Munchly

Privacy Policy

Last updated: 18 April 2026

This draft describes how Munchly intends to collect, use, and disclose personal data in connection with the Munchly marketplace. It is structured for review against Singapore's Personal Data Protection Act 2012 (PDPA). Munchly will publish a counsel-approved version before relying on this policy.

1. Who holds your data

The data controller will be the Munchly operating entity identified on this page once incorporated. Contact details for privacy inquiries will be added here.

2. What we collect

  • Account and profile: email, authentication identifiers from Google or Apple where you use those sign-in methods, display name, username, profile photo.
  • Commerce: orders, cart, listings you create, store information, pickup selections, transaction references, and reviews after eligible purchases.
  • Location: when you allow it, approximate or precise location to show maps, directions, or nearby Sellers.
  • Media: photos you upload for listings or profile.
  • Diagnostics: error and performance data (for example via Sentry) to keep the app reliable.
  • Notifications: device push tokens where you enable notifications.

3. Purposes of use

We use personal data to provide and improve the marketplace, authenticate users, process orders and payments, prevent fraud and abuse, comply with law, and send service-related messages. Marketing messages will only be sent with appropriate consent under the PDPA.

4. Disclosure and subprocessors

We disclose data to service providers who help us run Munchly, such as hosting, database, authentication, maps, analytics, and payments. A non-exhaustive list appears on our Subprocessors page. Payment data is handled by payment partners under their agreements and PCI obligations.

5. Cross-border transfers

Some providers may process data outside Singapore. Munchly will describe the safeguards required under the PDPA (for example, standard contractual clauses or comparable measures) in the final policy.

6. Retention

We retain personal data only as long as needed for the purposes above, including legal, tax, and accounting obligations, dispute resolution, and safety.

7. Your rights

Subject to exceptions in the PDPA, you may have rights to access and correct your personal data, withdraw consent for certain optional uses, and lodge a complaint with the relevant regulator. Munchly will provide contact instructions for requests in the final policy.

8. Cookies (web)

See our Cookies page for web technologies.