Safiro Jewelry is a jewelry retailer operating stores in Surabaya, Indonesia — Pakuwon Mall (Level GF 7–8) and Tunjungan Plaza 4 (Floor 3) — and the website safirojewelry.com. This policy also covers the Safiro Member app, available for iOS and Android, which we operate as an extension of our in-store and online membership program.
If you have questions about this policy or how we handle your data, contact us:
The app requires you to be a Safiro member and sign in with your phone number. Here's exactly what it collects, and why:
| Data | Collected? | Why |
|---|---|---|
| Phone number | Yes | Signing in (verified via a one-time WhatsApp code), and matching you to your membership record |
| Name, birthday, wedding date | Yes | Displayed on your membership card, and used to determine voucher/benefit eligibility (e.g. a birthday reward) |
| Home address | Optional | Only if you choose to complete your profile — used for membership record-keeping |
| Email address | Optional | You may add one in Settings; never used to sign in |
| Profile photo | Optional | Only if you choose to add one — shown on your membership card |
| Membership tier, points, voucher status | Yes | The core purpose of the app — showing your tier, points balance, and available rewards |
| Purchase history and store visited | Yes | Pulled from our point-of-sale system so your tier and benefits reflect your real purchase history |
| Biometric data (Face ID / fingerprint) | Only if Biometric Lock is on | Used to lock the app itself. This never leaves your device — we never receive or store it |
| POPS game scores and leaderboard nickname | If you play POPS | To show your score, achievements, and leaderboard position. Nickname is chosen by you |
| Crash and error reports | Yes | Sent automatically if the app crashes, so we can fix it. Anonymous — not linked to your account |
| Device attestation signal | Yes | A security check confirming requests come from a genuine copy of the app. Doesn't identify you personally |
We do not collect your precise location, and the app contains no advertising SDKs and no general-purpose analytics/tracking SDK — nothing here is used to build an advertising profile of you, and nothing is sold or shared with data brokers or ad networks.
The website runs on WooCommerce. Here's what it collects:
We do not use your data for automated decision-making that produces legal or similarly significant effects on you, and we do not sell your personal data.
We do not sell, rent, or share your personal data with advertisers, data brokers, or unrelated third parties. Some infrastructure may process data on servers outside Indonesia, covered by Google's own standard data-protection safeguards.
We keep your membership data for as long as your account is active. If you delete your account, your sign-in credentials and profile record (name, birthday, address, phone, photo) are removed immediately and you will not be able to sign back in.
Your purchase history, loyalty points, vouchers, and POPS game scores are kept longer, tied to your customer record in our point-of-sale system — removing it is a manual step our staff complete shortly after your account deletion request. We retain this for our own business records and will remove or anonymize it upon request — contact safirojewelrysurabaya@gmail.com if you'd like this actioned sooner.
Crash reports are anonymous and retained per Firebase Crashlytics' standard retention period (typically 90 days).
If you're located somewhere with specific statutory privacy rights (e.g. the EU/UK's GDPR, or Indonesia's PDP Law), you may also have rights to data portability, restriction of processing, or to object to certain processing — contact us and we'll address your request under the applicable law.
Safiro Member is not directed at children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we'll remove it.
We may update this policy from time to time. We'll update the "Last updated" date above when we do. Continued use of the app or website after a change means you accept the updated policy.