Privacy notice

1. Who controls your information

Katalis Ekosistem Nusantara is the data controller for this ELSI working prototype. Contact cb@byken.id for privacy questions, corrections, or account-deletion requests.

2. Information we collect

Account registration collects your email address, Indonesian mobile number, password hash, full legal name, display name, birth date, base city or regency, legal-document acceptance, and technical security records. You may add an occupation, profile text, and learning preferences such as purposes, skills, interests, locations, delivery modes, level, and usual availability.

3. Why we use it

We use account information to authenticate you, operate the prototype, keep it secure, communicate about your account, and meet legal responsibilities. We use learning preferences to provide transparent recommendations and explain possible matches or gaps. We also use aggregated information to evaluate and improve the prototype.

4. What spaces receive

Your preferences are private and are not automatically given to an English space. Your display name may be member-facing when community functions are enabled. A space receives your full legal name or other protected profile information only when it has a stated need and you provide the required consent. MELJO sharing is separate and must be explicitly controlled by you.

5. Service providers and legal disclosure

We may use hosting, email, security, and technical service providers that process information under our instructions. We may disclose information when required by law or when reasonably necessary to protect people, rights, data, or the service. We do not sell learner personal information.

6. Cookies and sessions

ELSI uses an essential session cookie for sign-in security, form protection, comparison choices, and demonstration state. The prototype does not require advertising cookies.

7. Storage, security, and retention

Passwords are stored as one-way hashes. Verification and password-reset links are stored as token hashes and expire. We apply proportionate access and security controls, but no online system can promise absolute security. Account and operational records are kept while needed for the prototype, legal obligations, dispute handling, or security. Deletion may be delayed where another lawful retention need applies.

8. Your choices and rights

You may review and correct your profile and preferences. You may turn recommendations off or remove preference signals. You may ask about your information or request account deletion through cb@byken.id. We may need to verify your identity before completing a request.

9. Changes

We may update this notice as the prototype develops. Material changes will be published as a new version and may require renewed acceptance.