UI Guidelines

Please refer to the following UI/UX guideline resources in [Mac|Windows]

Typography & Color Tokens
Font Files
Figma Components

UX Guidelines

User Login & Personal Data Restrictions
1. Mini Apps must not require users to log in (i.e., request phone numbers, emails, or any personal identity such as KTP, passport, etc.) with authentication methods like OTP, PIN, or password for accessing the overall experience.
2. If a Mini App requires a user’s phone number, email, or personal identity, it is only permitted for booking or payment-related purposes.
3. Mini App partners must consult and share the user experience flow with the GoPay team before implementation. GoPay reserves the right to approve or reject the request.
1. Credentials, PII and Device Permission
2. Mini Apps should provide a strong reason why Mini Apps required the PII and device information
3. If the PII purposes for seamless login for the GoPay app users to cut the registration processes, hence;
  1. When the PII is provided under user consent, please check and ensure the capability to map to Mini App account is there
  2. When the PII is provided under user consent, and if the PII information , i.e. mobile number is not exist under the Mini App account - please generate the Mini Apps account with those particular provided mobile number for seamless login
Restrictions on External Redirection
1. Mini Apps must not redirect users to external websites or apps outside the GoPay App environment.
2. If the Mini App contains advertisements, the user should only be able to view the ad without being redirected to an external app or website. Any redirection outside the GoPay App is strictly prohibited as it creates a broken journey.\
Prohibited Content & Activities
Mini Apps must not include any form of content, promotions, or materials related to:
1. Tobacco, cigarettes, vaping, or alcohol-related content.
2. Sexually explicit content, adult entertainment, or escort services.
3. Gambling, betting, lottery, or any financial speculation that is illegal or unregulated.
4. Crime, violence, drugs, or any activities prohibited by Indonesian law.
5. Any activities targeted exclusively for users aged 18 and above without prior approval from GoPay.\
Security & Performance Compliance
1. Mini Apps must comply with GoPay's security and performance standards, ensuring that the app runs smoothly within the GoPay environment without impacting user experience.
2. Any third-party SDKs, trackers, or scripts integrated into the Mini App must be disclosed to GoPay for approval.
3. Mini Apps should not request excessive permissions (e.g., camera, microphone, location) unless strictly required for the core functionality. Any request should be informed, approved, and use GoPay consent service.\
Payments & Transactions
1. All payments within the Mini App must be processed exclusively through GoPay as the primary payment method.
2. Mini Apps must not implement direct bank transfers, cash payments, or external third-party payment processors without GoPay’s explicit approval.
3. Mini Apps should use GoPay Payment Redirection Core API that compliant with SNAP BI.
4. Partners offering digital goods or services, GoPay is aligning with platform policies regarding in-app payments. You may still proceed with in-app payment integration using GoPay. We'll notify you of any payment related adjustments if required.\
Compliance & Enforcement
Others
1. Mini Apps should at least provide Bahasa Indonesia and set it as default language