Privacy Policy

This Privacy Policy describes how PINTAZ ("we", "our", "the app") handles your information when you use the PINTAZ navigation mobile app on Android and iOS.

1. Information we collect

Location data. When you use the app, we collect your precise GPS location to provide navigation. Background location is used only during active navigation to keep guidance going when your screen is off or you switch apps. Location is not collected when the app is closed.

Anonymous traffic speed samples. While you are actively navigating, the app sends occasional samples of your position, speed, heading and time to our servers so we can build live traffic for Malaysia (for example, to detect a slow-moving road ahead). These samples are anonymous: they are stored under a code made from a random per-trip number scrambled with a secret that changes every day, so samples from different days cannot be joined up, and they are never linked to your account, name, email, device or IP address. To protect where you live and where you go, the first and last 500 metres of every trip are never sent. We keep these anonymous samples to improve live traffic and traffic predictions. Only aggregated road speeds (never individual trips) are ever shown to other users.

Account information (optional). If you sign in with Google or Apple, we collect your name, email address, and (if you set one) a profile picture. You can use PINTAZ in guest mode without signing in at all.

App activity. We store your trip history, recent destinations, saved places (Home, Work, favourites), and community road reports you submit. This data is associated with your account if you're signed in, or stored only on your device if you're a guest.

Search queries. When you search for a destination, the query is sent to our servers, which may also ask OpenStreetMap's Photon search service to find matching places. We keep search queries, together with the location they were made from and without your account, to improve search and to find places that are missing from the map.

Cari dengan AI. If a search does not show the place you want, you can tap "Cari dengan AI". Only when you tap it does our server look the place up: it asks Firecrawl, a web-fetching service, to open the public Google Maps search for the words you typed, near your position rounded to about 1 km. Our own code picks the matching listing. Only when the results are unclear does Anthropic's AI choose between the listings found, and it sees just their names and places, never anything about you. A place that is found is saved into our map with the details from its public Google listing (name, pin, address, category, phone and opening hours, never reviews or photos) and shown to all users as "Dijumpai oleh AI". To keep a fair limit per phone, the app sends the random install code described under Map corrections with each search; we store it only in scrambled form. Your account, your exact location and your install code never leave our servers.

Business listings (PINTAZ Niaga). If you register, claim or edit a business — which needs you to be signed in — we collect what you enter for it: the shop name, category, map pin, opening hours, a phone or WhatsApp number, and the shop photo you choose to upload. Business listings are public: the name, pin, photo, phone number and WhatsApp / booking buttons are shown to every PINTAZ user on the shop's card and on its share link, the moment you submit. Don't add a personal number you don't want shown.

Class timetable (Mod Kampus). When you import a class-registration slip, the slip file is read on your phone and is never uploaded. Before anything leaves your phone, lines with your name, IC, matric number, e-mail, phone number or address are removed. The remaining course-table text (course codes, times, rooms) is sent to our servers only if the app's own reader cannot understand the slip, or if you tap "Baca dengan AI". Our server removes personal details a second time, and the text is then processed on our behalf by Anthropic to turn it into a timetable. We don't store it. Your timetable itself is saved on your phone. If you set a location for a classroom, that pin is shared with other students at your university; it is stored with a scrambled code for your phone, never your name or account.

Live trip sharing. If you tap Kongsi to share a trip, we store your live position, arrival time, destination and route for that trip so the people you send the link to can follow you. Anyone who has the link can view it, and no account is needed on either side, so share it only with people you trust. The link stops working 10 minutes after you stop sharing, 1 hour after your last update (6 hours for a konvoi), and in any case 12 hours after it was created. Old shared trips are deleted from our servers regularly.

Map corrections. If you add a missing place or report a wrong name, pin or closed place ("Tambah tempat", "Betulkan peta"), we store your correction, a nickname if you give one, and a scrambled code made from your network address to stop abuse. The app also sends a random code created on this install, so you can see and withdraw your own additions under "Tempat saya"; it is not a device ID and it is deleted when you uninstall the app. If you are signed in, the correction is linked to your account instead. Your corrections can appear on the map for all users, and our team may review or remove them.

Voice commands (optional, off by default). If you turn on voice commands in Settings, your phone's own speech recognition service (Google on Android, Apple on iOS) turns what you say into text. PINTAZ never records or uploads your voice. We receive only the words, which our server may pass to Google's Gemini service to understand the command. We don't store them.

Device identifiers. If you allow notifications, your phone creates a Firebase Cloud Messaging (FCM) token. When you are signed in, we store it with your account so we can send you notifications; guest phones don't send it to us. It does not identify you personally outside of our system.

2. Information we do NOT collect

• We do not collect contacts, calendar, browsing history, installed apps, or financial information.
• We do not record or upload your voice, and we do not upload your timetable slip. The only photos we receive are the ones you choose to upload yourself: a profile picture, or a photo of your own business.
• We do not use advertising identifiers or share data with advertisers.
• We do not collect health, fitness, or biometric data.

3. How we use your information

• To provide navigation: calculate routes, give turn-by-turn directions, show your position on the map, and play voice guidance.
• To show live traffic and alerts: compare your route against traffic data and warn about incidents ahead.
• To build live traffic for Malaysia: combine anonymous speed samples from many navigating phones into road-level traffic conditions shared with all PINTAZ users. Individual trips are never shown or identifiable.
• For community road reports: share crowd-sourced alerts (police, accidents, hazards) with other PINTAZ users in your area. Reports are anonymous to other users.
• To list businesses on the map: show a shop's details on its place card and share link, and let its owner update or remove them.
• To read a class timetable: turn the course-table text of a slip into a weekly timetable and show where classes are.
• To share a live trip: show your position and arrival time to people who open the link you shared, until the link expires.
• To improve the map: use search queries, map corrections and places found by "Cari dengan AI" to add missing places and fix wrong ones.
• To send push notifications about traffic, incidents, or app updates if you allow them.
• To maintain your account and trip history across devices if you sign in.

We do not use your data for advertising, profiling, or sale to third parties.

4. Third-party services

PINTAZ uses these services to deliver core features. They process limited data on our behalf:

• TomTom — live traffic and incident data. Our server asks TomTom for traffic on the areas and roads being driven; TomTom receives map coordinates from our server, never your account or your phone's identity.
• OpenStreetMap (Photon) — place search and POI data.
• Cloudflare — hosts our map tiles, satellite imagery and voice clips, and stores the shop photos that business owners upload.
• Anthropic — turns the course-table text of a timetable slip (personal details already removed) into a timetable when the app's own reader cannot, and chooses between unclear Google Maps listings for "Cari dengan AI". It sees only those listings, never anything about you.
• Firecrawl — fetches the public Google Maps search page for "Cari dengan AI". It receives the words you typed and your position rounded to about 1 km, never your account or install code.
• Google Maps — the public listing a "Cari dengan AI" result comes from. The search Firecrawl opens carries the words you typed and that rounded position.
• Google Gemini — helps understand a voice command, from its text only, if you use voice commands.
• JAKIM e-Solat — official prayer times for the Muslim features. Only your prayer-time zone code (for example MLK01) is sent, never your location.
• jsDelivr / cdnjs — public code libraries that load the timetable reader. They see your IP address, not your slip.
• MapLibre — map rendering library (does not transmit data).
• Google Firebase — push notifications (FCM).
• Google Sign-In / Apple Sign-In — authentication, if you choose to sign in.

These services have their own privacy policies. We do not share your data with any other third parties.

5. Data storage and security

• All network traffic to our servers uses HTTPS encryption.
• Authentication tokens are stored in encrypted device storage (Android Keystore / iOS Keychain).
• Server data is hosted on a private server located in Europe and access is restricted to authorised personnel. Shop photos are stored with Cloudflare.
• Retention: anonymous traffic speed samples and search queries are kept to improve traffic and search, and are not linked to an account. Shared live trips are deleted regularly. Timetable text and voice-command text are not stored. Account data, trip history, saved places and business listings are kept until you delete them or your account.

6. Your rights and choices

• Decline permissions: You can deny location, notification, microphone, camera or photo access at any time in your phone's settings. Some features will be unavailable without location.
• Delete a business: "Padam kedai" in the app removes your shop from the map. If you claimed a place that was already on the map, it removes your photo, phone number and opening hours from that place.
• Delete your account and data: You can request deletion in the app (Profile → Delete Account) or by emailing us. We remove your account, trip history, saved places, community reports and any shop you added to the map. If you claimed a place that was already on the map, use "Padam kedai" first, or email us, and we will also remove the photo, phone number and hours you added to it. Uploaded shop photos are deleted on request. Email requests are completed within 30 days.
• Export your data: Email us and we will provide your trip history and saved places in JSON format.
• Use guest mode: You can use the app without signing in. In that case, your trip history and saved places are stored only on your device. Route requests, search queries and anonymous traffic speed samples still reach our servers so navigation can work, but none of them are linked to an account.

7. Children's privacy

PINTAZ is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes to this policy

If we change this policy, we will update the effective date and notify users in the app for material changes. Continued use of the app after a change means you accept the updated policy.

9. Contact