Manotu
Privacy Policy
Effective 23 October 2026 · Applies to the Manotu apps for Android and iOS and the Manotu service.
Ringkasnya: tempat dan sejarah peribadi anda kekal dalam telefon anda. Kami tidak menyimpannya di pelayan kami.
1. Data that stays on your device only
Home and Work, favourites and their labels, recent destinations, search history, places you add "just for me" and their photos, planned drives and settings are stored only in the app on your device. Manotu's servers do not receive or store them.
2. Backups (your storage, your choice)
You can back up that on-device data to your own Google Drive (a hidden app folder only Manotu can access,
scope drive.appdata), your own iCloud private database, or a file you export. Backups go straight from
your device to that storage. They never pass through Manotu's servers, and we cannot read them. You can protect a
backup with a passphrase that encrypts it on your device (Argon2id + XChaCha20-Poly1305). We never see the passphrase,
and if you lose it, the backup cannot be recovered.
Manotu's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Manotu accesses only its own backup files in your Drive's app folder, only to save and restore your backups, and transfers that data to no one.
3. We never know who you are
Your public contributions are credited to a random pseudonym that only your phone and your own backup can sign
for. We never ask for your email, phone number, name or a Google/Apple login to use Manotu. Your contributor tier (Baharu, Perak,
Emas) describes your public work, not you. When you vote on whether a community-added place exists, the vote is
linked to your pseudonym only until the place is decided; after that it is unlinked from you. Verifier identities
are never shown to anyone.
Kami tidak pernah tahu siapa anda: sumbangan anda dikreditkan kepada nama samaran rawak. Kami tidak pernah
meminta e-mel, nombor telefon atau nama anda untuk menggunakan Manotu.
4. Data we do process on our servers
| What | Why | How long |
|---|---|---|
| An anonymous device account (random id and token) | To accept your public contributions and prevent abuse | Until you delete your account |
| Contributor pseudonym, public signing key, tier and contribution counters | To credit and weigh public contributions | Until you delete your account |
| Your votes on whether a new place exists | To verify community-added places and prevent double votes | Linked to your pseudonym only until the place is decided; after that the vote is unlinked from you (kept only as an anonymous, salted count) |
| Speed points while navigating (position, speed, heading, time), tagged with a pseudonym that changes every hour | To compute live road traffic for everyone | Processed in memory and discarded within minutes; only road-level speeds (not linked to you) are kept |
| Things you choose to share publicly: road reports and votes, public places, reviews, photos | To show them on the map for all users | While relevant; reports expire automatically |
| Feedback you send: your message, and an optional rating and screenshot. Device info (app version, OS, model, screen size) only if you tick it; coarse location (rounded to ~1 km) only if you tick that separately | To fix bugs and improve the app | Up to 24 months, or until you delete your account |
| Crash reports, sent only if you agree after a crash: the stack trace and device info, scrubbed of locations and personal data on your phone before sending. We use no third-party crash SDKs | To find and fix crashes | 90 days |
| Searches you type: sent to our server to find results, never stored with your account or device. Search history stays on your phone. If a search finds nothing, we count the cleaned-up search text anonymously (emails, phone numbers, house numbers and postcodes removed), with only a ~11 km area and the week, and no account, token, IP address or exact location Carian yang tidak menemui apa-apa dikira tanpa nama (teks carian, kawasan ~11 km, minggu) untuk memperbaiki carian. Tiada akaun, IP atau lokasi tepat disimpan. | To learn which local words, brands and places our search is missing | Counts seen fewer than 5 times in a week are deleted when the week ends; all counts are deleted after 26 weeks |
| Route requests (start, stops, destination) | To calculate your route | Not stored beyond a 3-hour cache used for rerouting |
Photos are re-encoded on our server and all metadata, including GPS location, is removed before publishing.
5. If you leave your email or WhatsApp
When you send feedback or a crash report, you may choose to leave an email address or WhatsApp number so we
can reply. It is optional and asked for per report. It is used only to reply about that report, is never linked to
your pseudonym or profile, and is stored encrypted. It is deleted automatically 30 days after the report is closed,
and in any case after 90 days. You can delete it at any time from My feedback in the app, or by deleting your
account.
Jika anda memilih untuk meninggalkan e-mel/WhatsApp pada laporan, ia hanya digunakan untuk membalas
laporan itu dan kemudian dipadam.
6. What we never do
No advertising, no tracking or analytics SDKs, no selling or sharing of personal data, no building of location history about you. Crash reports are sent only if you agree, never contain your location, and go only to us, not to any third-party crash service.
7. Your choices and rights
You can delete any on-device data in the app, delete your backups from your own Drive/iCloud, and delete your Manotu account in Settings. That removes every server record linked to you; your public reports and reviews stay on the map but are anonymised. You may also contact us to access or correct data we hold, consistent with Malaysia's Personal Data Protection Act 2010.
8. Open source
Manotu is MIT-licensed. You can inspect exactly what the apps and server do at github.com/erymuzuan/manotu.
9. Children
Manotu is not directed at children under 13 and does not knowingly collect their data.
10. Changes and contact
We will post changes on this page and update the effective date. Contact: [email protected].