Last updated: April 13, 2026
This Privacy Policy describes how Hush ("Company," "we," "us," or "our") collects, uses, shares, and protects information about you when you use our Platform (website, mobile web app, and related services).
We take your privacy seriously. This policy explains your rights and choices with respect to your personal information. By using the Platform, you agree to the collection and use of information as described in this Privacy Policy.
This policy applies to all users: customers, therapists, and business partners. Different sections may apply to different user types — relevant sections are marked accordingly.
When you create an account, we collect your name, email address, phone number (including WhatsApp number), and any profile information you provide. For Google OAuth sign-in, we receive your name, email, and profile photo from Google.
As part of therapist verification, we require you to upload a photo of your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk). This document contains your legal name, date of birth, address, and national ID number.
🔒 How we protect your KTP:
We collect location data in several contexts:
GPS tracking only occurs during active bookings when the therapist is en route. Tracking stops once the therapist marks "Arrived." Old location updates are purged from our systems on a regular schedule.
We do not store your full card number, CVV, or bank details on our servers. All payment data is handled directly by Stripe, our PCI DSS Level 1 certified payment processor. We store only:
For therapists, we collect bank account details (bank name, account number, and account holder name) solely for processing payouts via Wise. This information is stored securely and used only for payout processing.
We collect booking details including service type, duration, location (for outcall), scheduled time, any special requests, session notes, and session completion status. This data is necessary to fulfill the service and resolve any disputes.
When you submit a review, we collect your rating, written comment, and booking reference. Reviews are publicly displayed on therapist profiles. If you submit a review as a guest, your name (as provided during booking) will appear on the review.
We collect anonymized analytics events to understand how the Platform is used, improve our service, and troubleshoot issues. This includes pages visited, features used, session duration, device type, and general location (country/city level, not precise GPS). This data is aggregated and not linked to your personal identity.
We use your information for the following purposes:
We work with the following third-party service providers to operate the Platform. Each provider processes your data as described:
Payment Processing
Payout Processing
Location Services
WhatsApp & SMS Communications
Database & Authentication
AI Features
Email Delivery
Error Monitoring
Hosting & Deployment
We do not sell your personal information to third parties. We do not use your data for advertising purposes or share it with data brokers.
We retain different types of data for different periods:
| Data Type | Retention Period |
|---|---|
| GPS location updates | Purged daily (raw updates older than 30 days) |
| Account information | For the lifetime of your account + 2 years after deletion |
| Booking records | 7 years (financial records requirement) |
| Payment transaction data | 7 years (financial compliance) |
| KTP identity documents | For the lifetime of the therapist account + 1 year |
| Reviews | Indefinitely (unless removed per our content policy) |
| Analytics events | 2 years |
| Support tickets | 3 years after resolution |
Depending on your location, you may have the following rights with respect to your personal data:
To exercise any of these rights, contact us via WhatsApp support or email privacy@hushbali.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.
We implement technical and organizational measures to protect your personal data:
No system is completely secure. In the event of a data breach affecting your personal data, we will notify you in accordance with applicable law.
The Platform is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.
Hush is a US-based company serving users in Indonesia. Your data may be transferred to and processed in the United States and other countries where our service providers operate (including Stripe, Supabase, Vercel, and others listed above). By using the Platform, you consent to these international transfers.
We ensure that transfers are subject to appropriate safeguards, including standard contractual clauses or the data protection frameworks of our service providers.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or in-app notification and update the "Last updated" date at the top. Your continued use of the Platform after changes constitute your acceptance of the updated policy.
For privacy questions, requests to exercise your rights, or to report a privacy concern:
We take all privacy inquiries seriously and aim to respond within 5 business days.
Last updated: April 13, 2026