Privacy Policy
Last updated: October 2026
1. Information We Collect
We collect only the minimal ephemeral data necessary to calculate fair midpoints: participant display names, chosen transport modes, and temporary origin coordinates or selected landmarks. We never require emails, phone numbers, passwords, or social logins.
2. Cryptographic Protection & Anonymity
Participant coordinates are encrypted at rest using AES-256-GCM. Exact coordinates are never shared with other participants, exposed in API responses, or written to persistent server logs. Travel times are presented in approximate bands to prevent location trilateration.
3. 24-Hour Automated Data Disposal
All meeting rooms, participant sessions, encrypted coordinates, candidate venues, and votes are purged automatically from our active database 24 hours after meeting creation via automated cleanup tasks.
4. Your Rights Under PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the right to request access to, correction of, or immediate deletion of any personal data we hold. For data protection inquiries or requests, contact our Data Protection Officer at privacy@jompa.je.
5. Saved on Your Device
Decided meetups (venue, meeting title and the names in your group, plus any voucher you received) and the name you last used are saved in this browser so you can find them again and skip retyping. Anyone using this browser can see them. Meetups are removed automatically after the meetup or when you tap Remove; tap "Not you? Clear" to forget the name. A session cookie keeps you signed in to a meeting on this browser while it lasts, and the meeting title, your role and status stay in this browser until the meeting ends. None of this is sent to our servers.