TOHSAKAN

Privacy Policy

Effective Date: July 30, 2026

BENJARONG Ecosystem ("Company", "we", "us") values and respects your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you use the TOHSAKAN mobile application, in compliance with the Personal Data Protection Act (PDPA) and international data protection standards (such as GDPR).

Modules Not Yet Available in This Release

TOHSAKAN is released in stages. The modules below are described in this policy because they form part of the BENJARONG Ecosystem design, but they are not active in the current App Store release, and no data of those kinds is collected, transmitted, or stored today. This policy will be updated before any of them is enabled.

  • Smart Safety — Geofencing alerts, SOS dispatch, and background location tracking. The app requests your location only while it is open, and only when you tag a place on a post.
  • Health Care — Vital signs, fall detection, and anything synced from a connected smart watch. The app has no health-data integration of any kind.
  • Wallet & KYC — Wallet transactions, Benjarong Points redemption, and passport or national ID verification. No payment credentials or identity documents are collected.
  • Form-Fill Assistant (TDAC) — Automatic completion of digital arrival forms.

1. Information We Collect

We collect necessary personal data to deliver our intelligent travel services, including:

  • Identity Data — Full name, email, phone number, nationality, date of birth, profile picture, passport details, or national ID (for Wallet KYC verification).
  • Location Data — Real-time GPS and Background Location tracking (active only when you enable Smart Safety or check in via Tohsakan Passport).
  • Health & Sensitive Data — Pre-existing medical conditions, drug allergies (collected via Interactive Choice Cards), and real-time vital signs/fall detection metrics synced from connected Smart Watches under the Health Care module.
  • Journey & Transaction Data — Booking histories (accommodation, transport, activities, dining), Wallet transaction logs, and redeemed Benjarong Points.
  • Behavioral & Device Data — Interaction with short-form videos, live streams, likes, saves, shares, and technical device indicators (Device ID, IP address).

2. How We Use Your Data

Your personal data is processed for the following purposes:

  • Core Service Delivery — Fulfilling Seamless Journey bookings, OTOP marketplace orders, and gamified reward systems.
  • Proactive Security (Smart Police & Emergency) — Utilizing real-time location for proactive geofencing alerts and dispatching SOS signals to local police or provincial emergency units.
  • Medical Safety Net — Analyzing vital signs (e.g., detecting heart rate spikes or falls) to notify emergency hospitals and displaying the Smart Medical Tag on your Super QR Code.
  • Form-Fill Assistance — Auto-populating passport and trip details into digital entry forms (e.g., Thailand Digital Arrival Card - TDAC).

3. Time-Bound Privacy Policy ⭐️

To enforce maximum privacy protection, our Smart Safety and Health Care monitoring modules operate under a strict Time-Bound Policy:

  • User-Defined Duration — Monitoring permissions are granted solely for your selected trip duration (e.g., 1, 5, or 7 days).
  • Automated Data Purge — Once your trip concludes, detailed background tracking logs are locked and permanently deleted from our servers within 24 hours, retaining only anonymized statistical data.

4. Client-Side Processing for Form-Fill Assistant (TDAC)

For the TDAC In-App Assistant feature:

  • The auto-filling of Passport and Flight details onto the Immigration web portal is executed locally on your mobile device via Client-Side Automation (In-App WebView Injection).
  • The Company does not store, process on external servers, or transfer your immigration confirmation data to third parties.

5. Data Sharing and Disclosure

We do not sell your personal data. We disclose data only to trusted entities under essential conditions:

  • Service Merchants — Hotels, transport operators, and activity vendors to validate your bookings.
  • Emergency & Public Authorities — Law enforcement networks (Smart Police), provincial emergency centers, or network hospitals upon SOS triggering or detected life-threatening events.
  • Payment Processors — PCI-DSS compliant gateways for secure transaction handling.

6. Your Data Rights

Under applicable data protection laws (PDPA/GDPR), you hold the following rights:

  • Right to access and request a copy of your personal data.
  • Right to rectify inaccurate or incomplete data.
  • Right to erasure ("Right to be Forgotten").
  • Right to withdraw consent at any time via App Settings (/profile/settings).
  • Right to restrict or object to data processing.

7. Contact Us

For any question about this policy, to exercise any of the rights listed above, or to report content or behaviour on TOHSAKAN, contact us at: