Privacy Policy

Effective date: May 22, 2025
Last updated: May 22, 2025

PocketData (“we”, “us”, “our”) operates the Kocek mobile application and the related web service at https://kocek.pocketdata.com.my (together, “Kocek” or the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using Kocek, you agree to the practices described in this policy.

1. Information we collect

a) Information you give us

Account information — the email address and initial credentials issued to you when your organization’s administrator provisions your Kocek account, together with your display name and (optional) profile picture. Kocek is provided to organizations and their members; individual self-registration is not available.
Files and content — any files, photos, videos, scanned documents, or PDFs you choose to upload to Kocek.
Sharing information — when you share files with others, we record the recipient’s email address, the permissions you granted, and any public link you generated.

b) Information collected automatically

Device information — operating system version, device model, and app version, used to diagnose issues.
Log data — IP address, timestamps, and the URLs you access on our servers, retained in standard server logs.
Crash and performance data — when the app crashes or encounters an error, anonymized crash reports are sent to our self-hosted error tracking service (GlitchTip). These reports do not include the contents of your files.

c) Permissions we request on your device

Camera — only when you choose to take a photo or scan a document. Images are processed on your device and uploaded as files.
Photo library — only when you choose to pick a photo or video.
Storage / Files — to upload files you select and to save files you download.
Notifications — to inform you of upload and download progress.
Biometric (Face ID / fingerprint) — only when you enable App Lock. Biometric data is never sent to our servers; it stays on your device and is handled by the operating system.

2. How we use your information

We use the information we collect to:

Provide, operate, and maintain the Service.
Authenticate your account and keep your sessions secure.
Store, organize, and let you retrieve files you upload.
Enable file sharing with the people you choose.
Send you notifications about uploads, downloads, and shares.
Detect, prevent, and address bugs, abuse, and security issues.
Communicate with you about service updates or important changes.

We do not use your files for advertising, profiling, or training machine learning models. We do not sell or rent your personal data to anyone.

3. How we share your information

We share information only in these limited cases:

With people you choose — when you share a file or folder with another user, that user can access the file according to the permissions you grant. When you generate a public link, anyone with the link can view the file until you revoke it.
With service providers we rely on — our crash-reporting tool (GlitchTip, self-hosted by us) processes anonymized error reports. Our hosting infrastructure is owned and operated by PocketData; the files you upload are stored on servers we control.
When required by law — we may disclose information if compelled by a valid legal request, court order, or to protect the safety of our users.
In a business transfer — if PocketData is acquired or merged, your information may be transferred as part of that transaction. We will notify you before it happens.

4. How we protect your information

All connections between the Kocek app and our servers use HTTPS (TLS 1.2 or higher).
Authentication tokens are stored in your device’s secure storage (iOS Keychain / Android Keystore).
Files on our servers are stored on encrypted disk volumes.
You can enable App Lock in Settings to require Face ID, fingerprint, or your device passcode every time the app opens.

No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.

5. How long we keep your information

We keep your account information and uploaded files for as long as your account is active.
If you delete a file, it is removed from our servers within 30 days.
If you delete your account, your files and personal information are removed within 30 days, except where we are required to retain certain records by law.
Anonymized crash reports are retained for up to 90 days.

6. Your rights and choices

You can:

Access and update your account information from within the app.
Delete files at any time from the file browser.
Revoke shares at any time from the sharing screen.
Disable notifications from your device’s system settings.
Delete your account by contacting admin@pocketdata.com.my or using the in-app Delete Account option. We will delete your data within 30 days of the request.

Depending on where you live, you may have additional rights under laws such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), including the right to access, correct, or restrict our use of your personal information, or to request that we transfer it to another service. To exercise these rights, contact us at the email below.

7. Children’s privacy

Kocek is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us and we will delete it.

8. Third-party services

Kocek does not integrate with social-media tracking SDKs, advertising networks, or analytics products that profile users. The only third-party processor we use is our self-hosted GlitchTip instance for anonymized crash reporting.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, if the changes are material, notify you within the app or by email.

Your continued use of Kocek after changes take effect means you accept the revised policy.

10. Contact us

If you have questions, concerns, or requests about this Privacy Policy or your data, contact us at:

PocketData
Email: admin@pocketdata.com.my
Web: https://kocek.pocketdata.com.my