Effective date: 5 October 2026  ·  Last updated: 5 October 2026  ·  Applies to: sertifikat.wafaindonesia.or.id

Wafa Certificate Verification (Sertifikat) is a public website that lets anyone check whether a certificate or other document issued by Wafa Indonesia is genuine. Every verifiable Wafa document carries a QR code and a verification code. Scanning the code opens a page showing the document’s key details and its current status.

The verification site does not store the content of documents. It keeps only a minimal index (which Wafa system issued a code, and whether the document is still valid) and fetches the details directly from the issuing system each time a code is checked. This Privacy Policy explains how the site handles personal data, in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (the “PDP Law”).

1. Who we are

Wafa Certificate Verification is operated by Yayasan Syafa’atul Qur’an Indonesia (YAQIN), known as Wafa Indonesia (“Wafa”, “we”, “us” or “our”), a foundation established under the laws of the Republic of Indonesia. Wafa Indonesia is the personal data controller for the processing described in this policy. Documents are issued by our other systems, currently SiMumtaz (munaqosyah certificates, syahadah and piagam) and SIFA (partner institution certificates), which have their own privacy policies.

2. How verification works

1. When a document is issued, the issuing system registers its verification code with this site.
2. When someone scans the QR code or opens the verification link, this site checks the code against its index and then asks the issuing system for the current details.
3. The page shows the details and the document’s status: active, revoked, suspended, expired or no longer valid.
4. If the issuing system cannot be reached, the site can still show that a document is revoked or expired, but it never confirms a document as valid without checking with the issuing system first.

3. Personal data we process

Printed certificates also contain the holder’s place and date of birth and detailed scores. This site deliberately leaves them out, even though the issuing system holds them.

4. How we use data and our legal bases

We do not use visitor data to identify, profile or advertise to visitors.

5. For certificate holders

• If details on the page are wrong, or you think your certificate is being misused, contact us. We can correct the record, reissue the certificate, or suspend or revoke the code.
• Many munaqosyah certificates belong to children. That is why the page shows only the minimum needed to confirm authenticity, in line with Article 25 of the PDP Law.

6. Who we share data with

• Issuing Wafa systems (SiMumtaz and SIFA). When a code is checked, the site sends the code to the issuing system through an authenticated, digitally signed request.
• Anyone who has the code can see the details on the verification page, by design.

Singapore has a comprehensive data protection law (the Personal Data Protection Act 2012). We transfer personal data outside Indonesia only in accordance with Article 56 of the PDP Law. We may disclose data where required by law or a lawful request from a competent authority. We do not sell, rent or trade personal data.

7. How long we keep data

8. How we protect data

• All connections are encrypted with HTTPS.
• Verification codes are long and random, and requests are rate-limited per IP address to stop people from guessing them.
• Communication with issuing systems is authenticated and digitally signed.
• The index holds no personal details, and verification codes are removed from our logs.
• A document is never shown as valid unless the issuing system confirms it, so revocations take effect even if a notification fails.

If a personal data breach occurs, we will notify the affected people and the relevant authority in writing no later than 3 × 24 hours, as required by Article 46 of the PDP Law.

9. Cookies

This site does not use cookies, local storage, analytics or tracking. The only third-party content is the fonts loaded from Google Fonts.

10. Your rights

Under the PDP Law (Articles 5–13) you have the right to be informed, to access and obtain a copy of your data, to correct it, to have it deleted or its processing ended (subject to legal exceptions, such as keeping issued certificates verifiable), to withdraw consent, to object to decisions based solely on automated processing, to delay or restrict processing, to data portability, and to claim compensation for violations in accordance with the law.

Certificate holders, or the parents or guardians of children, can email [email protected] with the subject “Privacy Request – Sertifikat”, stating the certificate number and what they would like us to do. Visitors can ask us about their log data, but because we keep only IP addresses for a short time we may be unable to link a visit to a specific person. We will respond within the time limits set by the PDP Law (for many requests, no later than 3 × 24 hours after we receive a complete and verified request). You may also lodge a complaint with the personal data protection authority in Indonesia.

11. Changes to this policy

We may update this policy when the site or the law changes. We will publish the updated version on this page and change the “Last updated” date.

12. Contact us

Effective date: 5 October 2026  ·  Last updated: 5 October 2026  ·  Applies to: hris.wafaindonesia.or.id

HRIS Wafa is Wafa Indonesia’s human resource information system for our employees. It handles employee records, attendance (with location and photo verification), leave and permission requests, business trips, overtime, daily work reports and Mutaba’ah, our daily Quran recitation log.

This Privacy Policy explains how HRIS processes the personal data of our employees and of people whose details employees provide, such as emergency contacts. It is written in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (the “PDP Law”).

1. Who we are

HRIS is operated by Yayasan Syafa’atul Qur’an Indonesia (YAQIN), known as Wafa Indonesia (“Wafa”, “we”, “us” or “our”), a foundation established under the laws of the Republic of Indonesia and your employer. Wafa Indonesia is the personal data controller for the processing described in this policy. HRIS currently uses its own sign-in with your email address and password, separate from the Wafa SSO Portal.

2. Personal data we process

Health-related data and personal financial data are specific personal data under Article 4 of the PDP Law. We process them only where necessary, for example to administer sick leave or salary as required by law, and restrict access to HR and authorised approvers. Religion and marital status are recorded for HR administration only.

If you give us details of other people, such as emergency contacts or family members named in leave documents, please make sure they know about it.

3. How we use your data and our legal bases

4. Location and photos at clock-in

• Location only when you clock in or out. Your browser asks for permission to use your location. HRIS reads it once at clock-in and once at clock-out. It does not track you at any other time.
• Office area check. Your coordinates are compared with your branch’s location and permitted radius (100 metres by default). During an approved business trip the area check is switched off, but your coordinates are still recorded as evidence of attendance.
• Selfie photo. A photo is taken with your device’s camera at clock-in and clock-out and uploaded directly to our private storage through a link that is valid for 5 minutes. Authorised HR staff can view it through links valid for 15 minutes. Photos are used only for manual checks against proxy attendance. We do not use facial recognition or any other biometric identification.
• Automatic deletion. Attendance photos and supporting documents are deleted automatically 100 days after upload.
• Maps. When you or HR view the location of an attendance record, the map is loaded from OpenStreetMap, so those coordinates are sent to OpenStreetMap to display it.
• If you refuse permission. You can refuse location or camera access, but GPS attendance will not work. Please contact HR, who can record your attendance manually.

5. Automatic attendance records

HRIS sets your attendance status (for example present, late or half day) automatically from your schedule. Every night at 23:59, it creates an “absent” record for scheduled employees who did not clock in on a working day that is not a holiday, and it creates the day’s daily report and Mutaba’ah entries. These records may be used for leave, overtime and payroll. If a record is wrong, you can submit an attendance correction or a permission request, which is reviewed by a person (your supervisor or HR). You also have the right to object to decisions based solely on automated processing (Article 10 of the PDP Law).

6. Who can see your data within Wafa

• You can see your own data, requests and their approval timeline.
• Supervisors and leaders see the data of their own team needed to approve requests and monitor attendance.
• HR administrators see employee data needed for HR administration, including the history of changes.
• Super administrators have full access, including system records, and are limited to a small number of people.

7. Who we share your data with

7.1 Within Wafa

HRIS sends your name, phone number, email address and employee number to Wafa SSO so that you receive a Wafa ID. Your job title and department may also be recorded in your Wafa Account to set your access rights in other Wafa applications, as described in the Wafa SSO Portal privacy policy.

7.2 Service providers

7.3 Authorities

We may disclose personal data where required by law, for example to tax or employment authorities, or in response to a court order or a lawful request from a competent authority. We do not sell, rent or trade personal data.

8. International data transfers

Our servers are located in Singapore, so HRIS data is stored outside Indonesia. Map and push notification providers may also process limited data in other countries. Singapore has a comprehensive data protection law (the Personal Data Protection Act 2012). We transfer personal data outside Indonesia only in accordance with Article 56 of the PDP Law: the destination country provides a level of protection equal to or higher than the PDP Law, or adequate and binding safeguards are in place, or, where neither applies, with your consent.

9. How long we keep your data

When the period ends, we delete the data or anonymise it so it can no longer identify you.

10. How we protect your data

• All connections are encrypted with HTTPS. Passwords are stored only as a one-way hash (bcrypt) and cannot be read by anyone, including Wafa staff.
• Access is role-based and limited by level, as described in section 6.
• Photos and documents are kept in private storage that is not publicly accessible. They can only be opened through links that expire after 15 minutes, and they are deleted automatically after 100 days.
• Changes to employee data, contracts, attendance, leave balances, overtime and corrections are recorded in an audit trail, and original attendance times are kept when a correction is approved.
• Push notification content is encrypted so that push services cannot read it.

Your sign-in is stored in your browser, so please sign out when using a shared device. If a personal data breach occurs, we will notify you and the relevant authority in writing no later than 3 × 24 hours, as required by Article 46 of the PDP Law.

11. Data stored in your browser

HRIS does not use advertising, analytics or tracking cookies.

12. Your rights

Under the PDP Law (Articles 5–13) you have the right to:

• be informed about who processes your data, why and on what basis;
• access your personal data and obtain a copy;
• correct or update data that is inaccurate or incomplete;
• end processing, delete or destroy your data, subject to legal exceptions (for example, records we must keep under employment, tax or accounting laws);
• withdraw consent where processing is based on consent, such as push notifications;
• object to decisions based solely on automated processing, such as automatic attendance statuses;
• delay or restrict processing in proportion to its purpose;
• data portability: receive your data in a commonly used, machine-readable format and have it sent to another controller where technically feasible; and
• claim compensation for violations in the processing of your personal data, in accordance with the law.

You can view most of your data in HRIS, change your password, turn notifications on or off, and submit attendance corrections. For anything else, contact HR or email [email protected] with the subject “Privacy Request – HRIS”, stating your name, employee number and what you would like us to do. We will respond within the time limits set by the PDP Law (for many requests, no later than 3 × 24 hours after we receive a complete and verified request). If we cannot fulfil a request, we will explain why. You may also lodge a complaint with the personal data protection authority in Indonesia.

13. Changes to this policy

We may update this policy when HRIS or the law changes. We will publish the updated version on this page, change the “Last updated” date and inform employees of significant changes before they take effect.

14. Contact us

Effective date: 5 October 2026  ·  Last updated: 5 October 2026  ·  Applies to: khidmah.wafaindonesia.or.id

Khidmah Wafa is the work app for Wafa Indonesia’s professional staff (SDM Profesional): munaqosyah examiners (munaqisy), trainers, academy teachers and others assigned to Wafa activities. It brings your profile, your schedule and your munaqosyah grading together in one app that works on your phone, tablet or computer.

Khidmah does not keep its own database. It shows and updates data held in three other Wafa systems: Wafa SSO (your account), SIFA (your professional profile and assignments) and SiMumtaz (munaqosyah participants and scores). This Privacy Policy explains how Khidmah handles personal data, in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (the “PDP Law”).

1. Who we are

Khidmah is operated by Yayasan Syafa’atul Qur’an Indonesia (YAQIN), known as Wafa Indonesia (“Wafa”, “we”, “us” or “our”), a foundation established under the laws of the Republic of Indonesia. Wafa Indonesia is the personal data controller for the processing described in this policy. The Wafa SSO Portal, SIFA and SiMumtaz each have their own privacy policy describing how they store your data.

2. Personal data we process

Your email address and WhatsApp number belong to your Wafa Account, so Khidmah shows them but does not change them. You can add a missing email address or number in the app. To change an existing one, use the Wafa SSO Portal or contact us.

3. How we use your data and our legal bases

Your competency levels and incentive rates are calculated in SIFA, as explained in the SIFA privacy policy. Khidmah only displays them. We do not use your data for advertising.

4. Who we share your data with

4.1 Within Wafa

Khidmah exchanges data only with Wafa SSO, SIFA and SiMumtaz, and only through a fixed list of permitted functions. It sends your sign-in token, IP address and a request identifier with each request. It does not pass on cookies.

4.2 Service providers

One-time codes for adding an email address or WhatsApp number are sent by Wafa SSO through its email and WhatsApp providers, as described in the Wafa SSO Portal privacy policy.

We may disclose personal data where required by law, a court order or a lawful request from a competent authority. We do not sell, rent or trade personal data.

5. International data transfers

Our servers are located in Singapore, which has a comprehensive data protection law (the Personal Data Protection Act 2012). We transfer personal data outside Indonesia only in accordance with Article 56 of the PDP Law: the destination country provides a level of protection equal to or higher than the PDP Law, or adequate and binding safeguards are in place, or, where neither applies, with your consent.

6. How long we keep your data

7. How we protect your data

• All connections are encrypted with HTTPS, and sign-in uses your Wafa Account.
• Your session is held in an HttpOnly, Secure cookie. When your Wafa Account is signed out elsewhere or deactivated, your Khidmah session ends too.
• Khidmah can only reach a fixed list of functions in SIFA and SiMumtaz, so it cannot be used to read other data held there.
• You see only your own profile and the participants of activities assigned to you.
• Scores are never stored in the app’s offline cache. Only unsent scores wait in a dedicated queue on your device.

Please help us: use a screen lock on your device, do not share your account, sign out on shared devices, and do not copy, photograph or share participants’ data outside the app. If a personal data breach occurs, we will notify the affected people and the relevant authority in writing no later than 3 × 24 hours, as required by Article 46 of the PDP Law.

8. Cookies and data stored on your device

We do not use advertising, analytics or tracking cookies in Khidmah.

9. Participants’ data and children

Many munaqosyah participants you grade are children. Their data comes from their institutions through SiMumtaz and is handled as described in the SiMumtaz privacy policy, in line with Article 25 of the PDP Law. In Khidmah you see only the participants of activities assigned to you, and only the data needed to grade them. As an examiner, you must use this data only for your assignment and keep it confidential.

10. Your rights

Under the PDP Law (Articles 5–13) you have the right to:

• be informed about who processes your data, why and on what basis;
• access your personal data and obtain a copy;
• correct or update data that is inaccurate or incomplete;
• end processing, delete or destroy your data, subject to legal exceptions;
• withdraw consent where processing is based on consent;
• object to decisions based solely on automated processing;
• delay or restrict processing in proportion to its purpose;
• data portability: receive your data in a commonly used, machine-readable format and have it sent to another controller where technically feasible; and
• claim compensation for violations in the processing of your personal data, in accordance with the law.

You can view your data and update parts of your biodata directly in the app. For anything else, email [email protected] with the subject “Privacy Request – Khidmah”, stating your name, your Wafa ID if you know it, and what you would like us to do. We may need to verify your identity first. We will respond within the time limits set by the PDP Law (for many requests, no later than 3 × 24 hours after we receive a complete and verified request). You may also lodge a complaint with the personal data protection authority in Indonesia.

11. Changes to this policy

We may update this policy when the app or the law changes. We will publish the updated version on this page and change the “Last updated” date. For significant changes, we will also notify you in the app or by WhatsApp or email.

12. Contact us

Effective date: 5 October 2026  ·  Last updated: 5 October 2026  ·  Applies to: simumtaz.wafaindonesia.or.id, including certificate request forms and certificate (syahadah) links

SiMumtaz is Wafa Indonesia’s munaqosyah management system. Munaqosyah is the Quran proficiency examination that concludes learning with the Wafa method. Partner institutions use SiMumtaz to apply for munaqosyah and register their students and teachers as participants. Wafa staff and examiners (munaqisy) use it to schedule examinations, record and validate scores, and issue certificates (sertifikat, syahadah and piagam).

This Privacy Policy explains what personal data SiMumtaz processes, why, who we share it with, how long we keep it and what rights you have. It is written in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (the “PDP Law”).

1. Who we are

SiMumtaz is operated by Yayasan Syafa’atul Qur’an Indonesia (YAQIN), known as Wafa Indonesia (“Wafa”, “we”, “us” or “our”), a foundation established under the laws of the Republic of Indonesia. Wafa Indonesia is the personal data controller for the processing described in this policy. Sign-in to SiMumtaz is provided by the Wafa SSO Portal, which has its own privacy policy.

2. Whose data we process

• Users: Wafa staff (administrators, quality managers and score validators), administrators and Quran coordinators of partner institutions, and examiners;
• participants: students and teachers who take a munaqosyah examination;
• parents or guardians of student participants, whose phone number is recorded;
• contacts of external parties: organisations or individuals outside our partner network that apply for munaqosyah; and
• people who fill in a certificate request form or a certificate link.

3. Personal data we process

Students’ data is children’s data, which is specific personal data under Article 4 of the PDP Law. See section 11.

4. How we use your data and our legal bases

For children, we also rely on the consent of a parent or guardian, obtained by the institution (see section 11).

How results are determined: scores are entered by examiners and checked by Wafa validators. SiMumtaz then calculates the final score, predicate and pass/fail result automatically using predefined assessment criteria. If you believe a result is wrong, you or your institution can ask us to review it.

5. Certificates and their delivery

• Printed details. A certificate shows the participant’s name, place and date of birth, institution, test type, predicate and scores, plus a Wafa ID, a certificate number and a QR code.
• Public verification. Each certificate is registered with Wafa Certificate Verification (sertifikat.wafaindonesia.or.id). Anyone who scans the QR code or enters the code sees the certificate number, name, institution, test type, material covered, predicate and dates. Date of birth and detailed scores are not shown. Please share your certificate or QR code only with people who need to verify it.
• Delivery by email. Participants can request their certificate through a Google Form, entering their NIPS, name, institution, place and date of birth, phone number and email address. SiMumtaz updates the certificate with the confirmed details, creates a PDF and emails it through Brevo.
• Delivery by WhatsApp. Teachers receive a personal link by WhatsApp. After they confirm their name, place and date of birth and WhatsApp number, the certificate PDF is sent to that number through Fonnte. The confirmed details also update the teacher’s participant record.
• Institutions can download their participants’ certificates in SiMumtaz.

6. Who we share your data with

6.1 Within Wafa

• Partner institution administrators see only their own institution’s applications, participants, results and certificates.
• Examiners see only the participants assigned to them, usually through the Khidmah app.
• Wafa staff have access according to their role.
• SIFA receives participants, results and certificate details to keep partnership records.
• Wafa SSO receives participants’ names, and teachers’ own phone number and email address, to assign a Wafa ID.
• Wafa Certificate Verification receives the details shown on the public verification page, only when a code is checked.

6.2 Service providers

SiMumtaz also sends our munaqosyah product and price list to Odoo, our accounting system. This does not include any participant data.

6.3 Other disclosures

We may disclose personal data where required by law, a court order or a lawful request from a competent authority, or to protect the rights and safety of Wafa, participants or the public. We do not sell, rent or trade personal data.

7. International data transfers

Our servers are located in Singapore, so SiMumtaz data is stored outside Indonesia. Google and Brevo may also process data in other countries. Singapore (Personal Data Protection Act 2012) and the European Union (General Data Protection Regulation) have comprehensive data protection laws. We transfer personal data outside Indonesia only in accordance with Article 56 of the PDP Law: the destination country provides a level of protection equal to or higher than the PDP Law, or adequate and binding safeguards are in place, or, where neither applies, with your consent.

8. How long we keep your data

When the period ends, we delete the data or anonymise it so it can no longer identify anyone.

9. How we protect your data

• All connections are encrypted with HTTPS. Sign-in uses the Wafa SSO, and sessions are held in an HttpOnly, Secure cookie.
• Access is role-based: institutions see only their own data and examiners see only the participants assigned to them.
• Public forms and certificate links use long, random codes and are rate-limited to prevent guessing and abuse.
• Communication between Wafa systems is authenticated, digitally signed and runs over internal networks.
• The public verification page deliberately leaves out dates of birth and detailed scores.

If a personal data breach occurs, we will notify the affected people and the relevant authority in writing no later than 3 × 24 hours, as required by Article 46 of the PDP Law.

10. Cookies and similar technologies

We do not use advertising, analytics or tracking cookies in SiMumtaz. On a shared computer, always sign out when you finish.

11. Children’s data

We protect children’s data by:

• collecting only what the examination and certificate need;
• not recording a child’s own phone number or email address: we use the parent’s or guardian’s phone number instead;
• limiting access to the child’s institution, the assigned examiner and authorised Wafa staff; and
• never showing a child’s date of birth or detailed scores on the public verification page.

Parents or guardians can exercise their child’s rights by contacting us directly or through the institution.

12. Your rights

Under the PDP Law (Articles 5–13) you have the right to:

• be informed about who processes your data, why and on what basis;
• access your personal data and obtain a copy;
• correct or update data that is inaccurate or incomplete, for example a misspelled name on a certificate;
• end processing, delete or destroy your data, subject to legal exceptions (for example, the record of an issued certificate, which we must keep so it can be verified);
• withdraw consent where processing is based on consent;
• object to decisions based solely on automated processing;
• delay or restrict processing in proportion to its purpose;
• data portability: receive your data in a commonly used, machine-readable format and have it sent to another controller where technically feasible; and
• claim compensation for violations in the processing of your personal data, in accordance with the law.

To make a request, email [email protected] with the subject “Privacy Request – SiMumtaz”, stating the participant’s name, institution, NIPS or certificate number if known, your relationship to the participant, and what you would like us to do. Institutions may also forward requests on behalf of their students and teachers. We may need to verify your identity first. We will respond within the time limits set by the PDP Law (for many requests, no later than 3 × 24 hours after we receive a complete and verified request). If we cannot fulfil a request, we will explain why. You may also lodge a complaint with the personal data protection authority in Indonesia.

13. Changes to this policy

We may update this policy when our services or the law change. We will publish the updated version on this page and change the “Last updated” date. For significant changes, we will also inform partner institutions before the changes take effect.

14. Contact us

Effective date: 5 October 2026  ·  Last updated: 5 October 2026  ·  Applies to: sifa.wafaindonesia.or.id, including the partner registration form and partner certificate links

SIFA (Sistem Informasi Wafa) is Wafa Indonesia’s information system for running our programs. Authorised Wafa staff use it to manage partner institutions (lembaga mitra), foundations (yayasan) and regional Wafa units, our professional staff (trainers, munaqosyah examiners and academy teachers), activities such as trainings and munaqosyah (Quran proficiency examinations), assignments, incentives and the related administration. SIFA also hosts a public form that institutions use to register as Wafa partners.

This Privacy Policy explains what personal data SIFA processes, why, who we share it with, how long we keep it and what rights you have. It is written in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (the “PDP Law”).

1. Who we are

SIFA is operated by Yayasan Syafa’atul Qur’an Indonesia (YAQIN), known as Wafa Indonesia (“Wafa”, “we”, “us” or “our”), a foundation established under the laws of the Republic of Indonesia. Wafa Indonesia is the personal data controller for the processing described in this policy. Sign-in to SIFA is provided by the Wafa SSO Portal, which has its own privacy policy.

2. Whose data we process

• Wafa staff who use SIFA;
• professional staff (SDM Profesional): trainers, munaqosyah examiners (munaqisy), academy teachers and others assigned to Wafa activities;
• supporting staff (SDM Pendukung) who help run activities;
• contact persons (PIC) of partner institutions, foundations, regional Wafa units (Wafa Daerah) and regional partnerships (Kemitraan Daerah);
• people who fill in the partner registration form, and the people they name in it;
• students and teachers of partner institutions, and other participants in Wafa activities; and
• contacts of prospective partners recorded in our accounting system.

3. Personal data we process

Some of this data is specific personal data under Article 4 of the PDP Law: children’s data and personal financial data (bank accounts and incentive amounts). We give it extra protection and restrict access to staff who need it.

If you give us data about other people, for example the contacts you name in the registration form, please make sure they know about it and about this policy.

4. How we use your data and our legal bases

We do not use personal data in SIFA for advertising.

5. Automated competency levels

SIFA calculates each professional staff member’s competency level per field (from OJT through ahli) automatically, based on the qualifications recorded in their profile. The level, together with the role in an activity, determines the incentive grade and therefore the incentive rate. If you think your level is wrong, you can ask us to check the qualifications used, correct them and review the result. You also have the right to object to decisions based solely on automated processing (Article 10 of the PDP Law).

6. Who we share your data with

6.1 Within Wafa

• Authorised Wafa staff, each with access limited to what their role requires.
• Wafa SSO: links between your account and your SIFA records, and name and contact details for the Wafa ID registry.
• SiMumtaz: institution and professional staff data needed to run munaqosyah; SiMumtaz in turn sends participants, results and certificates to SIFA.
• Khidmah: professional staff can see and update their own profile.
• Wafa Certificate Verification (Sertifikat): when someone checks a partner certificate, it shows the institution’s code, name, region and partnership status.

6.2 Service providers

6.3 Other disclosures

Partner certificates can be downloaded through a link containing a long, hard-to-guess code, which we send to the institution. Anyone who has the link can download that certificate, so please share it with care. We may also disclose personal data where required by law, a court order or a lawful request from a competent authority, or to protect the rights and safety of Wafa, our partners or the public.

We do not sell, rent or trade personal data.

7. International data transfers

Our servers are located in Singapore, so SIFA data is stored outside Indonesia. Odoo and Google may also process data in other countries. Singapore has a comprehensive data protection law (the Personal Data Protection Act 2012). We transfer personal data outside Indonesia only in accordance with Article 56 of the PDP Law: the destination country provides a level of protection equal to or higher than the PDP Law, or adequate and binding safeguards are in place, or, where neither applies, with your consent.

8. How long we keep your data

When the period ends, we delete the data or anonymise it so it can no longer identify you.

9. How we protect your data

• All connections are encrypted with HTTPS. Sign-in uses the Wafa SSO, and sessions are held in an HttpOnly, Secure cookie.
• Access is role-based: each staff member can only see and change what their job requires.
• Changes to important records are kept in an audit trail showing who changed what and when.
• Communication between Wafa systems is authenticated, digitally signed and runs over internal networks.
• The public registration form only works through an invitation link and is protected against automated abuse with rate limits and spam protection.

If a personal data breach occurs, we will notify the affected people and the relevant authority in writing no later than 3 × 24 hours, as required by Article 46 of the PDP Law.

10. Cookies and similar technologies

We do not use advertising, analytics or tracking cookies in SIFA. If you use a shared computer, delete the registration form draft by clearing your browser data, or submit the form before leaving.

11. Children’s data

SIFA contains data about students of partner institutions, many of whom are children. Under Article 25 of the PDP Law, processing children’s data requires special care and the consent of a parent or guardian. Students’ data reaches us from their institution, mostly through SiMumtaz, and the institution is responsible for informing parents or guardians and obtaining any consent required before sharing it with us. We collect only what our programs need: we do not record a child’s own phone number or email (we use the parent’s or guardian’s contact instead), access is limited to authorised staff, and the public certificate check never shows a child’s date of birth or detailed scores. Parents or guardians can exercise their child’s rights by contacting us directly or through the institution.

12. Your rights

Under the PDP Law (Articles 5–13) you have the right to:

• be informed about who processes your data, why and on what basis;
• access your personal data and obtain a copy;
• correct or update data that is inaccurate or incomplete;
• end processing, delete or destroy your data, subject to legal exceptions (for example, financial records we must keep, or certificates that must remain verifiable);
• withdraw consent where processing is based on consent;
• object to decisions based solely on automated processing, such as the competency level calculation described in section 5;
• delay or restrict processing in proportion to its purpose;
• data portability: receive your data in a commonly used, machine-readable format and have it sent to another controller where technically feasible; and
• claim compensation for violations in the processing of your personal data, in accordance with the law.

Professional staff can view and update parts of their own profile in the Khidmah app. For anything else, email [email protected] with the subject “Privacy Request – SIFA”, stating your name, how you are connected to Wafa (for example, the institution you represent) and what you would like us to do. We may need to verify your identity first. We will respond within the time limits set by the PDP Law (for many requests, no later than 3 × 24 hours after we receive a complete and verified request). If we cannot fulfil a request, we will explain why. You may also lodge a complaint with the personal data protection authority in Indonesia.

13. Changes to this policy

We may update this policy when our services or the law change. We will publish the updated version on this page and change the “Last updated” date. For significant changes, we will also inform affected users and partners before the changes take effect.

14. Contact us

Effective date: 5 October 2026  ·  Last updated: 5 October 2026  ·  Applies to: sso.wafaindonesia.or.id and auth.wafaindonesia.or.id

The Wafa SSO Portal is the single sign-on service of Wafa Indonesia. With one Wafa Account you sign in once and open the Wafa applications you have access to, such as SIFA, SiMumtaz and Khidmah, without signing in again for each of them.

This Privacy Policy explains what personal data the Wafa SSO Portal processes, why we process it, who we share it with, how long we keep it and what rights you have. It is written in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (the “PDP Law”) and its implementing regulations.

1. Who we are

The Wafa SSO Portal is operated by Yayasan Syafa’atul Qur’an Indonesia (YAQIN), known as Wafa Indonesia (“Wafa”, “we”, “us” or “our”), a foundation established under the laws of the Republic of Indonesia. For the purposes of the PDP Law, Wafa Indonesia is the personal data controller for the processing described in this policy. Our contact details are in section 14.

2. Scope of this policy

This policy covers personal data processed when you:

• create or use a Wafa Account, or an account is created for you by a Wafa administrator;
• sign in to the portal, or to a Wafa application through the portal;
• recover your password, set or change your password, add an email address or WhatsApp number, or manage your signed-in devices; and
• are registered in our Wafa ID registry by another Wafa application (this can happen even if you never sign in yourself).

Each Wafa application has its own privacy policy explaining how it uses your data after you sign in (SIFA, SiMumtaz, Khidmah, HRIS and Sertifikat). Some applications, such as HRIS, currently use their own sign-in and are only linked from the portal for convenience.

3. Personal data we process

The SSO Portal does not ask for specific (sensitive) personal data such as health, biometric or financial data.

4. How we use your data and our legal bases

Under Article 20 of the PDP Law we may only process personal data on a lawful basis. The table below shows each purpose and the basis we rely on.

Where we rely on legitimate interests, we have weighed them against your interests and rights. We do not use your data for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

5. How sign-in and verification work

• Password sign-in. You enter your email address or WhatsApp number and your password. The password is checked by our identity service, which we host ourselves using the open-source Zitadel software.
• WhatsApp one-time code. We send a 6-digit code to the WhatsApp number registered to your account. The code is valid for 5 minutes and can be tried at most 5 times. Requests are limited per number/email and per IP address.
• Protection against account discovery. The portal answers in the same way whether or not an email address or number is registered, so others cannot use it to find out who has an account.
• Forgotten password. For accounts with an email address, we email a reset link that is valid for 15 minutes. After a reset, your other portal sessions are signed out.
• Adding an email address. We email a verification code (valid for 10 minutes) to the new address, and send a WhatsApp notification to your registered number, with the email address partly hidden, so you will know if someone else did it.
• Adding a WhatsApp number. We send a verification code (valid for 5 minutes) to the new number by WhatsApp.
• My Devices. You can see where your account is signed in (browser and device, IP address, last activity) and sign out any session. Changing your password signs out your other sessions.
• Single sign-out. When you sign out of one Wafa application, we end your portal session and notify the other Wafa applications so they end your sessions as well. When an administrator deactivates your account or changes your roles, your sessions are ended or refreshed so the change takes effect quickly.
• Administrator access for support. In exceptional cases, such as technical support or investigating a problem, a small number of authorised administrators can open a session for an account through a tightly restricted mechanism. Every such access is recorded in the audit log.

6. Who we share your data with

6.1 Wafa applications

When you sign in, or when an application needs to refresh your access rights, we share your name, email address, WhatsApp number, Wafa ID, roles, job title and department (for staff) and links to your profiles with the Wafa application concerned (SIFA, SiMumtaz or Khidmah). HRIS, SIFA and SiMumtaz also use the Wafa ID registry to look up or create Wafa IDs. Each application uses this data as described in its own privacy policy.

6.2 Service providers

We use the following providers to run the service. They process data on our behalf and only for the purposes below.

6.3 Legal requirements

We may disclose personal data where required by law, a court order or a lawful request from a competent authority, or where necessary to protect the rights, property or safety of Wafa, our users or the public.

We do not sell, rent or trade personal data.

7. International data transfers

Our servers are located in Singapore, so data processed by the SSO Portal is stored outside Indonesia. Some service providers, such as Brevo (European Union) and Cloudinary (global network), may also process data in other countries. Singapore (Personal Data Protection Act 2012) and the European Union (General Data Protection Regulation) have comprehensive data protection laws. We transfer personal data outside Indonesia only in accordance with Article 56 of the PDP Law: the destination country provides a level of protection equal to or higher than the PDP Law, or adequate and binding safeguards are in place, or, where neither applies, with your consent.

8. How long we keep your data

9. How we protect your data

• All connections to the portal and identity service are encrypted with HTTPS.
• Passwords are never stored in plain text; they are protected with strong cryptography. Secrets used between Wafa systems are stored encrypted.
• Sign-in is protected by attempt limits, cooldown periods, rate limiting by number/email and IP address, and uniform responses that prevent account discovery.
• The session cookie is HttpOnly and Secure, so it cannot be read by scripts on the page. Sessions can be listed and ended at any time.
• Communication between Wafa systems is authenticated, digitally signed and runs over internal networks.
• Only authorised central staff can manage accounts and roles, and their actions are recorded in the audit log.
• Our logs are kept to the minimum needed to run and secure the service.

If a personal data breach occurs, we will notify you and the relevant authority in writing no later than 3 × 24 hours, as required by Article 46 of the PDP Law. No system is completely secure, so please keep your password and one-time codes to yourself. Wafa staff will never ask you for them.

10. Cookies and similar technologies

Our identity service at auth.wafaindonesia.or.id may also use strictly necessary cookies during sign-in. We do not use advertising, analytics or tracking cookies, and the portal’s fonts are served from our own servers. You can block or delete cookies in your browser, but without the session cookie the portal cannot keep you signed in.

11. Children

Wafa Accounts are intended for adults: Wafa staff, trainers, representatives of partner institutions and other adult participants. We do not knowingly create sign-in accounts for children without the involvement of a parent or guardian. The Wafa ID registry may contain records of children, for example students who take a munaqosyah examination, created by SiMumtaz or SIFA so that a Wafa ID can be printed on their certificates. These records cannot be used to sign in and are handled as described in the SiMumtaz and SIFA privacy policies, in line with Article 25 of the PDP Law.

12. Your rights

Under the PDP Law (Articles 5–13) you have the right to:

• be informed about who processes your data, why and on what basis;
• access your personal data and obtain a copy;
• correct or update data that is inaccurate or incomplete;
• end processing, delete or destroy your data, subject to legal exceptions (for example, records we must keep by law, or the minimum record needed to keep certificates verifiable);
• withdraw consent where processing is based on consent;
• object to decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you;
• delay or restrict processing in proportion to its purpose;
• data portability: receive your data in a commonly used, machine-readable format and have it sent to another controller where technically feasible; and
• claim compensation for violations in the processing of your personal data, in accordance with the law.

What you can do yourself: view and end your sessions on My Devices, set or change your password, and add an email address or WhatsApp number. To change or remove an existing email address or number, or for any other request, please contact us.

How to make a request: email [email protected] with the subject “Privacy Request – Wafa SSO Portal”, stating your name, the email address or number on your account, your Wafa ID if you know it, and what you would like us to do. We may need to verify your identity first. We will respond within the time limits set by the PDP Law (for many requests, no later than 3 × 24 hours after we receive a complete and verified request). If we cannot fulfil a request, for example because the law requires us to keep the data, we will explain why.

If you are not satisfied with our response, you may lodge a complaint with the personal data protection authority in Indonesia.

13. Changes to this policy

We may update this policy when our services or the law change. We will publish the updated version on this page and change the “Last updated” date. For significant changes, we will also notify you through the portal, WhatsApp or email before the changes take effect.

14. Contact us

Privacy Policy of Wafa Tilawah 5

Wafa Indonesia operates Wafa Tilawah 5 app, which provides the SERVICE.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, Wafa Tilawah 5 app.

If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Wafa Tilawah 5 app, unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

Log Data

Collection of Personal Data:

Our app “Wafa Tilawah 5” does not collect any personal data from our users. We do not collect any personally identifiable information such as name, email address, phone number, or location.

Non-Personal Data Collection:

We may collect non-personal data such as device type, operating system, game progress, and game settings. This data is collected solely to improve the gaming experience and is not shared with any third-party entities. In a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Use of Data:

The non-personal data we collect is used solely for the purpose of enhancing the game experience. We do not share any data with third parties or use it for any other purpose.

Cookies

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.

Our Services uses these “cookies” to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

We are committed to protecting the privacy of children who use our app. This privacy policy explains how we collect, use, and protect personal information from children under the age of of 13.

No Information Collection:

Our app does not collect any information from children, such as name, address, phone number, or email address. We do not track or store any information about the children who use our app.

Parental Consent:

We do not require any information from children to use our app. However, we encourage parents or legal guardians to monitor and supervise their children’s use of our app. If we ever plan to collect personal information from children in the future, we will seek parental consent beforehand.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

This policy is effective as of 2023-10-18

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected]

Privacy Policy of Wafa Tilawah 4

Wafa Indonesia operates Wafa Tilawah 4 app, which provides the SERVICE.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, Wafa Tilawah 4 app.

If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Wafa Tilawah 4 app, unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

Log Data

Collection of Personal Data:

Our app “Wafa Tilawah 4” does not collect any personal data from our users. We do not collect any personally identifiable information such as name, email address, phone number, or location.

Non-Personal Data Collection:

We may collect non-personal data such as device type, operating system, game progress, and game settings. This data is collected solely to improve the gaming experience and is not shared with any third-party entities. In a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Use of Data:

The non-personal data we collect is used solely for the purpose of enhancing the game experience. We do not share any data with third parties or use it for any other purpose.

Cookies

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.

Our Services uses these “cookies” to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

We are committed to protecting the privacy of children who use our app. This privacy policy explains how we collect, use, and protect personal information from children under the age of of 13.

No Information Collection:

Our app does not collect any information from children, such as name, address, phone number, or email address. We do not track or store any information about the children who use our app.

Parental Consent:

We do not require any information from children to use our app. However, we encourage parents or legal guardians to monitor and supervise their children’s use of our app. If we ever plan to collect personal information from children in the future, we will seek parental consent beforehand.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

This policy is effective as of 2023-10-18

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected]

Privacy Policy of Wafa Tilawah 3

Wafa Indonesia operates Wafa Tilawah 3 app, which provides the SERVICE.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, Wafa Tilawah 3 app.

If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Wafa Tilawah 3 app, unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

Log Data

Collection of Personal Data:

Our app “Wafa Tilawah 3” does not collect any personal data from our users. We do not collect any personally identifiable information such as name, email address, phone number, or location.

Non-Personal Data Collection:

We may collect non-personal data such as device type, operating system, game progress, and game settings. This data is collected solely to improve the gaming experience and is not shared with any third-party entities. In a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Use of Data:

The non-personal data we collect is used solely for the purpose of enhancing the game experience. We do not share any data with third parties or use it for any other purpose.

Cookies

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.

Our Services uses these “cookies” to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

We are committed to protecting the privacy of children who use our app. This privacy policy explains how we collect, use, and protect personal information from children under the age of of 13.

No Information Collection:

Our app does not collect any information from children, such as name, address, phone number, or email address. We do not track or store any information about the children who use our app.

Parental Consent:

We do not require any information from children to use our app. However, we encourage parents or legal guardians to monitor and supervise their children’s use of our app. If we ever plan to collect personal information from children in the future, we will seek parental consent beforehand.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

This policy is effective as of 2023-10-18

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected]

Privacy Policy of Wafa Tilawah 2

Wafa Indonesia operates Wafa Tilawah 2 app, which provides the SERVICE.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, Wafa Tilawah 2 app.

If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Wafa Tilawah 2 app, unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

Log Data

Collection of Personal Data:

Our app “Wafa Tilawah 2” does not collect any personal data from our users. We do not collect any personally identifiable information such as name, email address, phone number, or location.

Non-Personal Data Collection:

We may collect non-personal data such as device type, operating system, game progress, and game settings. This data is collected solely to improve the gaming experience and is not shared with any third-party entities. In a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Use of Data:

The non-personal data we collect is used solely for the purpose of enhancing the game experience. We do not share any data with third parties or use it for any other purpose.

Cookies

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.

Our Services uses these “cookies” to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

We are committed to protecting the privacy of children who use our app. This privacy policy explains how we collect, use, and protect personal information from children under the age of of 13.

No Information Collection:

Our app does not collect any information from children, such as name, address, phone number, or email address. We do not track or store any information about the children who use our app.

Parental Consent:

We do not require any information from children to use our app. However, we encourage parents or legal guardians to monitor and supervise their children’s use of our app. If we ever plan to collect personal information from children in the future, we will seek parental consent beforehand.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

This policy is effective as of 2023-10-18

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected]