Effective Date: February 28, 2026
CommendFood ("CommendFood", "we", "our", or "us"), operated by Ducal Studio Sdn. Bhd., is committed to protecting the privacy of our users ("users" or "you"). This Privacy Policy explains how we collect, use, store, process, and share your information when you use our platform on website, Android, and iOS (collectively, the "Services").
CommendFood allows users to discover restaurants, browse dishes, upload photos, post reviews, share recommendations, and interact with other food lovers.
By using the Services, you agree to the practices described in this Policy. We may update this Policy periodically, and continued use of the Services means you accept the updated version.
1. Information We Collect
A. Information you provide
We may collect information you voluntarily provide, including:
- Name
- Email address
- Profile details and profile picture
- User-generated content (reviews, photos, comments, ratings, and posts)
- Information submitted through events, surveys, or customer support
- Any other information you choose to share
B. Information collected automatically
When you access or use the Services, we may automatically collect:
- Device information (model, OS version, device identifiers)
- IP address and approximate location
- Browser type, pages visited, and usage activity
- Crash reports and performance metrics
- Cookies and similar tracking technologies
- Search history, saved dishes, viewed restaurants
- User interaction and engagement patterns
C. Information from third parties
We may receive information from:
- Social platforms (if you choose social login)
- Analytics providers
- Advertising providers (including future AdMob integration)
- Other service providers supporting our operations
D. Cookies
We use cookies and similar technologies to:
- Maintain sessions
- Store preferences
- Improve user experience
- Analyze usage
- Support advertising and measurement
You may disable cookies, but some features may not function correctly.
2. How We Use Your Information
We may use your information for purposes including:
- Operating and maintaining the Services
- Personalizing content and recommendations
- Creating and managing user accounts
- Displaying user-generated content
- Enabling social interactions
- Providing customer support
- Sending service updates and notifications
- Conducting analytics and performance monitoring
- Ensuring platform safety and preventing misuse
- Complying with legal requirements
3. How We Share Information
A. With other users
Public profile details, posts, reviews, ratings, and photos may be visible to other users.
B. With service providers
We may share information with:
- Hosting services
- Analytics tools
- Customer support providers
- Advertising partners (including future AdMob integration)
C. For legal purposes
We may disclose information to comply with laws or protect the rights and safety of users or the public.
D. Business transfers
Information may be transferred during mergers, acquisitions, or asset sales.
E. With your consent
We may share information when you explicitly authorize it.
F. Aggregated or de-identified data
We may share non-identifiable data for analysis or business purposes.
4. Security
We implement reasonable administrative, technical, and organizational safeguards to protect your information, including encryption when applicable, access controls, secure storage systems, and pseudonymization. No method of transmission or storage is completely secure, but we strive to protect your information.
5. Children
Our Services are intended for a general audience but are not specifically directed to children.
We do not knowingly collect personal data from children under 13 (or under 16 in jurisdictions with higher age requirements). If we become aware that a child has provided personal data, we will delete the information in accordance with applicable laws.
If children access our Services, the following protections apply:
- No personalized advertising will be delivered to children.
- No behavioral profiling or tracking for advertising or analytics purposes.
- Only non-personalized, contextual advertising may be shown if advertising services are used.
- Sensitive data such as location, advertising IDs, and analytics identifiers will not be used for targeting.
Parents or guardians may contact us at [email protected] to request review or deletion of a child's data.
6. International Data Transfers
We may transfer or store your data in other countries where our service providers operate. We implement appropriate safeguards such as Standard Contractual Clauses or equivalent protections.
7. Data Retention & Account Deletion
We retain personal data as long as your account remains active, as needed to provide the Services, or as required for legal or business purposes.
You may request deletion of your account at any time through the app settings or by contacting us at [email protected]. Account deletion requests will be processed in accordance with applicable laws.
When your account is deleted, we will:
- Anonymize or remove your personal information (name, email, profile details).
- Remove your profile photo and other uploaded media.
- Remove or disassociate your reviews, ratings, photos, and other content from your identity.
- Permanently delete your bookmarks, likes, favorites, and saved preferences.
Account deletion is permanent and cannot be reversed once processing is complete. Some non-identifiable or aggregated data may be retained for analytics or legal purposes.
8. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access your data
- Correct inaccurate information
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent
- Request data portability
- Submit a complaint to a regulatory authority
You may contact us to exercise these rights.
9. Contact Information
Data Controller:
Ducal Studio Sdn. Bhd.
Business ID: 202101001564 (1401862-D)
No.19, 1st Floor
Lorong Wong King Huo 5
96000 Sibu
Sarawak
Malaysia
Email: [email protected]
10. Complaints
If you believe we are processing your information in violation of applicable data protection laws, you may file a complaint with your local data protection authority.