App name: LeafCast
Package ID: com.melur.leafcast
Operator: MelurDotCom Trading (“we”, “us”, “Melur”)
Last updated: 14 August 2026
This Privacy Policy applies only to the LeafCast Vendor mobile application (com.melur.leafcast). It does not cover Melur.com, the Pepohon consumer app (com.melur.pepohon), or the LeafCast vendor web portal, except where this app sends data to those systems as described below.
By using the LeafCast Vendor app, you agree to this policy.
LeafCast Vendor is a business (B2B) app for plant nursery vendors and similar businesses to manage LeafCast listings, QR labels, scan insights, and related vendor tools. It is not directed at children under 13.
Depending on how you use the app, we may collect:
Email address and password (if you register or sign in with email)
Google account identifiers and email when you use Google Sign-In
Session / authentication tokens needed to keep you signed in (via Supabase Auth)
Information you enter or update in the app, such as:
Business name
Contact phone and email
About / description text
Company address
Business hours
Website URL
Instagram and Facebook URLs
When you create or edit plant listings, we may collect:
Listing details you provide (for example plant / listing fields managed in the app)
Precise location (GPS latitude and longitude), if you grant location permission and use “get current location”
Optional location label / text you enter
Vendor QR codes associated with your listings
Scan and insight metrics shown in the app (for example scan counts and campaign / notification performance), which are generated from LeafCast backend services
Campaign content and settings you create in the app
Delivery and performance statistics returned by our notification providers (for example OneSignal statistics displayed in campaign reports)
Device and app information reasonably needed for security, debugging, and API communication (for example app version, network errors)
The app requires Internet access to communicate with Melur / LeafCast backend services
We do not use this app to collect Malaysian IC / passport numbers or date of birth.
We use the information above to:
Authenticate you and maintain your vendor session
Provide and improve LeafCast Vendor app features (listings, QR, insights, campaigns, account management)
Sync your vendor profile and listings with LeafCast backend services and the vendor portal
Show billing / subscription status and deep-link you to manage billing on the website when you choose to
Send or manage vendor notification campaigns you create
Secure the service, prevent abuse, and comply with law
On Android, the app may request:
Permission
Purpose
Internet
Connect to LeafCast / Melur backend APIs and authentication
Approximate / precise location
Optional GPS capture when attaching coordinates to a plant listing
You can deny or revoke location permission in system settings. Doing so may disable GPS auto-fill for listings; you can still use other app features that do not need location.
We do not sell your personal data. We share data with service providers that help operate LeafCast Vendor, including:
Supabase — authentication, database, and related backend services
Google — Google Sign-In (when you choose that sign-in method)
Melur LeafCast backend / vendor portal APIs — to sync vendor profile, listings, QR, scans, campaigns, and subscription status
Notification infrastructure (for example OneSignal) — for vendor campaign delivery and reporting statistics, where campaigns are enabled for your account
Government or law enforcement — when required by applicable law
Some profile or listing information you publish for LeafCast may be shown on public LeafCast / Melur plant reveal pages when visitors scan your QR codes. Do not enter information you do not want associated with public botanical labels.
Account, profile, listing, and analytics data are processed through our cloud backend providers. We use HTTPS for API communication and apply reasonable access controls. No method of transmission or storage over the Internet is 100% secure.
We retain account and business data while your vendor account remains active and as needed to provide the service, meet legal obligations, resolve disputes, and prevent fraud. You may request deletion as described below.
Subject to Malaysian PDPA and applicable law, you may request access to, correction of, or deletion of personal data we hold about you in connection with this app.
To request account or personal data deletion for LeafCast Vendor (com.melur.leafcast), email:
mdc2023x@gmail.com
Please include the email address used for your LeafCast vendor account. After we verify your request, we will delete or anonymize relevant personal data within 30 days, except where we must retain information by law, for fraud prevention, or dispute resolution.
You may also update much of your vendor profile information directly in the app (Account → Edit Profile).
This app is intended for business users and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided data through this app, contact us so we can delete it.
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the LeafCast Vendor app after an update means you accept the revised policy.
For privacy questions, complaints, or data requests about LeafCast Vendor only (com.melur.leafcast):
Email: mdc2023x@gmail.com
Operator: MelurDotCom Trading