Privacy policy
Last updated September 22, 2026
Asaruma holds a household's most sensitive data, including a child's. This page sets out what we keep, why, and what you can ask for. For account data we act as a data controller, and for household content as a data processor, within the meaning of Indonesian Law No. 27 of 2022 on Personal Data Protection.
What we keep
Account data: your email address, the name you chose, and the device information the app needs to work. Household content: the transactions, notes, lists, documents and relatives you enter yourself. Vault content is stored in an encrypted form we cannot read. Location on a transaction is optional, off by default, and only active when a household turns it on.
What we use it for
To run the service: syncing data between the devices of a household's members, computing balances and summaries from your records, sending the reminders and alerts you asked for, and verifying payments. We do not sell your data and we do not use household content for advertising.
Who we share it with
With household members according to each record's setting, and with the service providers we need to operate — cloud hosting, notifications and payment processing — limited to what is necessary. We disclose data to law enforcement only where there is a valid legal basis.
How long we keep it
For as long as your account is active, and after a deletion request for the window stated on the request page. Some records are kept beyond that where another member still needs them or where the law requires it, and we say which ones.
Your rights
You may access, correct, restrict and delete your personal data, and take your data out of Asaruma. Export is available on every plan. Deletion requests are handled through the form below.
A child's data
A dependent's data is entered by their guardian under that guardian's consent. It is never used to train or improve anything and never enters analytics.
Security
Vault content is encrypted on the device with a key we never see in readable form. Every request for a file re-checks household membership and the record's setting. Changes to money, roles, vault keys and subscriptions are written to an append-only audit log that nobody can edit.
Analytics
Analytics and crash reports carry event names and counts only. No note text, merchant name, amount, file name or location. This site sets no cookie and no identifier tied to you.
Changes to this policy
If this policy changes in a way that matters, we tell you in the app before the change takes effect, rather than only changing the date on this page.