Privacy Policy

1. Introduction

Grid Developer ("we," "our," or "us") operates the Sambut newborn preparation assistant application (the "App") for Android and iOS. This Privacy Policy explains how the App handles data and protects your privacy. Sambut helps expecting parents in Indonesia prepare for their baby's arrival with a personalised checklist, pregnancy milestones, product recommendations, a shareable baby registry, and cashback on marketplace purchases. Please read this policy carefully. If you do not agree with its terms, please discontinue use of the App.

2. Data Collection

Unlike a purely offline utility, Sambut needs an account so that your checklist, milestones, registry, and cashback balance can stay in sync across your devices. We collect only what is needed to deliver those features:

• Account information — your email address and password hash (or your Google account identity when you sign in with Google), and your display name.
• Baby profile — the estimated due date (or the fact that you do not know it yet), which child this is (first, second, third or later), and your preparation budget range.
• Checklist and milestone progress — which items you have prepared and the quantities you entered, so we can calculate your readiness score.
• Registry information — the items on your registry, the quantities requested and purchased, the name and email of a person who claimed a gift, and the shipping address you chose to store for deliveries.
• Cashback and transaction records — clicks we track, confirmed commissions, balances, and your withdrawal history.
• Withdrawal account details — the bank account or e-wallet (GoPay, OVO, DANA, or LinkAja) you choose to receive payouts, stored so we can send your money.
• Usage and analytics events — anonymous product interaction events such as onboarding completed, checklist item updated, or product viewed, used to improve the App.

3. How Your Data Is Used

Your due date, budget, and checklist progress are used to generate your personalised preparation plan, your readiness score, and the priority recommendations shown to you. Your due date also drives the pregnancy week and milestone timeline displayed in the App.

Registry information is used to build the shared list that family and friends see, and to route gifts to the shipping address you provided. Withdrawal account details are used only to pay out cashback you have earned.

4. Cashback, Affiliate Links & Purchases

Sambut never handles your payment. When you tap "Beli" on a recommended product, we record the click and then send you to the partner marketplace (for example Shopee, TikTok Shop, or Tokopedia) to complete the purchase on your own account, under that marketplace's own terms.

Cashback is generated from affiliate commission on purchases you make through those links. It is confirmed only after the store completes its return or claim window, which is usually 7 to 14 days after the transaction. The estimated cashback amounts shown in the App are estimates and may change according to each marketplace's terms.

We also track clicks for products you add to your registry from a marketplace link, so that a gift bought through your registry can earn cashback for you.

5. Registry Sharing

A registry is shared by you, on purpose, using a link or a message you send. The recipient sees the items on your list, the requested quantity, and the price. Whether the address is shown on the public registry page is controlled by a toggle you set; the address is still stored securely on our servers so that claimed gifts can be shipped.

When someone claims a gift, their name and email address are recorded so that you and the recipient can track what has been bought. You can remove a registry item at any time, and deleting your account removes the registry with it.

6. Notifications

Sambut sends three optional daily reminders — a due date countdown, a notice about items still missing from the hospital bag, and a notice when cashback becomes available to withdraw — plus push notifications when a cashback status changes or a registry item is claimed. Each reminder can be switched off individually, and all push notifications can be disabled from your device settings.

These reminders are generated from the data you entered and are not used for advertising.

7. Permissions Used

Sambut requests only a minimal set of permissions:

7.1 Notifications

Used for your daily reminders and for cashback and registry updates. Declining this permission only disables reminders; every other feature keeps working.

7.2 Internet

Used to sync your checklist, registry, and cashback balance with our servers, to sign in, to send and receive push notifications, and to open the marketplace pages you choose to shop on.

7.3 In-App Browser

Used only when you paste a marketplace product link into your registry, so the product title, price, and image can be read from that page for you. The in-app browser is not used to track you elsewhere.

7.4 Device Permissions Not Requested

Sambut does not request camera, microphone, contacts, photo library, SMS, precise or background location, Bluetooth, or health permissions. It cannot access any of them.

8. Third-Party Services

Sambut relies on the following services, each governed by its own privacy policy:

• Firebase Authentication — Handles account creation, sign-in, and password management on our behalf. Google Privacy Policy.
• Google Sign-In — Used only if you choose to sign in with your Google account.
• Firebase Cloud Messaging — Delivers the push notifications described in section 6.
• Partner marketplaces — Shopee, TikTok Shop, Tokopedia and other stores listed in the App handle the actual checkout, payment, and delivery of anything you buy. Your purchase is concluded under those stores' policies, not ours.
• Your device's share sheet — When you share a registry link, the operating system hands it to the app or service you pick. We are not involved in that transfer.

9. Data Storage, Security & Retention

Your account data, checklist progress, registry, and cashback ledger are stored on our servers so they remain available across your devices and so that cashback can be paid out. We apply reasonable technical and organisational measures to protect this data in transit and at rest, and we limit staff access to what is needed to operate the service.

To delete your data:

• Delete your account from within the App (Profile → Settings → Delete Account), which removes your profile, checklist, registry, and cashback history, or
• Uninstall the App and contact us at the address in section 12 to request erasure of your server-side account data.

Records required for accounting or legal obligations, such as completed cashback and withdrawal transactions, may be retained for the period required by applicable law. Uninstalling the App alone does not delete your server-side account.

10. Children's Privacy

Sambut is intended for adults who are expecting or preparing for a baby. It is not directed at children under the age of 13, and the App is not intended to collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App's features or applicable regulations. We will notify you of any significant changes by updating the "Last Updated" date at the top of this page. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the App's data practices, please contact us: