Privacy Policy

#1. Who we are

Ace of Dreams ("AoD", "we", "us") is run by PT. Alpha Omega Delta.

PT. Alpha Omega Delta is the data controller for the personal data described here, under Indonesia's Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022, the "PDP Law").

For anything about your data, write to [email protected].

#2. What this policy covers

This policy covers:

• the Ace of Dreams app for iOS and Android, and
• the website at aceofdreams.com, including the waitlist.

It explains what we collect, why, how long we keep it and what you can do about it. Our Terms of Service explain the rules for using AoD.

This policy is published in English and Bahasa Indonesia. Note for counsel confirm that the Indonesian version prevails for Indonesian users, under UU 24/2009.

#3. What we collect

#When you apply on the website (waitlist)

• Your name and email address
• The city you live in, as you type it
• Optionally: your interests, your reason for joining, your Instagram handle
• Whether you want news from AoD (an unticked box; you choose)
• A bot check, which looks at technical signals from your browser to tell people from bots

#When you register in the app

AoD is invitation-only. To join you need an Invite from a Member or from AoD.

• Your sign-in account. You sign in with an account you already have; AoD has no passwords. We receive your name, your email address and an account identifier from your sign-in provider. If your provider hides your email address, we receive the relay address it gives us, not your real one.
• The Invite you used and who invited you (your Inviter). This relationship is permanent: you become part of your Inviter's Army.
• Your name (pre-filled from your sign-in account; you can change it).
• Your phone number — only if you choose to add it. We don't verify it.
• Your Home City, picked from our list of cities.
• Your Member Vibes: 1 to 3 Vibes you pick during onboarding.
• Your Handle: the public @name you choose. It's permanent.
• Your acceptance of the Terms of Service, with the version you accepted and when.

#When you use the app

• Moments and Journals you post: photos, videos, places, text, and who you shared them with.
• Saves, likes, Collections and comments.
• Scores and Scorecards: the 0–10 Scores you give places, and the Scorecards you publish or keep private.
• Interests you pick from AoD's library, and the five you show on your profile (your Interest Belt).
• Bookings: the Stay, dates, guests, room, price, currency, payment status and cancellations. Payments are handled by our payment provider; we don't store full card numbers. [Placeholder: name the hotel supplier and payment provider before booking launches.]
• Messages you send and receive.
• Check-ins and In the Room: when you check in at a Spot, the app confirms your location to let you into that Spot's Room. Everything in a Room, private chats included, is wiped at 06:00 local time each day. A private chat is kept only as a Room Keepsake in both Members' Messages if you follow each other before then. Room chat screens can't be screen-captured.
• Footprints, if you allow photo access (see section 4).
• Keys, Invites and Army: which of your Keys are Available, Pending (shared but not yet used) or Invited (used), which invitations you cancelled, and who joined with them.
• DREAM$ and EXP: your rewards balances and history.
• Your settings and choices, for example notification preferences, whether you share usage analytics, marketing email and Featured Content choices, and the permissions you gave (photos, notifications) with when and on which device.
• Device and push data: device type, operating system, app version and a push-notification token.
• Usage analytics and crash reports (see section 5).

#Automatically, on our servers and website

• Server logs: IP address, time, request and error details. We keep them for 30 days.
• The network in front of our service processes your IP address and request details to protect AoD from attacks and abuse.

#4. Photos and Footprints

During onboarding we ask if AoD may look at your photo library to find your Footprints — the places you've travelled to — so you can discover Members who share your places and Vibes (Common Ground).

How it works:

• Your photos stay on your phone. The app reads the location and date stored in your photos on your device.
• From that, the app works out a place and a month: a city outside your Home City, or a venue in AoD's own catalog (a Spot or a Stay). Only that place and month are sent to AoD.
• We never receive your photos, their raw metadata or exact dates. Photos taken in your Home City are ignored.
• You can allow full access, allow only selected photos, or say no. Saying no doesn't limit the rest of the app.
• We record your choice (when, on which device, and which version of the explanation you saw).

Footprints are visible to other Members by month only, never exact dates. You can hide them, delete a single Footprint, or delete them all in Settings. If you turn off photo access in your phone's settings, no new Footprints are created; existing ones stay until you delete them.

#5. How we use your data, and why we may

We use your data only for these purposes. The PDP Law requires a lawful basis for each; ours are shown in brackets. Note for counsel confirm the bases per purpose.

• To run your account and the app: registration, sign-in, your profile, posting, messaging, In the Room, Keys and Invites, your Army, DREAM$ and EXP. (performing our contract with you — the Terms of Service)
• To show you places that fit you, using your Home City, Member Vibes and Footprints. (contract; consent for Footprints)
• To send notifications and emails you need: Invites, reminders to finish joining, account and security notices, deletion reminders. (contract)
• To send news and offers by email — only if you opted in. (consent)
• To keep AoD safe: preventing abuse, spam, fraud and Invite trading; protecting the service from attacks. (legitimate interest; legal obligation)
• To understand and improve the app: usage analytics and crash reports. We have turned off advertising identifiers and advertising features, we don't track you across other companies' apps or websites, and we don't show ads. You can switch off usage analytics in Settings; crash reports stay on because they keep the app working. (consent for analytics; legitimate interest for crash reports)
• Featured Content: we may feature content you shared with everyone in our curation and marketing, always credited with your @handle. You can opt out in Settings. (legitimate interest, with opt-out) Note for counsel confirm basis.
• To meet the law: tax and accounting records, responding to lawful requests. (legal obligation)

We don't sell your personal data, and we don't use it for advertising.

#6. Who can see what

• Other Members can see your Handle, name, profile, Home City, Moments and Journals you shared with them or with everyone, your Footprints (by month, unless you hide them), and your level (unless you hide it).
• People you message see your messages.
• People in the same Room (In the Room) see you while you're checked in at that Spot, until the Room resets at 06:00.
• Your Inviter sees that you joined with their Key and whether you've finished joining.
• AoD staff can see data when needed to run and support the service, to handle reports and to keep AoD safe.

#7. How long we keep it

#8. Your choices

In the app's Settings you can:

• hide or delete your Footprints, and turn photo access on or off in your phone's settings;
• turn usage analytics off;
• opt in or out of marketing email;
• opt out of Featured Content;
• manage notifications;
• hide your level from other Members;
• delete your account (section 10).

#9. Your rights

Under the PDP Law you have the right to:

• be informed about how we process your data (this policy);
• access your data and get a copy;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing, and withdraw consent at any time (this doesn't affect processing already done);
• receive your data in a common format and have it transferred (data portability);
• complain to the authority responsible for personal data protection in Indonesia.

To use your rights, email [email protected] from the email address on your account. We'll reply within Note for counsel statutory deadline. We may ask you to confirm your identity.

If a data breach puts your personal data at risk, we'll notify you and the authorities as the PDP Law requires.

#10. Delete your account

You can delete your AoD account at any time.

In the app: go to Settings → Profile → Delete my account.

What happens next:

• Your account enters a 30-day Deletion Grace Period. During it, your profile, Moments and Footprints are hidden from other Members, you can't be messaged or found, your unused Invites are revoked and your DREAM$ is frozen.
• We remind you in the app and by email 30, 14, 7, 3 and 1 days before deletion. Every reminder has a "Keep my account" link. You can also sign in and choose Keep my account.
• After 30 days, your personal data is erased. Records the law requires us to keep (for example financial records) are kept anonymised. Messages you already sent stay in other people's conversations, shown as from a "Deleted member".

If you can't use the app, email [email protected] from the email address on your account and we'll start the same process for you.

#11. Security

We protect your data with encryption in transit, private storage for media (shown only through short-lived links), access limited to staff who need it, and security monitoring at the network edge. No system is perfectly secure; if you think your account has been compromised, contact us right away.

#12. Children

AoD is for people 18 and older. We don't knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we close it and delete its data.

#13. Changes to this policy

When we make a material change, we'll tell you at least 30 days before it takes effect, by email and in the app. Each version is dated and listed with a short summary of what changed. Earlier versions stay available on request.

#14. Contact us

[email protected]