🔥 Khau Gully

Privacy Policy

Last updated: June 2026

Khau Gully ("we", "our", or "the app") is built to help you rate individual dishes and share food trails with others. This policy explains what information we collect, how we use it, and your choices.

1. Information we collect

Account information — your email address, display name, and handle when you create an account.
Ratings and content — dish scores, "would go back" answers, written notes, and trails you create or follow.
Photos — photos of dishes you take and submit with a rating. These are stored on our servers and shown to other users.
Location (in-session only) — your approximate GPS location is used to suggest nearby restaurants when you add a dish. It is not stored in our database and is not linked to your account.

2. How we use your information

We use the information solely to operate Khau Gully:

Authenticate you and maintain your account.
Display your ratings, trails, and profile to other users.
Suggest nearby restaurants based on your current location.
Calculate dish scores using our scoring model.
Moderate content to keep the app safe (automated text and photo checks).
Improve our service and develop proprietary dish-recognition technology — photos submitted with ratings may be used to train our own models (e.g. automatic dish categorisation, quality detection). Photos used for this purpose are anonymised: your name, handle, and account details are never attached to the training data.

We do not sell your data. We do not use it for advertising. We do not share it with third parties except as described below.

3. Third-party services

Supabase — our backend provider (database, file storage, authentication). Your data is stored on Supabase's infrastructure. Supabase Privacy Policy →
Apple MapKit — used to search for and display restaurants. Location queries are sent to Apple's servers under Apple's privacy policy.
Google Gemini — when you take a photo of a dish, it is sent to Google's Gemini API to identify the dish name and category automatically. Google does not use these images to train its models and retains them for up to 48 hours for safety purposes only. Google Privacy Policy →
OpenAI — photos and text you submit are briefly sent to OpenAI's API for content moderation (checking for inappropriate content). Images are not stored by OpenAI beyond the API call. OpenAI Privacy Policy →

4. Data retention

Your account data is kept for as long as your account exists. Ratings are append-only and form a public record of the dish's score history. If you delete your account, your personal information (name, email, handle) is removed; your ratings may remain in anonymised aggregate form to preserve score history. Photos you submitted may be retained in anonymised form for model training after account deletion; they will never be linked back to you.

5. Your rights

Access & export — contact us and we'll provide a copy of your data.
Correction — you can update your display name and handle in the app at any time (Settings → Edit Profile).
Deletion — you can delete your account from within the app (Profile → Delete Account). This is immediate and permanent.

6. Children

Khau Gully is not directed at children under 13. We do not knowingly collect information from children under 13.

7. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the app after changes constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Email us at [email protected].