Privacy Policy

1. Information We Collect

• Account information: display name, email address, encrypted password, profile image, member ID.
• Social sign-in data: when you sign in with Google, LINE, Facebook, or TikTok, we receive your basic profile (name, email if available, profile picture, provider user ID).
• Usage data: missions completed, learning progress, XP, achievements, in-app activity, device and browser information, approximate location derived from IP.
• User content: posts, comments, media you upload, messages you send within the community.
• Cookies and similar technologies: used to keep you signed in, remember preferences, and measure usage.

2. How We Use Information

• To provide, maintain, and improve the Service.
• To authenticate you and secure your account.
• To personalize your experience (recommended missions, learning paths, community feed).
• To communicate updates, security alerts, and support messages.
• To detect, prevent, and address fraud or abuse.
• To comply with legal obligations.

3. Legal Bases

Where applicable, we process personal data on the bases of: your consent, performance of a contract with you, our legitimate interests (such as keeping the Service safe), and compliance with legal obligations (including Thailand's PDPA B.E. 2562).

4. Sharing of Information

We do not sell your personal data. We share information only with:

• Service providers that host our infrastructure, provide analytics, email delivery, and AI processing, bound by confidentiality and data-protection terms.
• Authentication providers (Google, LINE, Facebook, TikTok) when you choose to sign in with them.
• Legal authorities when required by law or to protect our rights and users' safety.

5. Data Retention

We retain personal data only as long as needed to provide the Service and for legitimate business or legal purposes. When you delete your account, we remove or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

6. Security

We apply administrative, technical, and physical safeguards including encryption in transit, hashed passwords, row-level security on our database, and access controls. No method of transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent. Contact us using the details below to exercise these rights.

8. Children

The Service is not directed to children under 13 (or the minimum age required by your country). We do not knowingly collect data from such children.

9. International Transfers

Your data may be processed in countries other than your own. We take steps to ensure an adequate level of protection for those transfers.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service. The "Last updated" date above reflects the most recent revision.

11. Contact

For privacy questions or to exercise your rights, contact us at support@m1m.club.