Privacy Policy

1. Overview

This Privacy Policy explains how Minitago Sdn. Bhd. ("Minitago", "we", "us", "our") collects, uses, discloses and protects information when you use the Minitago mobile application (the "App"), this website (minitago.com), and related services (together, the "Services"). By creating an account or using the Services, you agree to the collection and use of information as described in this policy.

2. Information we collect

Information you provide

Account details: name, phone number, gender and date of birth (optional), and profile photo.
Authentication data: we verify your account using phone number one‑time passcodes (OTP), and optionally Google or Apple sign‑in.
Merchant details: if you register a business, we collect your location/store details, business bank account information for payouts, and content you upload for Quests (photos, descriptions).
Support communications: messages you send us for help or feedback.

Information collected automatically

Location data: approximate or precise GPS location, used to show nearby Quests and locations, and to verify check‑ins.
Transaction data: Quests purchased, orders placed, Gems/Coins/XP earned or redeemed, and Lucky Draw activity.
Device & usage data: device model, operating system, app version, crash logs and general usage analytics, and a push‑notification token used to deliver notifications to your device.
Payment metadata: confirmation that a payment succeeded, the payment method type, and a payment reference ID. See Payments below — we do not store your full card number.

3. How we use information

To create and manage your account, and verify your identity via OTP.
To operate core gameplay: showing nearby Quests, processing orders, crediting Gems/Coins/XP, running Seasons, Lucky Draws and the rewards store.
To process payments and, for merchants, to calculate and pay out earnings.
To send transactional and promotional push notifications (you can manage these in your device settings).
To maintain the security, integrity and performance of the Services, including fraud prevention and crash diagnostics.
To comply with legal, tax and regulatory obligations, including issuing merchant statements.

4. Third‑party service providers

We rely on trusted providers to operate Minitago. Each processes data on our behalf and under their own privacy and security commitments:

Google Firebase — authentication, crash reporting, and cloud infrastructure hosting.
Google Cloud Platform — application hosting, database (MongoDB Atlas, hosted independently), and push‑notification delivery infrastructure (via Firebase Cloud Messaging).
Twilio — delivery of SMS one‑time passcodes for phone verification.
Razorpay — payment processing for in‑app purchases and merchant payouts.
Google Maps — location search, geocoding and map display.

We do not sell your personal information to third parties.

With merchants: when you complete a Quest, the merchant location can see limited order details (e.g. order code, quantity, redemption status) needed to fulfil it.
Service providers: as listed above, strictly to provide the Services.
Legal requirements: where required to comply with applicable law, regulation, legal process, or enforceable governmental request.
Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy or a successor policy.

6. Location data

Minitago is a location‑based app. We use your device location to show Quests near you and to confirm that a check‑in happened at the correct location. You can disable location permissions in your device settings at any time, though core features of the App will not work without it.

7. Payments

All in‑app payments are processed by Razorpay, a third‑party payment processor. Minitago does not store your full card, bank or wallet credentials on our servers — Razorpay handles this in accordance with applicable card network and payment security standards (PCI DSS). We retain only the transaction reference and status needed to fulfil your order and for accounting purposes. Gems and Coins earned in the App have no cash value except where explicitly redeemable in‑app, are non‑transferable, and are governed by our Terms of Service.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal and tax obligations (including merchant financial statements), resolve disputes, and enforce our agreements. You may request deletion of your account as described in Your rights & choices.

9. Security

We use industry‑standard safeguards — including encryption in transit, access controls and authenticated APIs — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Your rights & choices

Access & correction: you can review and update most account details directly in the App.
Deletion: you may request deletion of your account and associated personal data by contacting us at the email below, subject to records we must legally retain.
Notifications: you can opt out of push notifications in your device settings at any time.
Location: you can disable location access in your device settings at any time.

If you are in Malaysia, you have additional rights under the Personal Data Protection Act 2010 (PDPA), including the right to request access to, and correction of, your personal data, and to withdraw consent to certain uses of it. To exercise these rights, contact us using the details in Contact us below.

11. Children's privacy

Minitago is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Cookies (website)

minitago.com uses only essential cookies/local storage required for the site to function. We do not currently use third‑party advertising or tracking cookies on this website.

13. International transfers

Our service providers may process and store information in countries other than your own. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in line with applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified in‑app or by updating the "Last updated" date above. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

15. Contact us

Questions about this policy or your personal data can be sent to admin@minitago.com, or by mail to Minitago Sdn. Bhd., 53A, Kelawai Road, 10250 George Town, Penang, Malaysia.