Privacy Policy

This Privacy Policy explains how SoJuice Sdn Bhd (1604394-D) ("SoJuice", "we", "us", or "our") collects, uses, discloses, stores, and protects personal data when you use the SoJuice Loyalty mobile application, related websites (including legal and support pages), kiosk and staff tools, and online services (together, the "Service").

For the purposes of Malaysia's Personal Data Protection Act 2010 ("PDPA"), SoJuice Sdn Bhd (1604394-D) is the data user responsible for the personal data described in this policy.

Privacy and PDPA requests: support@sojuice.com.my. A short rights summary is also available on our PDPA page.

This policy applies to customers who sign in with a phone number, people who receive gift cards or referral invites, visitors who open our public support or legal pages, and (where relevant) processing of limited staff identifiers in audit logs for the admin console. Staff HR data is covered by separate employment policies.

By using the Service, you acknowledge this Privacy Policy. Where the PDPA requires consent for a specific processing activity (for example marketing), we will ask for that consent separately.

Depending on how you use the Service, we may process the following categories of personal data:

3.1 Account and contact data. Malaysian mobile phone number (required for OTP sign-in); optional name, email address, and date of birth; optional profile photo if you upload one from your device library.

3.2 Loyalty and commerce data. Points balance and ledger entries, stamp/chop progress, reward and voucher records, referral codes and progress, gift-card balances and ledger events, pickup orders and line items, cart and payment status, selected outlet, and related timestamps.

3.3 Authentication and security data. OTP challenge metadata (delivery status; SMS codes are not stored long-term after verification), session and refresh tokens, short-lived QR tokens for counter lookup and redemption, and security/audit logs used for fraud prevention and accountability.

3.4 Device and notification data. Device platform (iOS/Android), app-generated device identifiers used for push registration, Expo push tokens, notification preferences (marketing and transactional consent), and notification delivery records.

3.5 Payment references. Payment intent identifiers, payment-provider references (for example Billplz), amounts, currency, status, and settlement metadata needed to issue or top up gift cards or wallet credit. We do not store full payment card numbers or bank account numbers in the SoJuice app. Card entry, if any, is handled on the payment provider's pages.

3.6 Support and feedback. Messages you send to support, in-app case details, and any evidence you choose to provide (order references, screenshots descriptions, outlet and visit times).

3.7 Usage and diagnostics. Product analytics events (for example sign-in, QR generated, reward redeem, checkout), crash and performance diagnostics (for example Sentry), and technical logs needed to keep the Service reliable and secure.

We do not require continuous location, contacts address-book access, or camera capture for core loyalty features. Profile photo access is only requested if you use the system photo picker. Marketing messages default to off until you opt in.

We collect personal data from:

• You directly — sign-up, profile edits, checkout, gift claims, support forms, and consent toggles.
• Your device and the app — sessions, push tokens, diagnostics, and technical logs.
• Participating outlets and staff tools — counter earn/redeem after you present a live QR or phone number.
• Service providers — SMS delivery status, payment confirmation, push delivery receipts, and hosting/security logs.

We use personal data to:

• Verify your identity with SMS OTP and maintain secure sessions.
• Operate loyalty points, stamps, rewards, vouchers, referrals, and member QR codes.
• Process gift cards, wallet top-ups, and wallet-paid pickup orders.
• Enable outlet staff to look up and redeem eligible rewards or gift-card balances when you present a live QR or phone number.
• Send transactional notifications (receipts, order status, security) when enabled, and marketing/promo messages only with marketing consent.
• Prevent fraud, abuse, double-redemption, and payment disputes.
• Provide customer support and handle privacy or deletion requests.
• Improve reliability, diagnose errors, and understand product usage in aggregate or identifiable form as needed for support and security.
• Meet legal, accounting, tax, and regulatory obligations in Malaysia and other applicable jurisdictions.

Where the PDPA applies, we process personal data based on one or more of: your consent (for example marketing messages and optional profile fields); performance of a contract or service you request (loyalty account, orders, gift cards); compliance with legal obligations; and legitimate interests in securing the Service, preventing fraud, and improving operations, balanced against your rights.

You may withdraw marketing consent at any time in the app Account settings or by emailing us. Withdrawal does not affect processing needed for transactional service messages, security, fraud prevention, or legal retention.

We do not sell your personal data. We share data only as needed with:

• Staff at participating SoJuice outlets for counter service and order fulfilment.
• Service Providers that provide hosting, databases, object storage, SMS OTP, payment processing (including payment intent references), email, push notification tokens and delivery, analytics, and error monitoring — under contracts that limit use to providing services to us.
• Professional advisers (legal, audit) under confidentiality duties.
• Authorities, courts, or regulators when required by law or to protect rights, safety, and property.

Provider arrangements may change as we improve the Service. We remain responsible for personal data we control under the PDPA.

Some providers may process data outside Malaysia (for example global cloud, analytics, or push infrastructure). Where personal data is transferred outside Malaysia, we take reasonable steps consistent with the PDPA and provider contracts so that the data remains protected.

We keep personal data only as long as needed for the purposes above and for security, fraud prevention, accounting, or operational history.

• Active account contact details (phone, name, email, avatar, consents) are removed or de-identified when you delete your account, subject to the next point.
• Sessions, push tokens, and live QR tokens are revoked or expired on logout, expiry, or deletion.
• Points ledger, stamp history, orders, gift cards, payment references, and audit logs may be retained longer for fraud prevention, accounting, reconciliation, tax, dispute handling, and legal obligations even after account contact details are removed.

When data is no longer needed, we delete or anonymise it where practicable.

We use technical and organisational measures appropriate to the risk, including HTTPS/TLS in transit, access controls for staff tools, short-lived QR tokens, session authentication, and monitoring. No method of transmission or storage is completely secure. Keep OTP codes and devices private and log out on shared devices.

Subject to the PDPA and applicable exceptions, you may:

• Access personal data we hold about you.
• Request correction of inaccurate data.
• Limit processing in certain circumstances.
• Withdraw consent for marketing.
• Request account deletion through the app or as described on our Account Deletion page.

To exercise rights, email support@sojuice.com.my and include the mobile number on the account. We may verify that you control that number before fulfilling a request. You may also write to us at the registered address in Section 1.

The Service is intended for customers who can lawfully create a loyalty account and use participating outlets. It is not directed at children under 13. If you believe we have collected data from a child inappropriately, contact us and we will take reasonable steps to delete it.

Transactional notifications (order status, security, service notices) may be sent when you enable notifications and transactional preferences allow. Marketing or promotional content requires marketing consent (defaults to off) and can be changed in Account settings. You can also disable system notifications in device settings.

The mobile app primarily uses app storage and secure storage for sessions and preferences rather than browser cookies. Our websites (legal pages, staff console) may use essential cookies or similar technologies required to operate securely. Analytics tools may use device or app identifiers as described above.

The Service may link to payment pages or third-party sites. Their privacy practices are governed by their own policies. Food and beverage service at physical outlets may also involve the outlet's own processes for preparation, allergens, and receipts.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be highlighted in the app or on this page. Continued use of the Service after an update means you acknowledge the revised policy.

Data protection / privacy enquiries for SoJuice Sdn Bhd (1604394-D):

Related pages: Terms of Use · PDPA summary · Support · Account Deletion.