa ia sedang berjalan. Tamat selepas 10 minit.
- Storan pelayar untuk tema anda, pilihan analitik, draf yang belum disimpan dan rekod tetamu.
Kami tidak menggunakan kuki pengiklanan atau penjejakan pihak ketiga.
5. Dengan siapa kami berkongsi
- Ahli lejar dikongsi: ahli boleh melihat dan menambah rekod dalam lejar itu, termasuk nota dan imej resit. Ahli dapat melihat nama satu sama lain; hanya pemilik lejar dapat melihat alamat e-mel ahli. Lejar anda yang lain kekal peribadi.
- Pengehosan dan e-mel: penyedia pengehosan web dan e-mel kami (Hostinger) menyimpan data bagi pihak kami.
- Google dan Apple: hanya jika anda memilih untuk log masuk dengan mereka. Mereka mengetahui bahawa anda log masuk ke HeyPocket Money, tertakluk pada dasar privasi mereka sendiri.
- Perkhidmatan tolak (push): peringatan dihantar melalui perkhidmatan tolak yang digunakan oleh pelayar atau telefon anda (contohnya Google, Apple, Mozilla atau Microsoft). Mesej yang kami hantar melalui mereka adalah kosong; peranti anda kemudian mengambil teks peringatan terus daripada kami, jadi nama dan jumlah bil tidak melalui mereka.
Pelayan sesetengah penyedia ini mungkin berada di luar Malaysia; kami menggunakan penyedia yang mempunyai perlindungan yang sewajarnya. Kami boleh mendedahkan data jika dikehendaki oleh undang-undang atau untuk melindungi pengguna kami dan Perkhidmatan.
6. Berapa lama kami menyimpannya
- Data akaun dan rekod: selagi akaun anda wujud. Item yang dipadam kekal dalam tong kitar semula selama 7 hari.
- Analitik penggunaan: 90 hari.
- Peranti peringatan: sehingga anda mematikan pemberitahuan, log keluar daripada peranti itu, atau peranti itu berhenti menerimanya.
- Sandaran: disimpan untuk tempoh terhad bagi tujuan pemulihan, kemudian ditulis ganti.
- Apabila anda memadam akaun anda, kami memadam data anda, kecuali salinan dalam sandaran yang tamat tempoh mengikut jadual biasanya. Lejar yang anda miliki turut dipadam, termasuk bagi sesiapa yang anda kongsikan. Rekod yang anda tambah dalam lejar dikongsi milik orang lain kekal dalam lejar itu.
7. Hak anda
Di bawah PDPA, anda boleh meminta untuk mengakses atau membetulkan data peribadi anda, menarik balik persetujuan, atau mengehadkan cara kami memprosesnya. Anda boleh menyunting kebanyakan butiran dalam Perkhidmatan, mengeksport rekod anda (Pro), mematikan analitik, dan memadam akaun anda sendiri di Menu → foto profil → Padam akaun. Kami akan membalas dalam tempoh 21 hari.
8. Keselamatan
Kami menggunakan sambungan yang disulitkan (HTTPS), kata laluan yang dicincang, storan peribadi untuk resit, dan kawalan akses. Tiada sistem yang selamat sepenuhnya, jadi sila gunakan kata laluan yang kukuh dan unik.
9. Kanak-kanak
Perkhidmatan ini tidak ditujukan untuk kanak-kanak di bawah umur 13 tahun.
10. Perubahan
Kami boleh mengemas kini dasar ini. Perubahan yang ketara akan diumumkan dalam Perkhidmatan atau melalui e-mel. Tarikh di bahagian atas menunjukkan versi terkini.
11. Hubungi
Linkco Enterprise · cs@heypocket.my