top of page

Privacy Policy

Palmz – The Gilis App

Last updated: 14 October 2026

 

1. Introduction

Welcome to Palmz ("Palmz", "we", "us" or "our").

Palmz is a mobile application and online platform designed to help residents and visitors to the Gili Islands discover local businesses, order food and drinks, arrange deliveries, book transport, and access local activities and experiences.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you use the Palmz mobile application, our website at https://www.palmz.app, or any related services (collectively, the "Services").

Palmz is operated by PT Gili Trawangan Wisata Royal, an Indonesian company, referred to in this policy as "Palmz".

By using our Services, you acknowledge the data practices described in this Privacy Policy. Where required by law, we will obtain your consent for specific uses of personal information.

 

2. Information We Collect

Depending on how you use Palmz, we may collect the following categories of information.

Personal and contact information

  • Your name

  • Email address

  • Telephone number

  • Account registration and profile details

  • Information you provide when contacting customer support

Orders, bookings and delivery information

  • Food and drink orders

  • Transport and activity bookings

  • Delivery addresses and location descriptions

  • Information necessary to coordinate deliveries or bookings

  • Transaction records, order history and booking references

  • Special requests or instructions you provide

Location information

We may collect or process location information when you provide a delivery address, select a location, or use location-based features within the app.

Where a feature requires access to your device's location, we will request the appropriate permission. You can manage location permissions through your device settings.

We do not require continuous background location tracking unless a specific feature is introduced that explicitly requests such permission.

Payment information

Payments may be processed through third-party payment providers, including Xendit or other payment services made available through Palmz.

These providers may collect and process payment information necessary to complete transactions, such as card details, payment account information or transaction authentication data.

Palmz may receive payment confirmations, payment status, transaction references and other information necessary to manage purchases, bookings and customer support.

We do not intend to store complete payment card numbers or card security codes on our own servers.

Device and technical information

When you use Palmz, we or our service providers may collect:

  • Device type and operating system

  • App version and device identifiers

  • IP address

  • Usage statistics and app interactions

  • Crash reports, technical errors and diagnostic information

  • Dates, times and frequency of app usage

This information helps us maintain, secure and improve the Services.

 

3. How We Use Your Information

We use personal information for legitimate business and service-related purposes, including:

  • Creating and managing user accounts

  • Processing food and drink orders

  • Organising deliveries

  • Facilitating transport and activity bookings

  • Processing and confirming payments

  • Communicating order and booking updates

  • Responding to customer enquiries and complaints

  • Improving app functionality and user experience

  • Identifying and resolving technical problems

  • Preventing fraud, misuse and unauthorised activity

  • Complying with applicable laws and regulations

Where legally required, we rely on an appropriate lawful basis, such as performing a contract with you, complying with legal obligations, pursuing legitimate business interests, or obtaining your consent.

We will only send promotional communications where permitted by applicable law. You may opt out of promotional emails or messages using the available unsubscribe method or by contacting us.

 

4. Sharing Your Information

Palmz may share relevant personal information with trusted third parties when necessary to deliver our Services.

These may include:

  • Restaurants, cafés and other merchants: We may share your name, order details, delivery information and relevant instructions with businesses fulfilling your orders.

  • Delivery personnel: Our delivery team may receive the customer details and location information necessary to complete deliveries.

  • Transport and activity providers: Where you make a booking through Palmz, relevant information may be shared with the service provider or booking partner responsible for fulfilling it.

  • Payment processors: Third-party providers may process payment details and transaction information in accordance with their own privacy policies.

  • Technology and infrastructure providers: We may use providers for application hosting, authentication, analytics, database management, communications and technical support.

  • Legal and regulatory authorities: We may disclose information where required by law or when reasonably necessary to protect our legal rights, investigate fraud or address security concerns.

  • We do not sell customers' personal information to third parties.

 

5. Third-Party Services

Palmz may use third-party platforms and software to operate and improve the Services, including, where applicable:

  • Google Firebase and related Google services

  • Google Analytics for Firebase

  • Google Play Services

  • Xendit and other payment processors

  • External transport and booking platforms

These services may process information according to their respective privacy policies.

Relevant policies include:

Links to external services do not mean Palmz controls their independent privacy practices.

​

Google Sign-In and Apple Sign-In

Palmz offers users the option to register or sign in using their Google or Apple account.

When users choose one of these authentication methods, Palmz may receive information provided by the selected authentication service, including:

  • A unique account identifier

  • An email address, where made available

  • A name and profile picture, where provided and authorised

Apple users may choose to hide their personal email address using Apple's private email relay service.

How we use this information

We use authentication information to create and manage Palmz accounts, verify user identities, maintain secure login sessions and provide access to our services.

How we store and share this information

Authentication information may be stored and processed using Google Firebase Authentication and associated secure application infrastructure.

We do not sell information obtained through Google Sign-In or Apple Sign-In. We do not share authentication information with third parties for their independent advertising purposes.

Palmz does not request access to Gmail messages, Google Drive files, Google Contacts, iCloud files or other unrelated personal account content.

Data retention and deletion

We retain authentication information while it is necessary to maintain your Palmz account and fulfil legitimate operational or legal obligations.

Users may request account deletion and removal of eligible associated personal information by contacting info@palmz.app.

For more information, please see:

 

6. Cookies and Similar Technologies

Our website and application may use cookies, device identifiers, local storage or similar technologies to maintain functionality, remember preferences, understand usage and improve performance.

Some technologies may be operated by third-party analytics or infrastructure providers.

Where consent is required, we will request it before using non-essential technologies. You can control certain tracking preferences through your browser or device settings.

 

7. Data Storage and Security

We implement reasonable technical and organisational measures intended to protect personal information against unauthorised access, misuse, disclosure, alteration or loss.

These measures may include secure hosting, restricted access controls, encrypted connections and protections provided by our technology partners.

However, no internet-based service or electronic storage system can be guaranteed to be completely secure.

Personal information may be processed or stored in countries outside your country of residence, including where our technology service providers operate. Where required, we apply appropriate safeguards for international data transfers.

 

8. Data Retention

We retain personal information only for as long as reasonably necessary to provide our Services, maintain business records, resolve disputes, prevent fraud and comply with legal obligations.

Different categories of information may have different retention periods depending on their purpose and applicable legal requirements.

When information is no longer required, we will delete, anonymise or securely dispose of it, subject to applicable legal obligations.

 

9. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Request access to personal information we hold about you

  • Request correction of inaccurate information

  • Request deletion of eligible personal information

  • Withdraw consent where processing relies on consent

  • Object to or request restrictions on certain processing

  • Request information about how your personal data is used

  • Lodge a complaint with an appropriate data protection authority

To exercise these rights, contact info@palmz.app.

We may need to verify your identity before processing a request. Certain information may need to be retained for legal, financial or legitimate operational reasons.

 

10. Account Deletion

If you wish to delete your Palmz account and associated personal information, you may request deletion by emailing info@palmz.app.

Please use the email address associated with your account where possible.

We will process eligible deletion requests in accordance with applicable law, subject to any information we must retain for legal or legitimate business purposes.

 

11. Children's Privacy

Palmz is intended for users aged 18 and over.

We do not knowingly collect personal information directly from children who are not legally permitted to use our Services.

If we discover that personal information has been collected from a child without the required legal authorisation, we will take appropriate steps to remove that information.

Parents or guardians who believe a child has provided personal information should contact us at info@palmz.app.

 

12. Third-Party Websites and Services

Palmz may contain links to websites, booking services, restaurants, transport operators and other third-party businesses.

These third parties may operate independently and maintain their own terms and privacy policies.

We recommend reviewing those policies before providing information or completing transactions through external services.

Palmz is not responsible for the privacy practices of independently operated third-party platforms.

 

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, business practices, technology or legal obligations.

When changes are made, we will publish the updated policy on our website and revise the "Last updated" date.

Where required by law, we will provide additional notice or obtain consent for material changes.

 

14. Contact Us

For privacy-related enquiries, account deletion requests or questions about this policy, please contact:

 

Palmz – The Gilis App

Operated by: PT Gili Trawangan Wisata Royal

Website: https://www.palmz.app

Email: info@palmz.app

Location: Gili Trawangan, Lombok, Indonesia

bottom of page