Privacy Policy

Last updated: April 17, 2026

1. Information We Collect

When you use Cincailah, we collect the following:

Account information: Your email address and display name when you register.
Group data: Group names, Makan Codes, and member lists you create or join.
Restaurant data: Restaurants you add to your groups, including tags and preferences.
Decision history: Records of lunch decisions and votes to power anti-repeat logic.
Favourites: Restaurants you heart.

2. How We Use Your Information

To provide and improve the Cincailah service.
To send transactional emails (password reset, email verification).
To power anti-repeat and personalisation features.
We do not sell your data to third parties.
We do not run advertising.

3. Data Storage & Security

Your data is stored in a PostgreSQL database. Passwords are hashed using bcrypt and never stored in plaintext. Sessions are secured with an encrypted cookie. We use industry-standard transport encryption (HTTPS) for all communication.

4. Cookies

We use a single secure, HTTP-only session cookie to keep you logged in. We do not use third-party tracking cookies or analytics cookies.

5. Your Rights

You can delete your account and all associated data by contacting us.
You can leave any group at any time from the group settings page.
You can remove favourites at any time from the Favourites page.

6. Contact

For any privacy-related questions, email us at privacy@cincailah.com.