1.Who we are
Intura Pte. Ltd., 32 Pekin Street, #05-01, Singapore 048762, is the controller of the personal data described in this policy. Datamew is a product of Intura.
This policy covers datamew.com, the learning app at app.datamew.com, and your account (together, the Service). Other Intura products, such as intura.co and Data AI Search at dataaisearch.com, have their own privacy policies.
2.What we collect
- Account data: your email address and the name you give us and, if you sign in with Google, the basic profile Google shares (name, email address and picture). We sign you in with one-time email links or Google Sign-In; we do not store passwords.
- Sign-in security: when you ask for a sign-in link, Cloudflare Turnstile checks that the request comes from a person. We keep session records with the time and device information needed to keep you signed in and to detect misuse.
- Learning data: the lessons you open and finish, your checkpoint and exercise answers and scores, mastery, review cards and their schedule, notes, streaks and time spent learning.
- Purchases and billing: what you bought and when, the price and currency, the payment reference Airwallex or Xendit gives us, how you paid (for example QRIS or a bank name) and, for a rupiah payment, the exchange rate it was charged at. Your card and account details are entered on the provider's page and never reach us.
- Live sessions and ebooks: the sessions you register for and the ebooks you ask to be told about.
- Request logs: for security, each request to our API is logged with the time, the address requested, the result and a one-way hash of your IP address — not the address itself.
- Messages: what you send us by email, with the details you include.
- Website usage: pages visited and controls used, with device, browser and approximate location derived from your IP address, collected through Amplitude and Google Analytics only if you accept analytics cookies. These events never contain what you type.
Cookies and browser storage are described in the Cookie Policy.
3.How we use it
- to provide the Service: sign you in, give you access to what you bought, grade your exercises, schedule your reviews and show your progress;
- to take payments, issue receipts, and meet tax and accounting obligations;
- to secure the Service, and to detect and prevent abuse, fraud, account sharing and breaches of the Terms;
- to provide support and send service messages, such as sign-in links, receipts, live-session details and notices of changes;
- to understand which lessons work and improve them: learning events are copied to our analytics warehouse (Google BigQuery), where we study them in aggregate;
- to understand how the website is used and improve it.
Our team follows account activity — sign-ups, sign-ins, purchases and similar events — through internal notifications in Discord so we can help learners. These include your name, email address and what happened; never sign-in links, tokens or payment details. We do not sell personal data and we do not use it for advertising.
4.Legal bases
We process personal data where it is necessary to perform our contract with you, to comply with a legal obligation, for our legitimate interests in securing, operating and improving the Service where those interests are not overridden by your rights, or with your consent, as for analytics cookies. These correspond to the bases in Article 20 of the UU PDP and to the consent, deemed consent and legitimate interests provisions of the PDPA. Where we rely on consent, you may withdraw it at any time.
5.How long we keep it
- Account and learning data: while your account is open, and for a reasonable period after it is closed, unless you ask us to delete it sooner and we are not required to keep it.
- Billing records: for as long as tax and accounting laws require.
- Request logs: 60 days.
- Messages: for as long as needed to deal with them and keep a record of them.
- Analytics data: under the retention settings of Amplitude and Google Analytics.
You may ask us to delete your data at any time by writing to [email protected]. We may keep what the law, or the defence of a legal claim, requires us to keep.
7.International transfers
Our servers are in Singapore, and our service providers may process data in other countries, including the United States. When personal data is transferred outside Indonesia or Singapore, we take the steps required by Article 56 of the UU PDP and the transfer limitation obligation of the PDPA, including contractual safeguards that give the data a comparable standard of protection.
8.Security
We protect personal data with encryption in transit, encryption at rest provided by our infrastructure, access limited to the people who need it, and monitoring. Sign-in links expire after a short time and work once, and IP addresses in our request logs are stored only as a one-way hash. No system is completely secure. If a personal data breach occurs, we will notify affected people and the relevant authorities as required by law.
9.Your rights
Subject to the conditions and exceptions in applicable law, you have the right to:
- be informed about how your personal data is processed;
- access your personal data and obtain a copy;
- correct inaccurate or incomplete data;
- have your data deleted or its processing ended;
- withdraw consent you have given;
- object to decisions based solely on automated processing that have significant effects on you;
- restrict or suspend processing, and receive your data in a commonly used format where the law provides for it.
You can change your name in your account. To exercise any other right, write to [email protected]. We may need to verify your identity before acting on a request, and we will respond within the period the law requires. You may also complain to the data protection authority in Indonesia or to the Personal Data Protection Commission in Singapore.
10.Children
The Service is not meant for children under 13, and we do not knowingly collect their personal data. Learners aged 13 to 17 may use the Service only with the consent of a parent or guardian. If you believe a child has given us personal data without that consent, write to [email protected] and we will delete it.
11.Changes to this policy
We may update this policy. We will publish the new version on this page with a new date and, for material changes, tell account holders by email or in the learning app.
12.Contact
For questions or requests about personal data:
- Intura Pte. Ltd., 32 Pekin Street, #05-01, Singapore 048762.
- Email: [email protected]