Discover the Best Dishes, Together

Khala is your food companion. Find the best dishes, rated by you and the community. Get reviews down to the individual dish level

Khala Privacy Policy

Effective Date: 8 September 2024

At Khala ("we," "our," "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our app (available on Android and iOS).

1. Information We Collect

  • Contact Information: Your name and email address are collected to create and manage your account, and communicate with you.
  • User Content: Photos, videos, and other content you upload to the app.
  • Location Data: We use your location (if you allow) to customize restaurants near you. Location data is only collected when you grant permission, and is used in real-time to show nearby restaurants. We do not permanently store your precise location data.
  • Push Notification Data: Device tokens and notification preferences to send you push notifications about activity on your account.
  • Analytics and Crash Reporting: We collect anonymous usage analytics and crash reports to improve app performance and fix technical issues.
  • Identifiers: Unique identifiers such as your user ID and device information for security and analytics.
  • Usage Data: Information about how you use our app, including interaction data and search history.
  • Diagnostics and Performance Data: Collected to ensure the app runs smoothly and to troubleshoot technical issues.

2. How We Use Your Information

  • Operate and manage the app
  • Personalize your experience
  • Analyze and improve app features
  • Ensure security
  • Comply with legal obligations

3. How We Share Your Information

We share your information with the following third-party service providers to operate our app:

  • Firebase (Google): We use Firebase services for hosting, database storage (Firestore), file storage (Firebase Storage), authentication, push notifications (Firebase Cloud Messaging), analytics (Firebase Analytics), and crash reporting (Firebase Crashlytics). Both our Android and iOS apps use the same Firebase backend services.
  • Google Maps and Location Services: On Android, we use Google Maps SDK and Google Play Services for location features. On iOS, we use MapKit and CoreLocation for location services. These services help us show nearby restaurants and customize your experience.
  • Google Sign-In and Apple Sign-In: If you choose to sign in with Google or Apple, your authentication is handled by Google's or Apple's services respectively.
  • Legal Obligations: To comply with applicable laws or lawful requests.
  • Business Transfers: Your data may be transferred in mergers or acquisitions.

4. Data Retention

We retain your information as long as necessary to provide our services or as required by law:

  • Account Data: Retained until you delete your account or request deletion.
  • User Content: Photos, reviews, and other content you post are retained until you delete them or your account is deleted.
  • Location Data: Not permanently stored; used only in real-time when you grant permission.
  • Analytics Data: Aggregated and anonymized analytics data may be retained for longer periods to improve our services.

When data is no longer needed, it is securely deleted or anonymized.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data.
  • Restriction: Request restriction of processing of your personal data.
  • Objection: Object to processing of your personal data.
  • Data Portability: Request transfer of your data to another service provider.
  • Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.
  • Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns.

To exercise any of these rights, please email us at hello@kha.la. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you grant permission for location access, push notifications, or other optional features.
  • Contract Performance: To provide the services you request, such as creating and managing your account.
  • Legitimate Interest: To improve our services, ensure security, and analyze app usage patterns.
  • Legal Obligation: To comply with applicable laws and regulations.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption, secure authentication, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your data may be processed outside your country with safeguards to meet legal standards.

9. Data Controller

Khala is the data controller responsible for processing your personal data. If you have questions about this privacy policy or our data practices, please contact us at hello@kha.la.

10. Changes to This Policy

We may update this policy periodically. Changes will be reflected with a new effective date and notice if significant. We encourage you to review this policy regularly to stay informed about how we protect your information.

11. Contact Us

Email us at hello@kha.la with any questions or concerns.

Last Update: 8 September 2024