Privacy policy

Your chosen state or federal territory and your basket of ingredients are saved in your own browser (local storage). We do not store them. When you filter prices by your basket, the item codes you added or removed travel with that one request so we can pick the rows, and are then forgotten. Clearing your browser's site data removes them.

Your list of recent chats with the assistant (up to 20 chats) is saved in your own browser so you can open them again. You can delete one chat or all of them on the Ask page. The questions themselves also reach our servers; see section 3.

We do not use advertising or tracking cookies.

Our sign-in provider, Firebase Authentication by Google, keeps your email address to sign you in. Our own database does not store it; it knows your account only by an internal ID.

We keep your saved basket and scenarios.

You can download or delete this data at any time from your account page.

If you delete your account, we keep two scrambled (hashed) records that do not contain your email or account details: one of your sign-in ID for one day, so the deletion cannot be undone by an old sign-in, and one of your email with the number of questions you asked this month, until the month ends, so signing up again does not reset the monthly allowance.

To write the answer, your question and the chat so far are sent to a paid AI service whose servers are outside Malaysia.

Before anything is sent we remove IC numbers, phone numbers, emails, addresses and names that we can spot. We cannot catch everything, so please do not type personal details. Your account email is never sent.

We keep questions (with those details removed) and answers on our servers for up to 90 days to check and improve the assistant, then delete them. They are not linked to your name.

To limit heavy use we keep a scrambled (hashed) form of your internet address for up to 35 days. It cannot be turned back into the address.

Our servers and stored data are on Google Cloud in Singapore.

When you write to us through the contact page we keep your email address and message, your name and company if you give them, and for a problem report the page and browser details you choose to include. We use them only to reply to you and to fix what you reported.

Messages are stored on Google Cloud in Singapore and forwarded to our inbox through Cloudflare's email service. We delete them after 12 months. They are never sent to the AI.

To stop spam, the contact page uses Cloudflare Turnstile. It checks your browser, usually without a puzzle, and Cloudflare processes technical details such as your internet address to do so.