Privacy Policy

Who this covers

• Crew — people who sign up in the GoCrew app to work an event.
• Organisers — the staff of an event organiser who use the GoCollect dashboard.
• Participants — people who entered an event (for example a race). You never use our software, but an organiser puts your details in it. See “Participant data” below.

What we collect from crew and organisers

• Account details: your name, email address and a password (stored only as a one-way hash — we cannot read it).
• When you apply to work a station: your full name, NRIC number, phone number, email, bank name, account holder name and account number, plus answers to any questions the organiser asks. This is needed so the organiser can decide whether to engage you and pay you.
• Work activity: which event and station you are assigned to, when you check in and out (including via your attendance QR code), when you start and end a shift, and which pack collections you recorded and when.
• Session details: when you sign in we store your device's browser or app identifier and IP address against your session, to keep your account secure.
• Camera: the app asks for camera access only to scan QR codes (participant packs and crew attendance). No photo or video is taken, stored or sent — scanned codes are read on your device.

We do not use advertising or tracking SDKs, we do not build advertising profiles, and we never sell personal data.

Participant data

The organiser decides which participant details to import (typically name, bib number, category, and sometimes email or NRIC) and why. For that data the organiser is in charge and we act only on the organiser’s instructions. Crew see just enough to hand over the right pack; NRIC is masked and email is hidden from crew. If you are a participant and want to see, correct or remove your details, please contact the organiser of your event first — we will help them act on your request.

Why we use it

• To run the service: sign you in, assign you to events, record who collected what, and prevent a pack being handed out twice.
• To let organisers manage, pay and account for their crew.
• To keep the platform secure and to investigate mistakes or disputes — we keep an audit trail of important actions.
• To contact you about your account or a request you made.

Who sees your data

• The organiser of any event you apply to or work at, and Go staff who support the platform.
• Service providers that host and run it for us: Amazon Web Services (hosting and file storage, in Malaysia (AWS Asia Pacific, Malaysia region)) and Sentry (error monitoring, which may capture technical details of a failed request).
• Authorities, where the law requires it.

Nothing is shared for marketing.

How long we keep it

• Your account and session data: until you delete your account (sessions also expire after 30 days of inactivity).
• Collection, attendance and audit records: kept, because organisers and we must be able to show what happened at an event. When you delete your account these records stay but no longer identify you — they show "Deleted user".
• Crew application details (NRIC, bank account): if you were approved and worked an event, the organiser keeps that record for its own payroll and legal obligations. Applications that were never approved are erased when you delete your account.
• Backups may hold deleted data for a short period before they expire.

Your choices

You can ask to see, correct or delete your personal data at any time. Crew can delete their account in the GoCrew app (Profile → Delete account); see how account deletion works. Organisers and participants can email us at the address below.

Security

Data is encrypted in transit (HTTPS) and stored on access-controlled infrastructure. Passwords are hashed. Access to personal data is limited by role, and important actions are logged. No system is perfectly secure, so please use a strong, unique password.

Children

The service is for event crew and organisers and is not directed at anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

Changes and contact

If we change this policy in a way that matters we will update the date above and, where we can, tell you in the app. Questions or requests: support@justgolah.my.