Privacy notice

This notice explains what SG Home Food does with the details you give us on this website.

Who we are

SG Home Food is a new app for finding home cooks and bakers of every cuisine across Singapore.

What we collect

When you fill in the "Not ready to start yet?" form on the Sell with us page, we keep:

• your name
• your email address
• your Instagram name, if you give one
• your area, the cuisines you cook, and what you sell
• when you ticked the consent box, and which version of its wording you saw

When you sign in, we keep:

• your email address
• your account type (for example, customer or seller)
• security records of your sign-ins, such as the time, your internet (IP) address and your browser type

If you sign up to sell, we also keep a record that you agreed to the Seller Agreement: your email address, which version, and when.

When you set up your stall, we keep your stall's name, its web address, the "About your stall" words (if you add them) (and any earlier ones, so old links still find your stall), your stall photo, the cook you picked, the cuisines you cook, your food info (your halal information, and whether you sell pork), your WhatsApp number and Instagram (if you add one), and your dishes (their photos, names, sizes and prices, ingredients, allergens and food info, and any description and days' notice). If you fill in "Taking orders", we also keep whether you take orders in the app, whether you offer pickup or delivery, your delivery fee, your "How to pay" note and your pickup instructions. When you send your stall for approval, we keep the date and which version of the promise you ticked. Your phone shrinks your photos before sending them, which also removes hidden details such as where it was taken.

We also ask for your postal code and unit number. With the postal code, OneMap tells us your block and street. We keep your address privately: only you and our team can see it. From it we work out your planning area (like Tampines) and a map pin placed 300 to 600 m from your home, always in the same spot. We don't keep your home's exact map location.

Following stalls

When you follow a stall, we keep which stall you follow, and when you started. Only you can see which stalls you follow (and our team, if we need to check a problem). The stall and everyone else see only the number of followers, never who they are. Following doesn't sign you up for emails.

Ordering in the app

When you send an order, we keep the stall, the dishes, sizes, prices and how many, pickup or delivery, the date and time of day, your name, your phone number, your note (if you write one), your delivery address and postal code (for delivery), when you sent it, and your account. We also keep whether you came from the seller's own link or found the stall on SG Home Food. We don't charge anything for this now.

The seller sees your name and phone number while the order is open, to contact you about it. They see your delivery address only after they accept your order, and only until it's completed or cancelled. After the order ends, they see only your name. You can see your orders on your account page. Our team can see orders if we need to check a problem. SG Home Food never handles money: you pay the seller directly.

When a seller accepts or declines an order, or cancels it, we keep the time they confirmed or their reason, and when it happened. If you cancel, we keep your reason (if you give one). If the seller doesn't answer by the order's date, the order closes by itself.

We email you about your orders: the seller gets an email for each new order, a cancelled order, and at 6pm the day before their orders; you get one when the seller answers, when the order is ready, cancelled or closed, and at 6pm the day before. These emails say only the stall's name, the date and time, and what happened, with a link. They never include addresses, phone numbers or notes. They're only about your own orders, never marketing, so there's no switch to turn them off. We keep a record of which emails went out and when (not the emails themselves), until the order is deleted.

If you sell: when you accept a pickup order, that customer sees your full address (block, street, unit and postal code), your pickup instructions and your "How to pay" note, until the order ends. When you accept a delivery order, they see your "How to pay" note.

Drops: when you post a drop, we keep its title and words (if you add them), the dishes and how many of each, when orders close, the collection times, and when you close it. Everyone can see an open drop on your stall page, with how many are claimed. When you order from a drop, we keep the same as any order, plus the drop and the collection time you chose. Your order is accepted as soon as you send it, so the seller sees your delivery address (for delivery) straight away, and you see their pickup address (for pickup) and "How to pay" note straight away.

Tapping the WhatsApp button

When you tap a stall's WhatsApp button, your phone tells us, and we add 1 to that stall's taps for the day. We keep only the number of taps for each stall on each day. We don't keep who tapped, when in the day, or your internet address. The seller and our team can see their stall's numbers.

Our server uses your internet address for a moment to stop the same place sending too many taps. It isn't saved.

Your chat with the seller happens in WhatsApp, not on SG Home Food. We can't see it.

Reporting a stall

If you report a stall, we keep the stall, the reason you chose, your note (if you write one), when you sent it, and your account, so our team can reply to you. Only our team sees your report. We never tell the seller who reported them. Please don't put anyone's phone number or address in the note.

"Near me" on the home page

"Near me" sorts stalls by how far away they are. We ask for your location only when you tap it.

• If you use your phone's location, it stays on your phone. It isn't sent to us or saved.
• If you type a postal code, our server sends it to OneMap to find roughly where it is (to about 100 m), and sends that back to your phone. We don't save the postal code or the spot, and we don't write postal codes in our records.

Either way, the page forgets the spot when you close it.

Why we collect it

• The form's details: only to email you about selling on SG Home Food, as the consent box says.
• Your sign-in details: only to let you sign in, show you your account, and keep accounts safe. If you sell, we also use your email address to tell you when we approve your stall, send it back with a note, pause it or reopen it.
• Your Seller Agreement record: to show that you agreed to it before your stall opens. You can read it again from your account.
• Your address: to find your planning area and place your map pin. Customers see only your area and the pin. The only exception: when you accept someone's pickup order, that customer sees your address, until the order ends.
• Your stall's details: to show your stall to customers once we approve it. Until then, only you and our team can see them. Once approved, anyone can see them, including the WhatsApp number and Instagram you give for your stall. Please don't put your address in your stall name, your "About your stall" words, your dishes or your photos.
• Your orders: to send your order to the seller, so they can make it and contact you about it, and to show you your orders. Where you came from: to plan how SG Home Food will be paid for later. It isn't used for anything else.
• Your order settings: to let customers order from you in the app. Whether you take orders, pickup or delivery, and your delivery fee will show on your stall page. Your "How to pay" note and pickup instructions are private: only you and our team can see them, and a customer will see them only after you accept their order.

The robot check

To stop spam, the form and the sign-in page use Cloudflare Turnstile to check that you're a person. It only starts when you begin typing. For this check, your browser and our server send Cloudflare some technical details, including your internet (IP) address. This check doesn't save your IP address.

Where your details are kept

• Supabase stores the sign-up list, accounts, stalls and orders in its database, and stall photos in its file store, in Singapore.
• Cloudflare runs this website and the robot check. Cloudflare works around the world, so some details may pass through other countries.
• OneMap, run by the Singapore Land Authority, tells our server where a postal code is and which planning area it's in. Our server sends it your postal code for this, never your name or email. The map on our home page also comes from OneMap, so your browser gets the map pictures from OneMap, which sees your internet (IP) address, like any website you visit.
• Resend sends our emails (sign-in codes, emails about your stall, and emails about orders), so it gets your email address, for stall emails your stall's name and any note from our team, and for order emails the stall's name and the order's date and time. Resend is a US company, so your email address may be handled outside Singapore.

Only the SG Home Food team can see the sign-up list. When you sign in, you can see your own account, and so can our team. The database's safety rules block everyone else.

How long we keep your details

• The form's details: until 6 months after the app opens. Then we delete them.
• Your account: until you ask us to delete it.
• Your stall's details: until your account is deleted. Then we delete them too, including your photo and address.
• The stalls you follow: until you unfollow, or your account is deleted.
• Your reports: until the stall's account is deleted. If you delete your account first, the report stays, but without your name or email, so our team can still act on it.
• Your orders: until your account is deleted. Your name, phone number, delivery address and note on an order: we wipe them 90 days after the order ends (completed, declined, cancelled or closed). The dishes, date and total stay.
• Drops: until your stall is deleted.
• A stall's daily WhatsApp tap numbers: until the stall's account is deleted. They say nothing about who tapped.
• Your Seller Agreement record: we keep it even after your account is deleted, so we can always show that you agreed.

You can ask us to delete your details sooner at any time, except the Seller Agreement record.

Your choices

• You can ask to see, correct or delete your details at any time.
• You can withdraw your consent. We'll then stop emailing you.

To do either, email our Data Protection Officer at homebasedelights@gmail.com. You can also find this on our Contact page.

Settings saved on your phone

If you choose light or dark mode, or Simple mode, on our pages, your choice is saved in your browser. So are the food filters you pick on the home page (cuisines, "Halal-declared only" and "Vegetarian dishes"). They stay on your phone and aren't sent to us.

When you open a stall's page, your browser remembers, until you close the tab, whether you came from the seller's own link or from SG Home Food, so your order can say so.

When you tap a stall's WhatsApp button, your browser remembers which stalls you tapped today, so each stall is counted once a day from your phone. It keeps only one day's list at a time.

When you sign in, your browser keeps a sign-in key so you stay signed in. Signing out removes it from your phone.

Changes to this notice

If we change this notice, we'll update the date at the top of this page.