PELNI Mobile Privacy Policy
Published by PT PELNI (Persero). How the PELNI Mobile app accesses, collects, uses, shares, and protects your data.
Effective: October 2024 · Last updated: March 2026
App: PELNI Mobile
Developer and data controller: PT PELNI (Persero), Kantor Pusat, Jl. Gajah Mada No. 14, Jakarta Pusat 10130, DKI Jakarta, Indonesia
Contact: infopelni@pelni.co.id · Contact Center 021 - 162 · www.pelni.co.id
1About this Privacy Policy
This Privacy Policy explains how PT PELNI (Persero) ("PELNI", "we", "us") accesses, collects, uses, stores, shares, and protects personal and sensitive user data when you use the PELNI Mobile app (the "App") on Android and iOS and the services reached through it.
This Policy, together with the disclosures shown inside the App when data is requested (such as permission prompts), describes our data practices. It is not limited to the categories shown in the Google Play Data safety section: a practice described here applies even if it is not listed there.
We process personal data in line with Indonesian law, including Law No. 27 of 2022 on Personal Data Protection (UU PDP), and the Google Play User Data policy.
2Data we access, collect, use, and share (summary)
| Data | How we get it | Why we use it | Shared with | Required? |
|---|---|---|---|---|
| Name, email address, phone number | You enter it, or Google provides it if you use Sign in with Google | Account, login, booking, notifications, support | Service providers; Google (sign-in) | Required for an account |
| Password (email registration) | You enter it | Authentication; stored in hashed form | Not shared | Required for email sign-up |
| Passenger details (full name, identity number such as NIK or passport, date of birth, gender, contact) | You enter it for each passenger | Ticketing, verification, passenger manifest | Port operators; authorities where law requires | Required to book |
| Booking and trip details | You and the booking system | Reservations, e-tickets, boarding, support | Not shared | Required to book |
| Payment details (method, transaction ID, amount, status, saved payment token) | You enter it; payment partner returns the result | Payment, refunds, fraud prevention, accounting | Payment partners and banks | Required to pay |
| Device and app data (model, OS, app version, language, app instance ID, IP address) | Automatically | Operation, security, compatibility | Google/Firebase; hosting providers | Automatic |
| Crash logs and performance data | Automatically | Find and fix errors | Not shared | Automatic |
| Support messages and attachments | You send them | Respond to requests and complaints | Not shared | Optional |
3Data you provide
- Account data: name, email, phone number, password, and an optional profile photo.
- Sign in with Google: if you choose it, Google gives us your name, email address, profile photo, and Google account identifier. We never receive your Google password.
- Passenger and booking data: details of each traveler you add, saved passenger lists, and booking information.
- Payment data: your chosen payment method, transaction records, and a payment token for saved methods.
- Communications: messages, feedback, ratings, survey answers, and attachments you send us.
4Data accessed through device permissions
The App asks for a permission only when a feature needs it, and explains why at that moment. You can allow or revoke permissions at any time in your device settings. Refusing a permission only disables the feature that needs it.
| Permission | Why we access it | Stays on device or sent to us? |
|---|---|---|
| Notifications | Booking confirmations, payment reminders, schedule changes | Token sent to us and Firebase Cloud Messaging |
| Location | show nearby ports | Approximate/precise; foreground only |
5Personal and sensitive data
Some data we handle is sensitive, including government identity numbers, payment information, and (if enabled) location. We use it only for the purposes in section 6, share it only as described in section 7, and protect it as described in section 8. We do not use sensitive data for advertising and we do not sell it.
6How we use your data
- Create and manage your account and authenticate you.
- Process bookings, ticketing, boarding, rescheduling, cancellations, and refunds.
- Process payments and detect and prevent fraud and misuse.
- Send service messages: confirmations, e-tickets, schedule changes, and security alerts.
- Provide customer support and handle complaints.
- Maintain security, performance, and reliability, and fix crashes.
- Analyze usage in aggregate to improve the App.
- Meet legal and regulatory duties, including passenger manifests and maritime safety requirements.
- Send promotional messages, only where you have agreed. You can opt out at any time.
Our legal bases are your consent, performance of a contract with you, compliance with legal obligations, and our legitimate interests, as permitted by law.
8Your rights
Subject to applicable law, you may access your data, correct it, request deletion, withdraw consent, object to or restrict processing, receive a copy of your data, and opt out of marketing and push notifications. To exercise these rights, use the App's settings or contact us (section 12). We may need to verify your identity first and will respond within the time the law requires. You may also complain to the competent data protection authority.
9International transfers
Some providers, including Google/Firebase, may process data on servers outside Indonesia. When we transfer personal data abroad, we take steps to protect it as the law requires, for example through contractual safeguards.
10Children
The App is not directed at children under 17. A parent or legal guardian may book travel for a minor and provide the minor's passenger details, and is responsible for doing so lawfully. We do not knowingly create accounts for children. If you believe a child's data was provided without proper consent, contact us and we will delete it.
11Changes to this Policy
We may update this Policy. The current version is always available in the App and at customers privacy policy, with the "Last updated" date. For material changes we will give additional notice in the App and obtain consent where required.
12Contact us
PT PELNI (Persero)
Kantor Pusat, Jl. Gajah Mada No. 14, Jakarta Pusat 10130, DKI Jakarta, Indonesia
Email: infopelni@pelni.co.id
Contact Center: 021 - 162
Website: www.pelni.co.id