Kebijakan Privasi
Berlaku sejak 6 Oktober 2026
Kebijakan ini menjelaskan data pribadi apa yang dikumpulkan aplikasi Karirku (aplikasi Android dan layanan web), untuk apa, dengan siapa dibagikan, dan hak Anda atas data tersebut, sesuai Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (UU PDP).
1. Siapa kami
Karirku dikelola oleh PT Digitalku Host Media, Graha Indah Blok A5 No. 11, Drajat, Paciran, Lamongan, Jawa Timur ("kami"). Pertanyaan tentang privasi: privacy@karirku.com.
Karirku dipakai oleh bisnis (pemberi kerja) untuk mengelola absensi, jadwal, izin, lembur, reimbursement, penggajian, dan keuangan kantor. Untuk data kerja karyawan, bisnis tempat Anda bekerja menentukan tujuan pemrosesan (pengendali data), sedangkan kami memprosesnya atas nama bisnis tersebut.
2. Data yang kami kumpulkan
- Akun: nama, email, password (disimpan sebagai hash, tidak bisa dibaca), foto profil dari Google bila login dengan Google, data passkey (hanya kunci publik), nomor HP, jenis kelamin, dan tanggal lahir bila Anda isi.
- Keanggotaan bisnis: bisnis yang Anda ikuti, peran (owner/manager/karyawan), ID karyawan, dan jabatan.
- Absensi: waktu absen masuk/pulang (jam server), lokasi GPS saat absen dan jaraknya ke kantor, serta foto selfie saat absen. Lokasi hanya diambil saat Anda menekan absen, bukan di latar belakang.
- Jadwal & pengajuan: shift, tukar shift, izin/sakit/cuti (termasuk foto lampiran seperti surat dokter), lembur, koreksi absen, reimbursement (termasuk foto nota).
- Penggajian: gaji, tunjangan, potongan, slip gaji, NPWP, dan nomor rekening bank.
- Keuangan kantor: catatan pemasukan/pengeluaran dan foto bukti yang dicatat oleh orang yang diberi akses.
- Perangkat & teknis: token notifikasi (Firebase), alamat IP, waktu, dan jenis permintaan di log server, serta log aktivitas (siapa melakukan apa) untuk keamanan dan audit.
Foto yang diunggah diperkecil dan metadata kamera (termasuk lokasi GPS di dalam foto) dibuang sebelum disimpan.
3. Untuk apa data dipakai
- Menjalankan layanan: login, absensi dengan validasi lokasi, jadwal, persetujuan pengajuan, penggajian, slip gaji, laporan.
- Mengirim email penting (kode verifikasi, reset password, konfirmasi hapus akun) dan notifikasi di aplikasi/push.
- Keamanan: mencegah penyalahgunaan, menelusuri masalah, dan menyimpan jejak audit.
Dasar pemrosesan: pelaksanaan perjanjian (layanan & hubungan kerja Anda dengan bisnis), kewajiban hukum bisnis (misalnya arsip penggajian dan perpajakan), kepentingan yang sah (keamanan), dan persetujuan Anda untuk izin lokasi, kamera, dan notifikasi, yang dapat Anda cabut kapan saja lewat pengaturan HP.
Kami tidak menjual data pribadi dan tidak memakainya untuk iklan.
4. Dengan siapa data dibagikan
- Bisnis tempat Anda bekerja: owner dan manager dapat melihat data kerja Anda di bisnis tersebut (absensi & foto, pengajuan, jadwal). Data gaji, NPWP, dan rekening hanya untuk owner (dan orang yang ia beri akses keuangan). Data di satu bisnis tidak terlihat oleh bisnis lain.
- Penyedia layanan kami, hanya untuk menjalankan Karirku: Amazon Web Services (server aplikasi, penyimpanan foto & lampiran), DigitalOcean (database), Google/Firebase (notifikasi push, login Google), dan ZeptoMail (pengiriman email). Server, database, dan penyimpanan file kami berada di Singapura; Google/Firebase dan ZeptoMail dapat memproses data di negara lain. Transfer data ke luar Indonesia dilakukan dengan perlindungan yang setara sesuai UU PDP.
- Pihak berwenang bila diwajibkan oleh hukum.
5. Penyimpanan & keamanan
- Koneksi terenkripsi (HTTPS ke aplikasi, TLS ke database), password disimpan sebagai hash, foto & lampiran di penyimpanan privat yang hanya bisa diambil lewat aplikasi setelah login dan dicek haknya.
- Data akun disimpan selama akun aktif. Arsip kerja (absensi, slip gaji) disimpan oleh bisnis selama diwajibkan hukum atau diperlukan untuk penggajian.
- Log server disimpan paling lama 30 hari.
6. Hak Anda
- Melihat dan memperbarui data pribadi Anda di Profil aplikasi.
- Meminta salinan atau koreksi data dengan menghubungi kami atau bisnis tempat Anda bekerja.
- Menarik persetujuan izin lokasi, kamera, dan notifikasi di pengaturan HP (fitur yang membutuhkannya tidak bisa dipakai).
- Menghapus akun di aplikasi (Profil → Hapus akun) atau lewat halaman hapus akun. Data pribadi (nama, email, kontak, NPWP, rekening, foto profil, selfie & lampiran, passkey, token notifikasi) dihapus. Catatan kerja yang wajib diarsip bisnis (waktu absensi, slip gaji) tetap disimpan tanpa identitas Anda.
7. Anak-anak
Karirku ditujukan untuk tempat kerja dan tidak ditujukan bagi anak di bawah 17 tahun.
8. Perubahan
Kebijakan ini dapat diperbarui. Perubahan penting akan diberitahukan di aplikasi. Tanggal berlaku tercantum di atas.
9. Kontak
PT Digitalku Host Media — privacy@karirku.com
Privacy Policy
Effective 6 October 2026
This policy explains what personal data the Karirku app (Android app and web service) collects, why, who it is shared with, and your rights, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
1. Who we are
Karirku is operated by PT Digitalku Host Media, Graha Indah Blok A5 No. 11, Drajat, Paciran, Lamongan, East Java, Indonesia ("we"). Privacy questions: privacy@karirku.com.
Businesses (employers) use Karirku to manage attendance, schedules, leave, overtime, reimbursements, payroll, and office finances. For employees' work data, the business you work for decides how it is used (data controller); we process it on that business's behalf.
2. Data we collect
- Account: name, email, password (stored as a hash that cannot be read), profile photo from Google when you sign in with Google, passkey data (public key only), and phone number, gender, and date of birth if you provide them.
- Business membership: businesses you belong to, your role (owner/manager/employee), employee ID, and position.
- Attendance: check-in/out times (server time), GPS location at check-in/out and distance to the office, and a selfie photo. Location is only taken when you tap to check in or out, never in the background.
- Schedules & requests: shifts, shift swaps, sick/permit/annual leave (including attachments such as doctor's notes), overtime, attendance corrections, reimbursements (including receipt photos).
- Payroll: salary, allowances, deductions, payslips, tax ID (NPWP), and bank account number.
- Office finances: income/expense records and proof photos recorded by people given access.
- Device & technical: notification token (Firebase), IP address, time and type of requests in server logs, and an activity log (who did what) for security and audit.
Uploaded photos are resized and camera metadata (including GPS location inside the photo) is removed before storage.
3. How we use data
- To run the service: sign-in, attendance with location checks, schedules, request approvals, payroll, payslips, reports.
- To send important emails (verification codes, password resets, account deletion confirmations) and in-app/push notifications.
- For security: preventing abuse, troubleshooting, and keeping an audit trail.
Legal bases: performance of a contract (the service and your employment with the business), the business's legal obligations (e.g. payroll and tax records), legitimate interests (security), and your consent for location, camera, and notification permissions, which you can withdraw at any time in your phone's settings.
We do not sell personal data or use it for advertising.
4. Who we share data with
- The business you work for: its owner and managers can see your work data in that business (attendance & photos, requests, schedules). Salary, tax ID, and bank details are for the owner only (and people the owner grants finance access). Data in one business is not visible to other businesses.
- Our service providers, only to run Karirku: Amazon Web Services (application server, photo & attachment storage), DigitalOcean (database), Google/Firebase (push notifications, Google sign-in), and ZeptoMail (email delivery). Our servers, database, and file storage are located in Singapore; Google/Firebase and ZeptoMail may process data in other countries. Transfers outside Indonesia are made with equivalent protection as required by Indonesia's Personal Data Protection Law.
- Authorities when required by law.
5. Storage & security
- Encrypted connections (HTTPS to the app, TLS to the database), hashed passwords, and photos & attachments in private storage that can only be retrieved through the app after sign-in and permission checks.
- Account data is kept while the account is active. Work records (attendance, payslips) are kept by the business as long as the law requires or payroll needs them.
- Server logs are kept for at most 30 days.
6. Your rights
- View and update your personal data in the app's Profile.
- Request a copy or correction of your data by contacting us or the business you work for.
- Withdraw location, camera, and notification permissions in your phone's settings (features that need them will stop working).
- Delete your account in the app (Profile → Delete account) or on the account deletion page. Personal data (name, email, contact details, tax ID, bank account, profile photo, selfies & attachments, passkeys, notification tokens) is deleted. Work records the business must keep (attendance times, payslips) remain without your identity.
7. Children
Karirku is meant for the workplace and is not directed at children under 17.
8. Changes
We may update this policy. Significant changes will be announced in the app. The effective date is shown above.
9. Contact
PT Digitalku Host Media — privacy@karirku.com