Privacy Policy
Last updated: 28 August 2026
1. Introduction
PT. Cipta Hasil Sugiarto ("we", "us", or "the company") operates the CHAS - Heavy Equipment Transportation application (hereinafter referred to as the "Application"). This page is used to inform you of our policies regarding the collection, use, and disclosure of personal data if you decide to use our Application.
By using the Application, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Employee Account Information
Accounts for employee features (attendance) are created by the company's internal administrator. We process the following data related to your account:
- Employee Identity Data: Name, NIP (Employee Identification Number), division, position, and registered phone number.
- Login Verification Data: The phone number is used to verify identity through a login code and WhatsApp.
Note: The Application does not provide self-registration and does not request an email address for login. Accounts are provided by the company you work for.
2.2 Information Collected Automatically
- Location Data (only while the application is in use): We collect precise location only while the Application is in the foreground when you perform attendance, in order to:
- Record attendance coordinates,
- Verify presence at the work location.
- Device Data: Device model, operating system version, and platform (iOS/Android). This information is used for security purposes (for example, detecting fake location) and device registration for push notifications.
- Device Authentication Data: Push notification tokens (Firebase Cloud Messaging/APNs) required to send login confirmations and activity reminders.
The Application does not collect location in the background. Location access is only required when the application is open to record the attendance position.
2.3 Information from Camera and Media
- Photos and Videos: We collect photos and videos taken through the Application (camera) for:
- Documentation of daily activities,
- Attendance proof (selfie photos with time and location watermark),
- Documentation of heavy equipment transportation.
- Photo Gallery: The Application requests gallery permission to save attendance and activity photos/videos to your device.
3. Use of Information
We use the information collected to:
- Provide and maintain the Application services.
- Record attendance and daily employee activities.
- Verify attendance location when attendance is performed.
- Send notifications related to login confirmation, attendance, and activity reminders.
- Security and abuse prevention - verifying identity, detecting fake location, and preventing attendance manipulation.
- Comply with legal obligations and applicable regulations.
4. Permissions Required by the Application
The Application requires the following permissions to function properly:
| Permission | Purpose |
|---|---|
| Location (While Using the Application) | Record location during attendance |
| Camera | Take photos for activity and attendance documentation |
| Photo Gallery | Save attendance and activity photos |
| Internet | Data synchronization with the server |
| Notifications | Send login confirmations and activity notifications |
5. Data Storage and Security
- Your data is stored on our servers located in Indonesia.
- We apply reasonable security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
- Data transmitted between the Application and the server is encrypted using the HTTPS protocol.
- We retain your data for as long as your account remains active or as long as necessary to provide the services.
6. Sharing Data with Third Parties
We do not sell your personal data to third parties.
We do not track users. We do not link data collected from the Application (including device identity, photos/videos, and location) with third-party data for advertising purposes, and we do not share such data with data brokers.
We may share your data in the following situations:
- Service Providers: We use third-party service providers for push notifications (Firebase Cloud Messaging by Google, and Apple Push Notification Service on iOS devices).
- Legal Compliance: We may disclose your data if required by law or in response to valid legal requests.
- Business Consolidation: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
Third Parties Used:
- Google Firebase (Firebase Cloud Messaging) - for push notifications.
- Apple (Apple Push Notification Service) - for push notifications on iOS devices.
7. Data Retention
We will retain your personal data for as long as necessary for the purposes described in this policy. If you stop using the Application or request account deletion, we will delete your data within 30 days, unless we are required by law to retain it longer.
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Restriction: Request restriction of the processing of your data.
- Portability: Request transfer of your data to another party.
- Withdrawal of Consent: Withdraw your consent at any time.
To exercise these rights, please contact us through the contact details listed below.
9. Children's Privacy
Our Application is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided personal data, we will delete it immediately.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of changes by posting the new privacy policy on this page and updating the "Last updated" date at the top.
Changes take effect immediately upon posting. You are advised to review this privacy policy periodically.
11. Contact Us
If you have any questions or concerns about this privacy policy, please contact us:
PT. Cipta Hasil Sugiarto
Email: it@chas.co.id
Phone: (0231) 480448
Address: Cirebon, West Java, Indonesia
12. Governing Law
This privacy policy is governed by and construed in accordance with the laws of the Republic of Indonesia.
By using the CHAS Application, you declare that you have read, understood, and agreed to this privacy policy.