Privacy Policy
Last updated 28 September 2026
This policy explains what PT Clove Group (“MODE”, “we”) collects when you use the MODE iOS app, why we collect it, who we share it with, and how to get it deleted.
What we collect
| Account | Your name and email address. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple’s relay address. You may also add a phone or WhatsApp number and dietary preferences. |
|---|---|
| Orders | What you ordered, when, the amount paid, and loyalty points earned or redeemed. |
| Delivery addresses | Addresses you save, and the delivery address on each order. Address search is powered by Google Places. |
| Location | The app asks for location permission to suggest the MODE store nearest you, and to show where you are on the map when you pin a delivery address. Your location is used on your phone only: it is not sent to us or stored. You can say no and choose your store and address yourself. The delivery address you type or pin is saved with your order. |
| Payment | We never receive or store your card number. Card details are encrypted on your device by our payment provider’s SDK and exchanged for a token. We only see the token, the last four digits, the card brand, and whether the payment succeeded. |
| Device | After an order, the app asks whether it may send you order updates. If you allow it, we store your phone’s push notification token with your account and use it only to tell you when an order is ready, on its way or delivered, never for marketing. Signing out removes it from that phone, and deleting your account deletes it. We do not collect any other device identifier. |
| Usage analytics | Which screens you open and which actions you take, plus crash and error reports, so we can find and fix problems. This is tied to your account identifier. |
| Session recordings | We record how the app is used so we can see where people get stuck. The recording captures the screen as it appears to you, which means it can include your name, your saved delivery addresses and what you ordered. Anything you type into a text field — including card details — is masked before it leaves your device. Recordings are tied to your account identifier and are stored by our analytics provider. |
| Photos and camera | We do not use your camera and we do not access your photo library. The meal share card is drawn on your device from your order, and handed to the standard iOS share sheet. |
Why we collect it
- To take, prepare, and deliver your order, and to take payment for it.
- To run the loyalty and referral programme.
- To keep you updated on the status of an order you have placed.
- To fix bugs and understand which parts of the app people struggle with.
- To meet our accounting and tax obligations.
We do not sell your personal data, and we do not use it for third-party advertising.
Who we share it with
We share the minimum each provider needs to do its job:
| Supabase | Hosts our database and handles sign-in. |
|---|---|
| Xendit | Processes card payments. Receives your card details directly from your device, not from us. |
| GoSend (Gojek) | Delivers your order. Receives your name, the delivery address, a contact number and any delivery notes. |
| Runchise | Our point-of-sale system. Receives the order so the kitchen can make it. |
| Address search and autocomplete. | |
| Apple | Sign in with Apple. |
| PostHog | Product analytics. |
Deleting your account
You can delete your account from inside the app at any time: Profile → Terms and Privacy → Delete my account. It takes effect immediately and cannot be undone.
When you delete your account we:
- remove your name, email, phone, WhatsApp number and profile photo;
- delete your saved delivery addresses;
- block any future sign-in with that account.
We keep a record of past orders and loyalty transactions with your personal details removed, because we are required to retain transaction records for accounting and tax. Those records can no longer be connected back to you through the app.
Where your data is processed
MODE operates in Indonesia, but several of the providers above run outside it. Our database and sign-in are hosted by Supabase, product analytics and session recordings by PostHog, and address search by Google, all on infrastructure located outside Indonesia. Payments are processed by Xendit, and deliveries are made by GoSend (Gojek), both operating in the region.
This means your personal data is transferred out of Indonesia to be processed. We only send each provider the minimum it needs, and each is bound by its own contractual obligations to protect it. If you would rather your data was not processed this way, the only option is not to use the app, and you can delete your account at any time using the steps below.
How long we keep things
Account and address data is kept while your account is open, and removed when you delete it. Anonymised order records are kept for as long as accounting and tax rules require. Analytics events are retained on a rolling basis by our analytics provider.
Children
MODE is not directed at children and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. The fastest route to deletion is the in-app option above. For anything else, contact us.
Changes
If we change how we handle your data we will update this page and change the date at the top.
Contact
PT Clove Group, Seseh, Bali, Indonesia
admin@modemarketbali.com