PRIVACY POLICY

1. Introduction
Welcome to Cardnera (the "App"), operated by CARDNERA SDN. BHD. ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you download, access, or use our mobile application and any related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use the Service.

2. Information We Collect
We collect several types of information from and about users of our App to provide and improve our Service.
A. Personal Information You Provide
When you register or use certain features, you may voluntarily provide:
Identity Data: Name, email address, username, password.
Profile Data: Profile picture, bio, preferences.
Contact Data: Phone number, physical address (if applicable for delivery or verification).
Financial Data: Payment information (processed securely by third-party processors like Stripe or Apple Pay; we do not store full credit card numbers).
User Content: Photos, videos, comments, or messages you post within the App.
B. Information Collected Automatically
When you access the App, we automatically collect:
Device Information: Device model, operating system version, unique device identifiers (IDFA/AAID), IP address, and mobile network information.
Usage Data: Features used, time spent in the App, crash reports, and interaction patterns.
Location Data: Precise or approximate location data (only if you grant permission via your device settings).
C. Information from Third Parties
We may receive information about you from third parties, such as:
Social media platforms (if you log in via Google, Apple, Facebook, etc.).
Advertising partners and analytics providers.
Data brokers (where permitted by law).

3. How We Use Your Information
We use the collected information for the following purposes:
To Provide the Service: To create your account, process transactions, and deliver content.
To Improve the App: To analyze usage trends, fix bugs, and develop new features.
To Communicate: To send you service updates, security alerts, and support messages.
Marketing (With Consent): To send promotional materials or personalized ads, where you have opted in or where legally permissible.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific context:
Performance of a Contract: To fulfill our obligations to you (e.g., providing the App).
Consent: Where you have given explicit consent (e.g., for marketing cookies or precise location).
Legitimate Interests: For fraud prevention, network security, and product improvement, provided these do not override your rights.
Legal Obligation: To comply with laws and regulations.

5. Sharing Your Information
We do not sell your personal information. We may share your data with:
Service Providers: Third-party vendors who perform services on our behalf (e.g., cloud hosting, payment processing, customer support, analytics).
Legal Authorities: If required by law or to protect our rights and safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
With Your Consent: We may share data with other parties when you explicitly direct us to do so.
Note for California Residents: Under the CCPA/CPRA, we do not "sell" or "share" (for cross-context behavioral advertising) personal information of users under 16 without opt-in consent.

6. Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law. When no longer needed, we will delete or anonymize your data.

7. Your Data Protection Rights
Depending on your location, you may have the following rights:
For All Users:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data ("Right to be Forgotten").
Portability: Request transfer of your data to another service provider.
For California Residents (CCPA/CPRA):
Right to Know: Request details about the categories of data collected and sold/shared.
Right to Opt-Out: Opt-out of the "sale" or "sharing" of your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
For EEA/UK Users (GDPR):
Right to Withdraw Consent: You may withdraw consent at any time where we rely on it to process your data.
Right to Object: Object to processing based on legitimate interests.
Right to Complain: You have the right to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us at [email protected].

8. Children's Privacy
Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children in this age group. If we become aware that we have collected such data, we will take steps to delete it immediately.

9. International Data Transfers
Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.
For EU Users: We utilize Standard Contractual Clauses (SCCs) and other legal mechanisms to ensure adequate protection of your data during international transfers.

10. Security of Your Data
We implement appropriate technical and organizational measures (including encryption, secure servers, and access controls) to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes may also be notified via an in-app

12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
By Email: [email protected]
By Mail: B3-1-13A, SOLARIS DUTAMAS, NO. 1 JALAN DUTAMAS, KUALA LUMPUR, WILAYAH PERSEKUTUAN
Data Protection Officer (if applicable): [email protected]