Privacy Policy

Last Updated: March 21, 2026

Welcome to Cofre (Cooking Video Recipe). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

            Important: By using Cofre, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
        

1. Information We Collect

1.1 Personal Information

When you register for an account, we collect:

Account Information: Name, username, email address, and password (encrypted)
Profile Information: Bio, avatar/profile picture, website URL
Account Settings: Language preference, privacy settings, notification preferences

1.2 Content You Create

We collect and store content that you create, upload, or share through our platform:

Videos and Images: Cooking videos, recipe photos, thumbnails
Recipe Information: Menu names, descriptions, ingredients, cooking steps, cooking time, difficulty level, servings, and nutritional information
Stories: Temporary photo/video content (automatically deleted after 24 hours unless archived)
Comments and Interactions: Comments, likes, bookmarks, reposts, and shares
Playlists and Highlights: Collections of videos and stories you organize

1.3 Camera and Media Access

Camera Permission: Our Android and iOS applications request access to your device's camera to enable you to:

Record cooking videos directly within the app
Take photos of your dishes and recipes
Create and upload stories
Capture profile pictures and avatars

You can deny camera access at any time through your device settings. However, this will limit your ability to create and upload video content directly from the app. You may still upload pre-recorded videos from your gallery.

1.4 Device and Usage Information

We automatically collect certain information about your device and how you use our app:

Device Information: Device type (Android/iOS), operating system version, device identifiers
Device Tokens: Push notification tokens for sending you notifications
Usage Data: Videos viewed, search queries, interactions (likes, comments, follows), time spent on content
Log Data: IP address, access times, app crashes, and performance data

1.5 Social Interactions

We collect information about your social interactions on the platform:

Users you follow and who follow you
Users you tag in videos or comments
Users you block or report
Direct messages and story replies
Video shares to friends

1.6 Informasi Nutrisi dan AI Food Scanner

AI Food Scanner hanya memproses foto makanan yang Anda pilih secara eksplisit. Foto tersebut dikirim ke Google Gemini untuk memperkirakan nama makanan, porsi, kalori, dan makronutrien. Foto scan disimpan maksimal 7 hari untuk menampilkan riwayat dan membantu pemulihan proses, lalu dihapus otomatis. Catatan hasil nutrisi tetap tersedia sampai Anda menghapusnya.

            Batas penggunaan: Hasil nutrisi merupakan estimasi dan bukan diagnosis atau nasihat medis. Periksa dan koreksi hasil sebelum menyimpannya; hubungi tenaga kesehatan untuk keputusan medis atau kebutuhan diet khusus.
        

Anda dapat mengoreksi atau hapus hasil scan dari riwayat kapan saja. Penghapusan hasil scan juga menghapus foto yang terkait. Pengumpulan analitik produk bersifat opsional, memerlukan persetujuan di Settings, dan tidak menyertakan foto makanan, alamat email, prompt mentah, atau catatan nutrisi bebas.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 To Provide and Improve Our Services

Create and manage your account
Process and store your uploaded videos and content
Enable social features (following, commenting, liking, sharing)
Personalize your feed with recommended content
Provide search functionality and trending content
Generate optional product analytics to improve app performance only after you enable analytics consent in Settings

2.2 To Communicate With You

Send push notifications about likes, comments, follows, and mentions
Send email verification and password reset emails
Notify you about badge application status
Respond to your inquiries and support requests
Send important updates about our services

2.3 To Ensure Safety and Security

Moderate content to ensure compliance with community guidelines
Investigate and prevent fraudulent or illegal activities
Process reports of inappropriate content
Enforce our Terms of Service
Protect against security threats

2.4 For AI and Machine Learning

Analyze food images for nutritional information (AI Food Scanner feature)
Improve content recommendation algorithms
Enhance search functionality

3. How We Share Your Information

3.1 Public Information

The following information is publicly visible to other users:

Your profile information (name, username, bio, avatar, website)
Your approved videos and their metadata (unless your account is private)
Your public stories (visible to followers or all users based on your settings)
Your comments, likes, and reposts (unless your account is private)
Your follower and following counts
Your verified badge status (if approved)

3.2 With Service Providers

We may share your information with third-party service providers who assist us in:

Cloud hosting and storage services
Push notification delivery (Expo Push Notifications)
Email delivery services
Consent-gated product analytics and essential crash diagnostics
Content delivery networks (CDN)

3.3 For Legal Reasons

We may disclose your information if required by law or in response to:

Legal processes (subpoenas, court orders)
Government requests
Protection of our rights and safety
Investigation of potential violations of our Terms of Service

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored on secure servers provided by:

Database: PostgreSQL (hosted on secure cloud infrastructure)
Cache and Queue: Redis (Upstash)
Media Storage: Persistent volume storage for videos, images, and avatars

4.2 Security Measures

We implement industry-standard security measures to protect your information:

Encryption: Passwords are hashed using Bcrypt encryption
HTTPS: All data transmission is encrypted using SSL/TLS
Authentication: Token-based authentication (Laravel Sanctum)
Rate Limiting: Protection against brute force attacks and spam
Access Controls: Restricted access to personal data
Regular Security Audits: Ongoing monitoring and updates

4.3 Data Retention

Account Data: Retained until you delete your account
Videos and Content: Retained until you delete them
Stories: Automatically deleted after 24 hours (unless archived)
Logs and Analytics: Retained for up to 90 days
Deleted Content: Permanently removed from our servers within 30 days

5. Your Privacy Rights and Choices

5.1 Account Settings

You can control your privacy through the app settings:

Private Account: Make your account private so only approved followers can see your content
Notification Settings: Control which notifications you receive (likes, comments, follows, mentions, reposts)
Language Preference: Choose between Indonesian and English
Badge Visibility: Show or hide your verified badge

5.2 Content Management

Delete your videos, stories, and comments at any time
Archive or delete your stories
Remove tags of yourself from other users' content
Block users to prevent them from seeing your content or interacting with you

5.3 Data Access and Portability

You have the right to:

Access your personal data
Request a copy of your data
Correct inaccurate information
Request deletion of your account and data

5.4 Device Permissions

You can manage app permissions through your device settings:

Camera: Required for recording videos and taking photos
Photo Library: Required for uploading existing media
Notifications: Optional, for receiving push notifications
Storage: Required for saving media files

6. Children's Privacy

Cofre is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately. If you believe we have collected information from a child under 13, please contact us.

7. Third-Party Services

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

Third-party services we use:

Expo Push Notifications: For delivering push notifications
Google and Apple: For account sign-in when you choose a social login option
Google Gemini: For analyzing a food image you explicitly submit to the AI Food Scanner
Cloud Infrastructure Providers: For hosting and storage

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to the transfer of your information to our facilities and service providers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

Posting the new Privacy Policy in the app
Updating the "Last Updated" date
Sending you a notification (for material changes)

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

10. Cookie Policy

We use cookies and similar technologies to:

Maintain your login session
Remember your preferences
Analyze app usage and performance
Improve user experience

You can control cookies through your browser settings, but this may affect app functionality.

11. Your Consent

By using Cofre, you consent to:

The collection and use of your information as described in this Privacy Policy
The use of camera and media access for creating content
The public display of your content (unless you set your account to private)
Receiving notifications based on your preferences

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Cofre Support Team
Email: support@cofremobileapp.my.id
Website: https://cofremobileapp.my.id

Data Protection Officer
Email: privacy@cofremobileapp.my.id

13. Specific Permissions Explained

13.1 Camera Permission (Android and iOS)

Why we need it: To enable you to record cooking videos, take photos of your dishes, create stories, and capture profile pictures directly within the app.

What we do with it: The camera is only activated when you explicitly choose to record a video or take a photo. We do not access your camera in the background or without your knowledge.

How to revoke: Open your device Settings, select Cofre, then disable Camera access.

13.2 Storage Permission

Why we need it: To save videos and photos you create, and to access media from your gallery for uploading.

What we access: Only media files you explicitly select for upload.

13.3 Notification Permission

Why we need it: To send you notifications about social interactions (likes, comments, follows, mentions).

How to control: You can customize notification preferences in the app settings or disable them entirely in your device settings.