SG Home FoodThis notice explains what SG Home Food does with the details you give us on this website and app, as Singapore's Personal Data Protection Act (PDPA) asks. By using SG Home Food, you agree to us using your details as this notice says.
Who we are
SG Home Food is a new app for finding home cooks and bakers of every cuisine across Singapore, run by a small team in Singapore. Our Data Protection Officer looks after your details: see Your choices for how to reach them.
What we collect
When you fill in the "Not ready to start yet?" form on the Sell with us page, we keep:
- your name
- your email address
- your Instagram name, if you give one
- your area, the cuisines you cook, and what you sell
- when you ticked the consent box, and which version of its wording you saw
When you sign in, we keep:
- your email address
- your account type (for example, customer or seller)
- security records of your sign-ins, such as the time, your internet (IP) address and your browser type
If you sign up to sell, we also keep a record that you agreed to the Seller Agreement: your email address, which version, and when.
When you set up your stall, we keep your stall's name, its web address, the "About your stall" words (if you add them) (and any earlier ones, so old links still find your stall), your stall photo, the cook you picked, the cuisines you cook, your food info (your halal information, and whether you sell pork), your WhatsApp number and Instagram (if you add one), and your dishes (their photos, names, sizes and prices, ingredients, allergens and food info, and any description and days' notice). If you fill in "Taking orders", we also keep whether you take orders in the app, whether you offer pickup or delivery, your delivery fee, your "How to pay" note and your pickup instructions. If you use the price helper, we keep your recipes: their names, ingredients and costs, and your hours and hourly rate if you add them. Only you can see them in the app. When you send your stall for approval, we keep the date and which version of the promise you ticked. Your phone shrinks your photos before sending them, which also removes hidden details such as where it was taken. Our team checks each new stall and dish photo before customers see it. Until then only you and our team see it, and we delete photos we can't use, keeping only a note asking you to choose another one. When a new photo is approved, we delete the photo it replaces.
We also ask for your postal code and unit number. With the postal code, OneMap tells us your block and street. We keep your address privately: only you and our team can see it. From it we work out your planning area (like Tampines) and a map pin placed 300 to 600 m from your home, always in the same spot. We don't keep your home's exact map location.
Following stalls
When you follow a stall, we keep which stall you follow, and when you started. Only you can see which stalls you follow (and our team, if we need to check a problem). The stall and everyone else see only the number of followers, never who they are. Following doesn't sign you up for emails. The stalls' new drops and dishes show on your "From stalls you follow" page and the home page: we work these out when you open the page, and keep nothing extra.
Favourites. When you tap Save on a dish, we keep which dishes you saved and when, so you can find them on your account page and the home page. Sellers see only how many people saved each of their dishes, never who.
Makan Passport. Your passport's stall and neighbourhood stamps are worked out from your completed orders when you open it, so we keep nothing extra for them. When you earn a festival stamp, we keep which festival and when. Only you can see your passport (and our team, if we need to check a problem). If you make a share picture, it's made on your phone and only has your numbers and cooks: we don't upload it.
Taster levels. Your taster level (Taster, Food Friend or Makan Expert) comes from how many different home stalls you've tried and how many of your reviews have a photo. We keep your level, when you reached it, and whether you chose to show it. It shows next to your reviews on stall pages only if you switch that on in your Makan Passport, and you can switch it off at any time. Nobody sees your numbers.
Points (sellers). Sellers get points for orders they complete in the app. We keep each stall's points, a history of how they were earned and spent (which orders, and what was bought and when), and the banner it chose. Only the seller sees their points; customers see the banner on the stall page. Points can't be bought and aren't money.
Your character. If you pick a character in your Makan Passport, we keep which one you picked, when, which outfit it wears (outfits are unlocked by your taster level), and whether you chose to show it. It's a drawing we made, not a photo of you. It shows next to your reviews on stall pages only if you switch that on, and you can switch it off or change your character at any time.
Badges for trying things. Your Makan Passport can show badges like Cuisine Explorer and Drop Catcher. They're worked out from your completed orders, and we keep which badges you've earned and when. Only you can see them (and our team, if we need to check a problem).
Monthly challenge. Your Makan Passport shows a small challenge each month. Whether you've done it is worked out from your completed orders and checked review photos. When you do one, we keep which month and which challenge. Only you can see them (and our team, if we need to check a problem).
Thank-you stickers. After a completed order, the seller can say thanks with a sticker. We keep which order it was for, which sticker, and when. Only you and that seller can see it (and our team, if we need to check a problem). Stickers are just for fun and count for nothing else.
Food Safety Course certificates (sellers). If you send us your Food Safety Course certificate, it goes to a private store that only you and our team can open. Our team checks it, then deletes the file. We keep only whether it was approved or not (and why not), when, and who in our team checked it. If it's approved, your stall page shows a "Food Safety Course" badge. You can remove it at any time on your setup page.
Drop alerts. For a stall you follow, you can switch on emails about its new drops (they're off until you do). You can also choose one email a day instead, at 8am. We keep your choices, which alerts we sent and when (for 30 days), and a random code for the "Stop these emails" link, so it works without signing in. The link turns off drop alerts for every stall you follow; you still follow them. The emails have the stall's name, the drop and a link: nothing about you.
Ordering in the app
When you send an order, we keep the stall, the dishes, sizes, prices and how many, pickup or delivery, the date and time of day, your name, your phone number, your note (if you write one), your answer to the seller's question (if they ask one), your delivery address and postal code (for delivery), when you sent it, and your account. We also keep whether you came from the seller's own link or found the stall on SG Home Food. We don't charge anything for this now.
The seller sees your name and phone number, to contact you about your orders, and your note and answer, to make your order: on their Order Board while an order is open, and in their private customer list and sales records until we wipe them (90 days after the order ends). Their customer list shows how many orders you've had with them, what you spent and when. They see your delivery address only after they accept your order, and only until it's completed or cancelled. You can see your orders on your account page. Our team can see orders if we need to check a problem. SG Home Food never handles money: you pay the seller directly.
"Tell me when it's back". If you tap it on a sold-out dish, we keep which dish you're waiting for, and when. When the seller restocks it, we send you one email, and a notification if you've switched them on for your phone. The seller never sees who's waiting. We delete it 30 days after we've told you, or after you've waited 60 days.
Group orders. If you start a group order (at stalls that take them), we keep its day and time, pickup or delivery, and your name, phone number, delivery address, note and answer until you send or cancel it. When you send it, it becomes your order like any other, with everyone's dishes. If you join one, we keep the name you type to show and your dishes. The organiser sees everyone's names, dishes and what they come to; the seller sees the names and dishes with the order. Friends see only their own dishes, the organiser's name and the group's size and total. Your phone number and email are never shown to the others. A group order that's never sent is deleted once its day has passed. A sent one (the names and who had what) is deleted when the order's details are wiped, 90 days after it ends.
Weekly orders. If you make an order weekly (at stalls that take weekly orders), we keep what's in it, the day and time, pickup or delivery, and your name, phone number, delivery address, note and answer, so we can send the same order to the seller every week, as you. The seller sees your name and phone number with your weekly order, and your delivery address once they've agreed to it (or with each week's order, once they accept it). Each week's order is then an order like any other. When you or the seller stop a weekly order, we wipe your name, phone number, address, note and answer from it straight away, and delete the rest 30 days later.
Sellers can also add orders they took on WhatsApp, by phone or in person. Those orders keep the customer's name, and their phone number and address if the seller adds them, and how they ordered. Only that seller and our team can see them, and we wipe them the same way, 90 days after the order ends. We don't email anyone about them. Sellers can also tick "Paid" on an order: they see it on their Order Board, and the customer sees it only on the order's receipt.
Once an order is completed, its customer and its seller can open a receipt: the stall's name, an order number, the dates, pickup or delivery, the customer's name, the dishes and prices, the total, and whether the seller ticked "Paid". Only they can see it. It never shows an address, a phone number, the note or the answer to the seller's question. We don't keep anything extra for it: it's made from the order each time.
When a seller accepts or declines an order, or cancels it, we keep the time they confirmed or their reason, and when it happened. If you cancel, we keep your reason (if you give one). If the seller doesn't answer by the order's date, the order closes by itself.
We email you about your orders: the seller gets an email for each new order, a cancelled order, and at 6pm the day before their orders; you get one when the seller answers, when the order is ready, cancelled or closed, and at 6pm the day before. These emails say only the stall's name, the date and time, and what happened, with a link. They never include addresses, phone numbers, notes or answers to the seller's question. They're only about your own orders, never marketing, so there's no switch to turn them off. We keep a record of which emails went out and when (not the emails themselves), until the order is deleted.
Notifications on this phone. If you turn on notifications in Profile and settings, we keep the notification address your phone's maker gives it (Apple, Google, Mozilla or Microsoft), the phone's two encryption keys, your two choices (order updates and drop alerts) and when you turned them on. We use them only to send you those notifications. Each one says only the stall's name, the date and time, and what happened, never addresses, phone numbers or notes, and it's encrypted so the phone maker's service passes it on without being able to read it. Your phone asks before any notification can show. Turn them off any time in Profile and settings, or in your phone's settings. We delete this phone's details when you turn them off, when the phone maker says the address no longer works, or when you delete your account. Notifications waiting to go are deleted after 7 days.
If you sell: when you accept a pickup order, that customer sees your full address (block, street, unit and postal code), your pickup instructions and your "How to pay" note, until the order ends. When you accept a delivery order, they see your "How to pay" note.
Drops: when you post a drop, we keep its title and words (if you add them), the dishes and how many of each, when orders close, the collection times, and when you close it. Everyone can see an open drop on your stall page, with how many are claimed. When you order from a drop, we keep the same as any order, plus the drop and the collection time you chose. Your order is accepted as soon as you send it, so the seller sees your delivery address (for delivery) straight away, and you see their pickup address (for pickup) and "How to pay" note straight away.
Reviews
After an order is completed, you can review it: 1 to 5 stars and, if you like, a few words. We keep your stars, your words, when you wrote or changed them, which order it's for, and the name you chose to show with your reviews. Anyone can read your review on the stall's page, with that name and the date. Nobody sees your real name, email, phone number or order details with it. You can change a review for 30 days after writing it, and delete it any time.
The seller gets a short email saying they have a new review (without your stars or words), and sees your review on their reviews page, with the name you chose and which dishes you ordered and when. They can reply once, under your review on the stall's page. We keep their reply and when they wrote it.
You can add one photo to your review. Your phone makes it smaller first, which also leaves out hidden details like where it was taken. We keep the photo and when you added it. Our team looks at it before it shows on the stall's page; if we decline it, we delete it. Once it's approved, anyone can see it on the stall's page. If you remove the photo or delete your review, we delete the photo too.
Review of the Week. Our team may pick a review with a photo to show on the home page. We email you to ask first, and it shows only if you say yes on your account page, for 7 days, with your stars, words, photo, the date and the name you chose (nothing else about you). You can take it off any time. We keep that we picked it, your answer, and when. If you delete the review, this goes too.
Tapping the WhatsApp button
When you tap a stall's WhatsApp button, your phone tells us, and we add 1 to that stall's taps for the day. We keep only the number of taps for each stall on each day. We don't keep who tapped, when in the day, or your internet address. The seller and our team can see their stall's numbers.
Our server uses your internet address for a moment to stop the same place sending too many taps. It isn't saved.
Your chat with the seller happens in WhatsApp, not on SG Home Food. We can't see it.
Reporting a stall or a review
If you report a stall or a review, we keep the stall (and the review), the reason you chose, your note (if you write one), when you sent it, and your account, so our team can reply to you. Only our team sees your report. We never tell the seller or the reviewer who reported them. Please don't put anyone's phone number or address in the note.
A reported review stays on the stall page until our team decides. If our team hides a review, it comes off the stall page, but the person who wrote it and the seller still see it on their own pages.
"Near me" on the home page
"Near me" sorts stalls by how far away they are. We ask for your location only when you tap it.
- If you use your phone's location, it stays on your phone. It isn't sent to us or saved.
- If you type a postal code, our server sends it to OneMap to find roughly where it is (to about 100 m), and sends that back to your phone. We don't save the postal code or the spot, and we don't write postal codes in our records.
Either way, the page forgets the spot when you close it.
Why we collect it
- The form's details: only to email you about selling on SG Home Food, as the consent box says.
- Your sign-in details: only to let you sign in, show you your account, and keep accounts safe. If you sell, we also use your email address to tell you when we approve your stall, send it back with a note, pause it or reopen it, and when our team has checked your stall photos, dish photos or logo (one short email with a link to your setup page).
- Your Seller Agreement record: to show that you agreed to it before your stall opens. You can read it again from your account.
- Your address: to find your planning area and place your map pin. Customers see only your area and the pin. The only exception: when you accept someone's pickup order, that customer sees your address, until the order ends.
- Your stall's details: to show your stall to customers once we approve it. Until then, only you and our team can see them. Once approved, anyone can see them, including the WhatsApp number and Instagram you give for your stall. Please don't put your address in your stall name, your "About your stall" words, your dishes or your photos.
- Your orders: to send your order to the seller, so they can make it and contact you about it, and to show you your orders. Where you came from: to plan how SG Home Food will be paid for later. It isn't used for anything else.
- Your order settings: to let customers order from you in the app. Whether you take orders, pickup or delivery, and your delivery fee will show on your stall page. Your "How to pay" note and pickup instructions are private: only you and our team can see them, and a customer will see them only after you accept their order.
The robot check
To stop spam, the form and the sign-in page use Cloudflare Turnstile to check that you're a person. It only starts when you begin typing. For this check, your browser and our server send Cloudflare some technical details, including your internet (IP) address. This check doesn't save your IP address.
Where your details are kept
- Supabase stores the sign-up list, accounts, stalls and orders in its database, and stall photos in its file store, in Singapore.
- Cloudflare runs this website and the robot check. Cloudflare works around the world, so some details may pass through other countries.
- OneMap, run by the Singapore Land Authority, tells our server where a postal code is and which planning area it's in. Our server sends it your postal code for this, never your name or email. The map on our home page also comes from OneMap, so your browser gets the map pictures from OneMap, which sees your internet (IP) address, like any website you visit.
- Resend sends our emails (sign-in codes, emails about your stall, and emails about orders), so it gets your email address, for stall emails your stall's name and any note from our team, and for order emails the stall's name and the order's date and time. Resend is a US company, so your email address may be handled outside Singapore.
- OpenRouter passes a dish's details to an AI service, only when a seller whose stall has our AI writer taps Write it for me: that dish's name, ingredients, sizes and photo, to draft its description. Never your name, email, phone number or address. OpenRouter and the AI services it uses are outside Singapore. We ask for services that don't keep what we send or use it to train AI. We keep how many descriptions each stall asked for each day.
Only the SG Home Food team can see the sign-up list. When you sign in, you can see your own account, and so can our team. The database's safety rules block everyone else.
Outside Singapore. Cloudflare and Resend may handle some of your details outside Singapore, as above. Both have data protection terms that bind them to keep your details safe and use them only for the work we ask. OpenRouter gets only a dish's details, never anything about you.
Keeping your details safe
Your details travel over secure (HTTPS) connections. Our database lets each person see only what's theirs, and only our team can see more. We keep our secret keys on our server, never in the app. We don't sell your details, and we don't share them for anyone's marketing.
If there's a data breach that could seriously harm you, we'll tell you and the Personal Data Protection Commission (PDPC), as the law requires.
Children
You need to be 13 or older to make an account. We don't knowingly collect details from children under 13. If you're 13 to 17, please check with a parent or guardian before you sign up. If you think a child under 13 has given us their details, please email us and we'll delete them.
How long we keep your details
- The form's details: until 6 months after the app opens. Then we delete them.
- Your account: until you ask us to delete it.
- Your stall's details: until your account is deleted. Then we delete them too, including your photo and address.
- The stalls you follow: until you unfollow, or your account is deleted.
- Your saved dishes: until you remove them, the seller removes the dish, or your account is deleted.
- Your festival stamps: until your account is deleted.
- Your taster level: until your account is deleted.
- Your character: until your account is deleted.
- A stall's points and what it bought with them: until the stall is deleted.
- Your badges: until your account is deleted.
- Thank-you stickers: until your account, or the seller's, is deleted.
- Your challenge stamps: until your account is deleted.
- A Food Safety Course certificate file: until our team has checked it (then it's deleted). The result: until you remove it or your stall is deleted.
- Your drop alert choices: until your account is deleted. Which alerts we sent: 30 days.
- Your reports: until the stall's account is deleted (if the reviewer deletes a review you reported, we keep the report without the review). If you delete your account first, the report stays, but without your name or email, so our team can still act on it.
- "Tell me when it's back": until 30 days after we've told you, or after 60 days of waiting.
- Group orders: the organiser's details until it's sent or cancelled. The names and who had what: deleted 90 days after the order ends, or once the day has passed if it's never sent.
- Sellers' answers to our quick question on the Order Board, and any note: until the stall is deleted. Only our team sees them.
- Weekly orders: your details until the weekly order stops, then wiped straight away; the rest is deleted 30 days later.
- Your orders: until your account is deleted. Your name, phone number, delivery address and note on an order: we wipe them 90 days after the order ends (completed, declined, cancelled or closed). The dishes, date and total stay.
- Your reviews, and the name shown with them: until you delete them, or your account is deleted.
- Drops: until your stall is deleted.
- A stall's daily WhatsApp tap numbers: until the stall's account is deleted. They say nothing about who tapped.
- Your Seller Agreement record: we keep it even after your account is deleted, so we can always show that you agreed.
You can ask us to delete your details sooner at any time, except the Seller Agreement record.
Your choices
- You can ask to see, correct or delete your details at any time.
- You can withdraw your consent. We'll tell you first what that means: for example, we'll stop emailing you, and without your email address we can't keep your account.
To do either, email our Data Protection Officer at homebasedelights@
If you're not happy with our answer, you can contact the PDPC.
Settings saved on your phone
If you choose light or dark mode, or Simple mode, on our pages, your choice is saved in your browser. So are the food filters you pick on the home page or under "Food preferences" in Profile and settings (cuisines, "Halal-declared only", "Vegetarian dishes" and the allergens you leave out). They stay on your phone and aren't sent to us.
When you open a stall's page, your browser remembers, until you close the tab, whether you came from the seller's own link or from SG Home Food, so your order can say so.
When you tap a stall's WhatsApp button, your browser remembers which stalls you tapped today, so each stall is counted once a day from your phone. It keeps only one day's list at a time.
When you sign in, your browser keeps a sign-in key so you stay signed in. Signing out removes it from your phone.
If you tap "Make this my area" on a neighbourhood's page, choose your area in Profile and settings, or tap "Make … my area" after "Near me", your browser remembers that neighbourhood (for example, Tampines), so the home page can show it first. After "Near me", your phone works out the neighbourhood itself from our map: that step sends nothing to us. It's only the neighbourhood's name, never where you are, and it isn't sent to us. Tap "Forget" on the home page, or choose "Not set" in Profile and settings, to remove it.
If you sell on SG Home Food, your browser also remembers that you're a seller once you've opened your account page or Order Board, so "Orders" at the bottom of the screen opens your Order Board. Signing out removes it.
Changes to this notice
If we change this notice, we'll update the date at the top of this page. If we want to use your details for something new that needs your consent, we'll ask you first.