The TES mobile application (the "App") is published by TERAHERTZ EXPERIENCE SPACE SDN. BHD. (Company No. 202401036617), 52A, Jalan Eco Forest 6/1C, Eco Forest Semenyih, 43500 Semenyih, Selangor, Malaysia. This policy describes what the App collects and why.
1. What the App collects
| Data | When | Why | Shared with |
|---|---|---|---|
| Mobile number, name, email (optional), date of birth (optional) | Registration and profile | Create and secure your account, verify your mobile number during registration, identify you at our outlets | Infobip and WhatsApp/Meta (registration passcode delivery to your number); Fiuu (billing details at payment) |
| Referral code you enter | Registration | Link your account to the Distributor who referred you | The Distributor sees a masked name, join date and status only |
| Delivery addresses | Checkout | Deliver orders | Courier partner |
| Orders, payment references, TES Credit, Points and Referrer Credit records | Use of the App | Provide purchases, loyalty and Distributor features, receipts, refunds | Fiuu (payment status only; card details are entered on Fiuu's secure page and never reach the App or our servers) |
| Appointment bookings and notes, including any health information you choose to give | Booking | Deliver services safely | Not shared |
| Push notification token, device platform and model, app version, language | App launch | Send notifications you opt in to, support, compatibility | Google Firebase (Cloud Messaging) |
| One-time passcodes and their delivery status | Registration | Verify that the mobile number belongs to you | Infobip and WhatsApp/Meta. The passcode is stored only as a keyed hash and deleted shortly after it expires |
| Email address and a verification code sent to it | Before your first online payment | The payment gateway issues its invoice to your email and we send your receipt there. You can skip this and pay at our counter instead | Email service provider; the address is passed to Fiuu with the payment |
| Crash and diagnostic logs (pseudonymous) | On errors | Fix faults | Google Firebase (Crashlytics) |
| Profile photo | Only if you add one | Personalise your profile | Not shared |
2. What the App does not do
- No precise or background location tracking. Outlet maps open in your maps app.
- No access to your contacts, photos (beyond a photo you choose to upload), microphone or health app data.
- No advertising identifiers, ad networks or cross-app tracking. We do not sell personal data.
- No in-app purchases of digital content; payments are for physical products and in-person services.
3. Permissions the App may ask for
| Permission | Purpose | Required |
|---|---|---|
| Notifications | Order and appointment updates, and marketing you opt in to | No |
| Camera / photo library | Add a profile photo | No |
| Network access | Operate the App | Yes |
You can change permissions in your device settings at any time.
4. Third-party services used by the App
Fiuu (payment gateway, opened in a secure in-app browser), Infobip (delivering registration passcodes over WhatsApp), WhatsApp / Meta Platforms (carrying the passcode message to your WhatsApp account), Google Firebase (Cloud Messaging for push notifications, Crashlytics for crash reports), Cloudflare (application hosting and content delivery) and Supabase (database, servers in Singapore). Each processes data under its own terms and our data-protection agreements.
Receiving a registration passcode over WhatsApp means your number is processed by WhatsApp under its own privacy policy. SMS passcode delivery is not offered.
5. Marketing notifications
Marketing push notifications are sent only if you opt in. Turn them off in Me → Notifications or in device settings. Service notifications (order status, appointment reminders, security) are sent while your account is active.
6. Data retention and account deletion
- You can delete your account in the App under Me → Delete account. Deletion is confirmed by password re-authentication.
- On deletion, your profile, addresses, device tokens and notification preferences are removed and your identity is anonymised in our records within 30 days.
- Order, payment, loyalty and commission records are retained in anonymised or restricted form for 7 years to meet accounting and tax obligations, then deleted.
- Unused balances are forfeited on deletion unless the law or your Distributor Agreement provides otherwise; the App warns you before you confirm.
7. Security
Data is encrypted in transit (TLS) and at rest. Your mobile number is verified once by WhatsApp passcode during registration; normal login uses your mobile number and password. Sessions can be revoked from the App. Access to personal data by our staff is role-based and logged.
8. Children
The App is intended for users aged 18 and above. We do not knowingly collect data from children.
9. Your rights
You may request access to or correction of your personal data, withdraw consent, or limit processing by contacting us on WhatsApp at 012-359 2688, as described in the Privacy Policy.
10. Changes
We will update this policy when the App's data practices change and will show the new effective date here and in the App.
11. Contact
TERAHERTZ EXPERIENCE SPACE SDN. BHD. · WhatsApp 012-359 2688 · 52A, Jalan Eco Forest 6/1C, Eco Forest Semenyih, 43500 Semenyih, Selangor