Privacy Policy

Last Updated: 11th February 2026

‍

1. Introduction

Ceritalah (“we”, “us”, or “our”) respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Ceritalah mobile application and related services (collectively, the “App”) in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and its latest amendments.

‍

By using the App, you consent to the data practices described in this policy. If you do not agree with the terms, please do not access the App.

‍

2. Information We Collect

To provide our immersive storytelling and Augmented Reality (AR) experiences, we collect:

• Personal Data: Name, email address, and profile details provided during registration or when participating in community stories.

• Precise Location Data: We collect GPS data to trigger AR heritage trails and "Memory Boxes" based on your physical proximity to historic sites.

• Camera & Sensors: We require access to your device’s camera to render AR content. Camera data is processed locally on your device and is not stored on our servers unless you explicitly record and upload a to the platform.

‍

3. Use of Your Information

Ceritalah uses your information to:

• Deliver location-based storytelling and AR experiences.

• Maintain your personal badges and stamp collection for Memory Boxes completion and progress through heritage trails.

• Ensure the technical security of the App and prevent fraudulent activity.

• Conduct anonymized research on urban movement to assist in heritage preservation efforts.

‍

4. Disclosure of Data

Ceritalah may share limited data with:

• Service Providers: Third parties who assist in hosting, map rendering (e.g., Mapbox), and AR functionality (e.g., ARKit for iOS, ARCore for Android)

• Compliance: Where required by Malaysian law or to protect the rights and safety of our community.

• Anonymized Partners: We may share aggregated, non-identifiable data with urban planners and heritage conservationists to show how users interact with city spaces.

‍

5. Data Security & Retention

We implement industry-standard administrative and technical security measures. We retain your data only for as long as your account is active. In compliance with the 2025 PDPA Amendments, we will notify you and the relevant authorities within 72 hours should a significant data breach occur.

‍

6. Your Rights & Account Deletion

You have full control over your data:

• Access & Correction: You may request a copy of your data or update inaccurate information at any time.

• Account Deletion: You can delete your account and all associated personal data via the Settings menu within the App. Once deleted, this data cannot be recovered.

‍

7. Policy for Children

Ceritalah does not knowingly collect data from children under the age of 16 without verifiable parental consent. If we become aware of such data collection, we will take immediate steps to delete it.

‍

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer:

Ceritalah Privacy Team

Email: ceritalah.app@gmail.com

Web: www.ceritalah.app

‍