Privacy Policy

Effective date: 6 August 2026 · Applies to the ZenAja mobile app and website

1. Introduction

ZenAja ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service — the ZenAja app for discovering and booking wellness and sports activities in Indonesia.

2. Information we collect

Personal information

• Name, email address, and phone number
• Payment information (processed securely by our payment provider; we do not store card numbers)
• Profile information and preferences
• Photos you choose to upload (vendor venue and activity photos)

Usage data

• Booking history and activity preferences
• Device information and IP address
• App usage patterns and interactions

Location data

• Location information (only with your permission) to show nearby venues

3. How we use your information

• Process bookings and payments
• Communicate about your bookings and account
• Improve our Service and user experience
• Send promotional offers (with your consent)
• Prevent fraud and ensure security
• Comply with legal obligations

4. Information sharing

We may share your information with:

• Vendors: booking and contact information needed to fulfil your reservations
• Payment processors: payment information for transaction processing (our payments are handled by Midtrans)
• Service providers: third parties who assist in operating our Service
• Legal requirements: when required by law or to protect our rights

We do not sell your personal information to third parties.

5. Data security

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit, secure payment processing, access controls and authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure.

6. Your rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data (see Delete your account)
• Object to processing of your data
• Withdraw consent for marketing communications
• Export your data in a portable format

These rights are provided in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP).

7. Data retention

We keep your personal data for as long as your account is active. When you delete your account, your personal data is removed or anonymized, except for records we are legally required to retain (such as transaction records).

8. Cookies and tracking

Our website uses cookies and similar technologies to remember your preferences, analyze usage patterns, and improve our Service. You can control cookies through your browser settings. The mobile app does not use third-party advertising or tracking SDKs.

9. Children's privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or app notification, and the effective date above will be revised.

11. Contact us

For privacy-related questions or to exercise your rights: