Privacy Policy

1. Introduction

This Privacy Policy explains how Plan: Salu-Salo (“Salu-Salo,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use our website at plansalu-salo.com and related services (the “Service”). We operate from the Las Pinas, Metro Manila, Philippines and comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By using the Service, you agree to the collection and use of information in accordance with this Policy.

2. Who we are

Plan: Salu-Salo is a group dining planning and booking platform operated by Manu Babbar, a sole proprietor based in the Philippines. For privacy questions, contact us at support@plansalu-salo.com.

3. Information we collect

Information you provide:

• Account information: name and email address, whether you sign up with email and password, Google Sign-In, or Sign in with Apple (all through Supabase Authentication)
• Profile information: optional dietary preferences, allergies, other preferences you choose to enter, and a profile picture if you upload one
• Group and planning data: groups you create or join, restaurants you propose or vote for, planned outings, and related activity
• Photos you upload: profile pictures, bill and receipt photos for bill splitting, and photos attached to your reviews. Bill photos are visible to your group; review photos appear with your review
• Reviews and ratings: reviews you write about restaurants after outings, shown publicly without your name (“Verified diner”)
• Content reports: if you report a review or a group member, we record the report and that you filed it, so we can act on it. The reported person is not told who reported them
• Survey responses: feedback you submit through in-app surveys (e.g., completion surveys, stuck surveys)
• Communications: any messages you send us directly

Information collected automatically:

• Location data: approximate geolocation (latitude and longitude) when you permit your browser to share it, used to find restaurants near you. Location is used in real time for search and is not stored in your profile.
• Usage data: pages visited, actions taken, timestamps, device type, browser type, and similar technical information
• Cookies and similar technologies: session cookies for authentication and functional cookies for Service operation
• Push notification tokens: if you turn notifications on, we store the device token needed to deliver them (removed when you turn them off or delete your account)

Information from third parties:

• Google Sign-In: when you sign in with Google, we receive your email address, name, and profile picture as authorized by you through Google’s consent screen
• Sign in with Apple: when you sign in with Apple, we receive your name and email address. If you choose Apple’s “Hide My Email”, we receive a private relay address instead of your real one, and we treat it the same as any other email address

4. How we use your information

We use your information to:

• Provide and operate the Service (create groups, run voting, plan outings)
• Authenticate your account and keep it secure
• Search for restaurants using your location
• Send you transactional emails (group invitations, notifications, planning updates)
• Show your content to the right people: reviews and their photos appear publicly without your name; bill photos and group activity are visible to your group
• Moderate the Service: review reports of objectionable content or behaviour and act on them (including hiding content)
• Improve the Service based on usage patterns and survey feedback
• Respond to your questions and support requests
• Comply with legal obligations

5. Third-party services we use

We use the following third-party services to operate the Service. Each processes data on our behalf under their own privacy terms:

We do not sell your personal information to anyone.

6. International data transfers

Some of our service providers (Supabase, Google, Resend, Anthropic, Vercel) may process data outside the Philippines, including in the United States and the European Union. Where this happens, we rely on contractual safeguards provided by those vendors to protect your information.

7. Data retention

We keep your information only as long as needed to provide the Service and to meet legal obligations.

• Account data: retained while your account is active
• Group and planning data: retained while associated groups exist
• Survey responses: retained for product improvement purposes
• After account deletion: data is deleted or anonymized within a reasonable period, except where retention is required by law

Deleting your account

You can delete your account yourself at any time from your Profile page (Profile → Danger zone → Delete my account), on the website or in the mobile app. Deletion is immediate and permanent — there is no grace period or recovery.

When you delete your account:

• Deleted immediately: your profile (name, preferences, allergies), group memberships, favourites, notifications, push-notification registrations, sign-in identities and sessions, saved payment QR images, RSVPs and votes for outings that haven’t happened yet, and survey authorship
• Kept without your identity (“Deleted user”): records your groups still need — past outings, bookings, bill splits and who-owes-what amounts, past votes, and reviews. These no longer reference your name, email, or account.

If you can’t access your account, email support@plansalu-salo.com from your registered address and we will delete it for you.

8. Your rights

Under the Data Privacy Act of 2012, you have the right to:

• Be informed about how your data is processed
• Access your personal data
• Correct inaccurate data
• Object to processing
• Have your data erased or blocked
• Data portability
• File a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph

To exercise any of these rights, email us at support@plansalu-salo.com. We will respond within a reasonable period. Erasure has a self-serve path: see “Deleting your account” in section 7.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), access controls, and vetted third-party infrastructure. No system is perfectly secure, but we work to protect your data against unauthorized access, loss, or misuse.

10. Children’s privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date. Material changes will be communicated through the Service or by email.

12. Contact us

For privacy questions or to exercise your rights, contact us at:

Email: support@plansalu-salo.com
Entity: Manu Babbar
Location: Las Pinas, Metro Manila, Philippines