Privacy Policy
Last updated: 11 September 2026
This policy explains how Furontorumu ("we", "us") collects, uses and protects your personal data when you use the Sawargi app and services. We process personal data under Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP).
1. Our role and your committee's
Sawargi is a service used by communities (RT, RW, paguyuban, housing estates, clusters). Your community's committee decides what resident data is recorded in the app and is the data controller for its community's content. We act as the platform provider processing that data on the community's behalf, and as the controller of account and subscription-billing data.
2. What we collect
| Type of data | Examples | Source |
|---|---|---|
| Identity & contact | Name, email address, phone/WhatsApp number, gender, profile photo | You when you register, or the committee when they register you |
| Occupancy data | Block and house number, ownership/tenancy status, occupancy status, head of household, house contact number, photo of the house | You, or the committee / the house owner |
| Community financial data | Dues bills, payments, payment method, proof of transfer, cash income and expense records | The committee / treasurer, or you when you pay |
| Content you create | Marketplace listings, business profile and product catalogue, reports to the committee, poll votes, documents, comments | You |
| Device data | Notification token (FCM) so we can send you notifications | Automatic, when you sign in |
| Location | A security guard's GPS position only while they are on duty (after checking in), deleted when they check out. Otherwise, once, when you send an emergency alert (SOS), so recipients know where to go — that position stays attached to the emergency report | The guard's device; your device when you send an SOS |
| Activity records | Sign-in history (including IP address and device name/type, so you can recognise a sign-in that was not yours), and a trail of changes made by committee members (audit log) | Automatic |
Family members' data. A house owner can record family members who have no account (including children), limited to their name and occupancy details. Please make sure you are entitled to include that data.
Statistics for this website. On the sawargi.furontorumu.id website (not in the app) we count visits using GoatCounter, which we host on our own server. These statistics use no cookies and are not used to identify or track you: what is recorded is the page opened, the referring page, and the broad browser, operating system and country. Nothing is sent to any third party.
What we do not collect. We do not collect your credit or debit card number or your banking credentials. Online payments are processed by the payment-gateway provider; we only receive the status and the amount.
3. What it is used for
- Running the core functions: cash recording, raising dues bills, and reporting.
- Authenticating you and deciding your access rights according to your role in the community.
- Sending relevant notifications: new bills, reminders, announcements, and emergency alerts.
- Showing the resident, house, marketplace and business directories to community members entitled to see them.
- Keeping the service secure, preventing misuse, and providing an audit trail.
- Managing and invoicing the community's subscription with us.
We do not use your data for targeted advertising and do not sell or rent your personal data to anyone.
4. Who can see your data
- Members of your community, according to their role. For example: the committee can see resident records and bills; an ordinary resident sees the community reports and their own household's bills.
- The marketplace and business directory can be seen by residents of other communities in the same housing group, where your community belongs to one.
- A security guard's salary and address are visible only to authorised committee members, never to ordinary residents.
- We (Furontorumu) have limited access, only where it is needed for technical support, maintenance, or a legal obligation.
5. Third parties we use
| Party | What for | Data involved |
|---|---|---|
| Google Firebase Cloud Messaging | Sending notifications to your device | Device token, notification title and body |
| Google Sign-In (optional) | Signing in with a Google account | The email address and name on your Google account |
| Payment gateway (e.g. Midtrans) | Processing online payments | Amount, invoice number, and the payment details you enter on the gateway's page |
| OpenStreetMap | Drawing the map of an on-duty security guard's position | Your device's IP address (sent to the map server when the map loads); the guard's position is not sent to them |
| Email service | Sending account invitations, password reset codes, and security notices | Email address and message content |
| Google Gemini (AI service) | Reading photographed receipts and drafting text — only if your community subscribes to the Sawargi AI add-on | The scanned receipt photo; the short brief a committee member writes for a draft announcement, listing or business profile; the community's summary financial figures (totals, not per resident); the content of cash-recording WhatsApp messages. A resident's question about their own bill is answered directly from our database and is not sent to the AI service. |
| WhatsApp Business Cloud API (Meta) | Sending dues reminders and receiving cash-recording messages — only if your community subscribes to the WhatsApp Reminder add-on | The destination WhatsApp number (the house contact number), community name, name of the dues, amount, and due date. Residents' names are not sent. For cash recording over WhatsApp: the sender's number and the content of the message you send. |
The last two rows are paid add-ons that are off by default. For as long as your community does not subscribe to them, no data is sent to the AI service or to WhatsApp Business. Both are processed on Google's and Meta's servers, which are outside Indonesia; we send only the data named in the last column and give them no access to our database.
6. Storage and security
- Data is held on servers we run ourselves, in a data centre in Indonesia.
- All communication between the app and the server uses an encrypted connection (HTTPS/TLS).
- Every request is verified on the server: community data is isolated, and access rights are checked by role — this is never trusted to the app.
- Sensitive files such as proof of payment and documents are held in private storage and can only be opened through a time-limited link.
- A community's payment-gateway credentials are stored encrypted.
- We take regular backups so the service can be restored after an incident.
No system is entirely free of risk. In the event of a personal-data breach we will notify those affected and the relevant authority as UU PDP requires.
7. How long data is kept
- Financial data (cash, bills, payments) is kept for as long as the community uses the service, because it is the community's record of accountability.
- Notification history is deleted automatically after 3 months.
- Resident accounts that are no longer active are deactivated rather than deleted outright, so the community's payment history stays whole. Deletion can be requested — see the next section.
- A security guard's GPS position is held only for the duration of the shift and is gone once they check out.
- The position on an emergency (SOS) report is stored with that report and is not deleted automatically, because it is part of the community's record of the incident. You can ask for it to be deleted (see section 8).
8. Your rights
Under UU PDP you have the right to:
- know about and access the personal data we process about you;
- correct inaccurate data — some of it you can change yourself under Profile;
- ask for your personal data to be deleted;
- withdraw consent for particular processing;
- object, and to lodge a complaint.
To make a request, see the Delete account & data page or contact us through the Support page. We respond within a reasonable time, generally no more than 30 days.
Please note: some data (particularly the community's financial records) may still be kept where it is needed to meet a legal obligation or to keep the community's books whole. In that case your identifying data can be deleted or anonymised.
9. Device permissions
- Notifications — to send bill notices, announcements, and emergency alerts.
- Camera & gallery — only when you upload a profile photo, a photo of the house, proof of payment, or a listing photo.
- Location — for security-guard accounts while on duty, and once when you press the emergency (SOS) button. The app does not track residents' location continuously, and does not take your location when you are not sending an SOS.
You can withdraw any permission at any time from your device's system settings.
10. Children
Sawargi is intended for adult residents and community committees. We do not knowingly create accounts for children under 18 without a parent or guardian involved. A house owner may list family members' names (including children) as part of the occupancy record, without an account of their own.
11. Changes to this policy
We may update this policy as the service develops. Material changes will be announced in the app or by email. The date of the last update is at the top of this page.
12. Operator identity
The Sawargi service is operated by Harry Nuril Anwar as the owner of a sole proprietorship (usaha perorangan) lawfully registered in the Republic of Indonesia under NIB 2008260082433 and trading as Furontorumu, based in Bandung, Indonesia.
13. Contact us
Questions or requests about personal data can be sent to:
support@furontorumu.id