Privacy Policy

This Privacy Policy explains what personal data Lokalbis ("we", "us", "Lokalbis") collects when you use the Lokalbis mobile app, why we collect it, and how it is handled. Lokalbis is a location-based marketplace connecting buyers with local shops and service providers, currently piloting at Bintang Megamall, Miri, Sarawak.

1. Information we collect

• Phone number — required to create an account. We verify it with a one-time passcode sent by SMS through our verification provider, Twilio.
• Name — optional display name you can add to your account; sellers see this (or your phone number, if you skip it) on orders and bookings you place.
• Location — your device's GPS position, read only while the app is open and only to show you shops and listings sorted by distance. You can deny or revoke this at any time in your device settings; the app still works without it, just without distance sorting.
• Camera and photos — used only when you actively take or choose a photo (for example, a seller's shop photo, or scanning a pickup/booking QR code). We do not access your camera or photo library in the background.
• Order, booking and payment information — what you buy or book, the amount, and the payment method. Card and bank details themselves are collected and processed directly by our payment processor, Stripe — Lokalbis never sees or stores your full card number.
• Messages — if you message a seller through the app, that conversation is stored so both sides can see the history.
• Device and crash diagnostics — basic technical information (device model, OS version, and what the app was doing) sent automatically if the app crashes, via our monitoring provider, Sentry, so we can fix bugs. This does not intentionally include your personal messages or payment details.

2. How we use your information

• To create and secure your account, and verify it's really you via OTP.
• To show you nearby shops, products and services.
• To process orders and bookings, hold payment in escrow, and release it to the seller once you collect your order or your appointment is completed.
• To let a seller fulfil an order or appointment you placed with them.
• To provide customer support when you contact us.
• To diagnose and fix crashes and bugs.
• To meet legal and accounting obligations (for example, keeping order records).

We do not use your data for third-party advertising, and we do not sell your personal data.

3. Who we share it with

• Sellers — when you place an order or make a booking, the seller you're transacting with sees your name (or phone number), what you ordered, and where to reach you for that order. They do not see your other activity on the app.
• Stripe — our payment processor, to process card and FPX payments. Stripe is PCI-DSS compliant; see Stripe's own privacy policy for how it handles payment data.
• Twilio — to deliver the SMS one-time passcode used to sign in.
• Supabase — our database and file storage provider (hosted in Singapore), which stores your account, order and listing data on our behalf.
• Sentry — to receive crash and error diagnostics, as described above.

We do not share your personal data with anyone else, except where required by law.

4. How long we keep it

We keep your account data for as long as your account is active. Order and payment records are kept for longer where required for accounting, tax or dispute-resolution purposes. If you delete your account, we remove your personal profile data; records tied to completed transactions may be retained as required by law.

5. Your rights

Under Malaysia's Personal Data Protection Act 2010, you can ask us to access, correct, or delete the personal data we hold about you, and you can withdraw consent to future processing. To do any of this, email contact@lokalbis.com. You can also delete photos, sign out, or revoke location/camera permissions directly from the app or your device settings at any time.

6. Children

Lokalbis is not directed at children, and you must be old enough to legally hold or use payment methods in Malaysia to make a purchase or booking.

7. Security

We use industry-standard measures to protect your data, including encrypted connections and secure credential storage on your device. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this policy as the app changes. The "Last updated" date at the top will reflect the most recent revision. Material changes will be reflected here before they take effect.

9. Contact us

Questions about this policy or your data? Email contact@lokalbis.com or write to us at the address above.