Privacy Policy

Last updated: 12 November 2026

NOWTEEK is a ship management app made by PT Kalanara Group Indonesia ("PT KGI", "we"). This policy explains what personal data NOWTEEK holds, why, where it is kept and what you can ask of us. It follows Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP").

1. Who is responsible

A shipping company that subscribes to NOWTEEK (the "Customer") decides what data about its office staff and crew goes into the app and why. For that data the Customer is the data controller and PT KGI processes it on the Customer's behalf, under the Terms & Conditions. For the Customer's account, billing and contact details, PT KGI is the controller.

2. What we hold

3. Why we use it

To run the app for the Customer: signing people in, showing each role what it needs, sending notifications and e-mails the app sends as part of its work (invitations, password resets, purchase orders to vendors, reminders), billing the subscription, keeping the app secure (audit logs, fraud and abuse prevention) and meeting legal obligations. We do not sell personal data and do not use it for advertising.

4. Who can see it

Inside a Customer's account, each role sees only what its work needs. Crew personal data is visible only to the office roles that manage crew; injury details only to the roles that handle incidents. PT KGI staff access a Customer's data only to provide support the Customer asked for, to keep the service running, or when the law requires it, and such access is logged.

5. Where it is kept, and transfers outside Indonesia

The application and its database run on a server in Jakarta, Indonesia. Some services we rely on are outside Indonesia:

Where data leaves Indonesia, we use providers bound by contract to protect it at a level at least equal to UU PDP, as Article 56 requires. By using NOWTEEK, the Customer confirms it has informed its staff and crew of this and, where needed, obtained their consent.

6. How long we keep it

Data is kept while the subscription is active. After a subscription ends, the Customer's data is kept for 12 months so the Customer can come back, then permanently deleted, including from backups within their normal rotation. Records the law requires us to keep longer, such as invoices, are kept for the period the law sets.

7. Security

Connections are encrypted (HTTPS). Passwords are stored only as strong one-way hashes. Each Customer's data is separated from every other Customer's at the database level. Sensitive crew data and every uploaded file are encrypted at rest. Sign-ins are rate-limited and accounts lock after repeated failures. If a breach affects personal data, we will notify the affected Customer and, where UU PDP requires it, the data subjects and the authority, within 3 x 24 hours of becoming aware of it.

8. Your rights

Under UU PDP you may ask for access to your personal data, a correction, a copy, deletion or restriction of processing, and you may withdraw consent you gave. If you are crew or staff of a Customer, please contact your company first: it controls your data in NOWTEEK, and we will help it answer. You can also write to us directly at the address below.

9. Contact

PT Kalanara Group Indonesia, NOWTEEK
E-mail: deepseastudioindonesia@gmail.com
WhatsApp: +62 822 9995 2021

10. Changes

We will post any change to this policy on this page and tell Customers by e-mail before a material change takes effect.