eSembang Privacy Policy
Effective 4 October 2026 · Operated by Green Silicon, Malaysia · Bahasa Melayu
eSembang is a messaging and calling app. This policy explains what we collect, why, and the choices you have. We do not show ads, we do not sell personal data, and we do not use third-party analytics or tracking.
What we collect
- Account details — your name, email address and/or phone number, a hashed password, and an optional profile photo.
- Messages and files — in end-to-end encrypted chats the server stores only ciphertext it cannot read, and encrypted attachments. Chats opened from the web client, which is not end-to-end encrypted and is labelled as such in the app, are stored readable on our server so they can be delivered.
- Metadata needed to deliver messages — who is in which chat, when messages were sent, delivery and read state, and a log of calls (who, when, how long). Call audio and video travel directly between devices or through our relay server and are never recorded.
- Contacts — if you allow it, phone numbers from your address book are sent to find people who already use eSembang. Numbers that do not match an account are not stored. Names you give contacts inside eSembang are stored so they sync across your devices; only you can see them.
- Notices — notices you post on a group's or community's notice board (text and an optional image) are stored on our server, readable by us and by that group's or community's members, and are not end-to-end encrypted. Each one is deleted automatically, with its image, on the expiry date you choose (at most 90 days); you or an admin of the group or community can remove it sooner.
- Location — only when you choose to share a location in a chat, save an address, or use “nearest members” in a community. Your saved address is visible to members of the communities and chats you belong to, including on the members map.
- Live location — only while you are sharing it, for the time you choose (15 minutes, 1 hour or 8 hours), and you can stop at any time. Positions go from your phone to the chat or community through our server, which passes them on and never stores them. In end-to-end encrypted chats the server cannot read them; in communities they are protected in transit (TLS) but not end-to-end encrypted. We store only that a share is running, with whom, and until when.
- Device information — a push-notification token, device name and platform, and each device's public encryption keys.
How we use it
Only to run the service: create your account, deliver messages and calls, send notifications, let people find you, keep your chats in sync across devices, and deal with abuse reports. We do not use your data for advertising or profiling.
Who we share it with
- Other users — what you send them, and your profile (name, photo, and — within communities — the contact details you choose to share).
- Service providers — Google Firebase Cloud Messaging and Apple Push Notification service deliver notifications; their payloads do not contain message content from encrypted chats. Our servers are hosted on a virtual private server we administer.
- Authorities — only when Malaysian law requires it. We cannot hand over the content of end-to-end encrypted messages because we do not have it.
Retention
Messages are kept on the server so that all of your devices can sync the chat history. Disappearing messages are deleted from the server, ciphertext and all, once the timer you set runs out. Deleting your account removes your profile, devices, contact names, addresses and memberships, and the messages and files you sent. Server backups are overwritten within 30 days.
Your choices
- Access and correct your profile and contact details in the app (Profile).
- Withdraw contacts, location, camera, microphone or photo access at any time in your device settings.
- Block or report any user.
- Delete your account: in the app, Profile → Delete account (you confirm with your password; deletion is immediate). Or email remy@greensilicon.com from the address or phone number on the account, with the subject “Delete my eSembang account”. We confirm and complete deletion within 7 days.
Children
eSembang is not directed at children under 13, and we do not knowingly collect their data.
Security
Encrypted chats use the MLS protocol; keys are generated and kept on your devices. Connections to our server use TLS. No system is perfectly secure, but we design so that a breach of our server would not expose encrypted message content.
Changes and contact
We will post changes here and update the effective date. Questions: remy@greensilicon.com.
Dasar Privasi eSembang
Berkuat kuasa 4 Oktober 2026 · Dikendalikan oleh Green Silicon, Malaysia
eSembang ialah aplikasi pesanan dan panggilan. Kami tidak memaparkan iklan, tidak menjual data peribadi, dan tidak menggunakan analitik atau penjejakan pihak ketiga.
Apa yang kami kumpul
- Butiran akaun — nama, e-mel dan/atau nombor telefon, kata laluan yang dicincang, dan gambar profil (pilihan).
- Mesej dan fail — dalam sembang tersulit hujung-ke-hujung, pelayan hanya menyimpan teks sifer yang tidak boleh dibacanya. Sembang dari klien web (tidak tersulit hujung-ke-hujung, dan dilabel sedemikian) disimpan dalam bentuk boleh dibaca supaya dapat dihantar.
- Metadata penghantaran — ahli sembang, masa mesej, status dihantar/dibaca, dan log panggilan. Audio dan video panggilan tidak pernah dirakam.
- Kenalan — jika dibenarkan, nombor telefon dipadankan untuk mencari pengguna eSembang; nombor yang tidak sepadan tidak disimpan.
- Lokasi — hanya apabila anda berkongsi lokasi, menyimpan alamat, atau menggunakan “ahli terdekat” dalam komuniti.
- Lokasi langsung — hanya semasa anda berkongsi, untuk tempoh yang anda pilih, dan boleh dihentikan bila-bila masa. Pelayan hanya menyalurkan kedudukan dan tidak pernah menyimpannya; dalam sembang tersulit hujung-ke-hujung ia tidak boleh dibaca oleh pelayan.
- Maklumat peranti — token pemberitahuan, nama dan platform peranti, serta kunci awam penyulitan.
Penggunaan dan perkongsian
Data digunakan hanya untuk menjalankan perkhidmatan. Pemberitahuan dihantar melalui Google Firebase Cloud Messaging dan Apple Push Notification service. Kami hanya mendedahkan data apabila dikehendaki oleh undang-undang Malaysia, dan kami tidak mempunyai kandungan mesej tersulit.
Padam akaun
E-mel remy@greensilicon.com dari alamat atau nombor telefon akaun anda dengan subjek “Padam akaun eSembang saya”. Kami akan mengesahkan dan memadam dalam masa 7 hari, termasuk profil, peranti, alamat, keahlian, serta mesej dan fail yang anda hantar. Sandaran pelayan ditimpa dalam masa 30 hari.