What we collect, and why

Malaysia’s Personal Data Protection Act 2010 applies here. Your video, your location and your device identifier are all personal data — this is what happens to each.

Your two-second video

It is the review. We store it, show it to other people, and keep it while the review is live. Your original upload is deleted 30 days after we process it — long enough to fix a processing bug without asking you to film again.

We strip location and device metadata from every clip before publishing it. Phones write your coordinates into video files; we do not pass that on.

Film the food, not the people around you. If you appear in someone else’s clip, report it and we will remove it.

Where you were

We read your location while you film, and use it once: to work out how far you were from the place. A review says a dish was good at a place, so we check the clip was made there and refuse the ones that were not.

Your exact coordinates are never published, never shown to other users and never returned by our API. Only the distance is kept, and only moderators can see it.

Location is required to post. Decline it and you can still read everything, report a review, export your data and delete your account.

Who you are

Posting needs an account, whatever the rating: a review names a specific business, and someone should stand behind it. You sign in with Google, and we keep your email address, name and picture — nothing else.

Reading needs no account. If you report a review without one, we identify you by a cookie plus a salted hash of coarse browser characteristics — enough to apply rate limits, not enough to identify you elsewhere. We do not store the raw values.

What you can do about it

Download everything we hold about you, or have it erased, from your reviews. Both work without an account too — a right only account holders can use is not a right.

Erasure is immediate and permanent: your reviews and their videos are deleted, not hidden. Ratings you gave stop counting towards any dish’s score.

We keep backups of our database so that a failure does not lose everyone’s reviews. A copy of your data can remain in those backups for up to 14 days after erasure, until they are deleted on schedule. They are used only to recover from a failure, and they are never public.

What we do not do

  • We do not sell your data.
  • We do not publish your precise location.
  • We do not accept payment to remove a negative review.
  • We do not hide your reviews without telling you.