Privacy Policy

Last updated: 17 August 2026

Ericfun Hub ("we," "us") operates the Ericfun Hub mobile app and admin dashboard. This policy describes what information we collect, how we use it, and how we protect it.

Information we collect

• Account information: name, phone number and/or email address, used to create and secure your account (via Supabase Auth, one-time-passcode or password sign-in).
• Age confirmation: a one-time 18+ confirmation at signup. We do not collect a birthdate or ID document — this is a self-attested confirmation, not a verification service.
• Delivery addresses: any addresses you save for order delivery.
• Order and payment status: what you ordered, delivery/pickup preference, and whether an order is pending, paid, packed, shipped, or delivered.
• Push notification token: a device identifier used only to deliver order-status notifications, generated by Expo's push notification service.
• Chat messages and attachments: anything you send our staff in the in-app chat — your messages, any photos you attach, and any voice notes you record. Kept so the conversation is still there when you or our staff come back to it.
• Crash and error diagnostics: when the app crashes or hits an error, a technical report (device model, operating system version, and where in the app it happened) is sent to Sentry, our crash-reporting provider. These reports are not tied to your name or contact details.
• App usage: basic in-app events recorded against your account — for example opening the app around a drop. We use our own first-party record for this; we do not use Google Analytics, advertising SDKs, or any third-party tracking.

Information we do not collect

We never store your card number, bank account details, or other payment credentials. All payment processing is handled directly by HitPay, our licensed payment gateway partner — Ericfun Hub only ever receives a payment confirmation and reference number, never your raw payment details.

How we use your information

• To fulfil orders: preparing, packing, and shipping what you bought, and letting you track its status.
• To communicate with you: order-status push notifications, and responding if you contact us for support.
• To operate the loyalty points program tied to your account.
• To detect and prevent abuse (e.g. basic rate-limiting on checkout to blunt automated scripted attempts).
• To keep the app working: diagnosing crashes and errors, and understanding which parts of the app are actually used so we can improve them.

Who can see your information

• Ericfun Hub staff at the branch fulfilling your order can see what's needed to pack and ship it (your name, address, and order contents) — staff cannot see orders placed at other branches.
• HitPay, our payment processor, to process your payment — governed by HitPay's own privacy policy for the payment step itself.
• Sentry, our crash-reporting provider, receives technical error reports from the app — no name, contact details, or order contents.
• Expo, which relays push notifications to Apple and Google so they reach your device.
• Supabase, our hosting and database provider, stores this information on our behalf.
• We do not sell your personal information to third parties, and we do not share it for advertising.

Data retention and your rights

Your account data is retained for as long as your account is active.

You can delete your account yourself at any time from the app — Account → Delete my account. This anonymises your profile and removes your saved personal details and your push notification tokens. Order and payment records are kept in anonymised form, because Malaysian accounting and tax rules require us to retain transaction history — those records no longer identify you.

You can also request account deletion or a copy of your data by contacting us at ecfun2024@gmail.com.

Children's privacy

Ericfun Hub is an 18+ service. We do not knowingly collect information from anyone under 18 — the signup flow requires an explicit age confirmation before any account can be used.

Changes to this policy

We'll update the "Last updated" date above if this policy changes, and note material changes in the app.

Contact

Questions about this policy: ecfun2024@gmail.com