Privacy Policy

Who we are

Rasa is a social food discovery app for Malaysia. This policy explains what personal data we collect, how we use it, and your rights under the Personal Data Protection Act 2010 (PDPA).

What we collect

Account details (name, username, email, and a photo if you add one); content you create (reviews, ratings, photos, lists, comments); usage and device information; and — only with your permission — your approximate location to show nearby restaurants. We never collect payment card details.

How we use your data

To run the app: show your reviews to people who follow you, power search and recommendations, award coins and badges, and keep the community safe. We use aggregated, de-identified data to improve Rasa. We do not sell your personal data.

Who can see your content

Reviews and profile details you post are visible to other Rasa users. You control what you share. Location is used only to find places near you and is not shown on your public profile.

Analytics & diagnostics

We use PostHog to understand how features are used (product analytics) and Sentry to capture crash and error diagnostics so we can fix problems. This helps us improve Rasa. We do not use this data to track you across other companies’ apps or websites.

Sharing with third parties

We use trusted providers to operate the app: Supabase (hosting and database), Algolia (search), Google Places (restaurant data), PostHog (product analytics), Sentry (crash and error diagnostics), and Resend (transactional and waitlist email). They process data on our behalf under their own security commitments. We may disclose data where required by Malaysian law. We do not sell your personal data.

Data retention & deletion

We keep your data while your account is active. You can permanently delete your account at any time from Profile → Settings → Delete Account. This erases your profile, reviews, photos and associated data. Some records may be retained briefly where the law requires.

Your rights

Under the PDPA you may access, correct, or withdraw consent to the processing of your personal data. Contact us to exercise these rights.

Children

Rasa is not intended for anyone under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy. Material changes will be notified in the app. Continuing to use Rasa after an update means you accept the revised policy.