Privacy

Privacy Policy

Last updated 29 October 2026 · Baca dalam Bahasa Malaysia

Tablegrub is an app for finding and sharing good food. This policy explains what personal data we collect, why, who else handles it, and what you can do about it. It follows Malaysia's Personal Data Protection Act 2010 (PDPA), as amended in 2024.

Who we are

Tablegrub is run by Vectorsoft Sdn Bhd, a company in Malaysia ("we", "us"). We decide how your personal data is used, and we are responsible for it under the PDPA.

Questions or requests: hello@tablegrub.com.

What is public

Tablegrub is a public place to share food. Anyone can see these, in the app and on tablegrub.com:

Your username, profile name and bio. If you are a verified reviewer, your badge and the line about who you are.
Your rank, from Diner to Grand Epicure. It comes from how many visits you share.
Your posts: photos, dish names, notes, the place, the time, and whether it was dine-in or delivery.
A map on your profile, in the app, with a pin for each place you have posted.
The dishes you hearted in your posts. Each heart adds to a place's and a dish's like count, and your name can appear among the people who liked a place.
How many likes each of your posts has.
Comments you write.
Journeys you make public.
How many people you follow and how many follow you.

Think before you post. People can screenshot or share what is public, and we cannot pull back copies made outside Tablegrub.

What we collect and why

Signing in

You sign in with Apple. Apple gives us an account identifier and the name you choose to share. Depending on what you choose on Apple's sign-in screen, Apple may also give us an email address. If you choose Hide My Email, that is a private address that Apple forwards to you, and we never see your real one. We never see your Apple Account password.

We use these to create and run your account and to keep it secure. We may add sign-in by phone number later. If we do, we will update this policy before it starts.

Your profile

Your username, profile name and bio. You choose them and can change them in Settings. They are public, so others can find you and see who posted what. Your profile shows the first letter of your name on a coloured circle; you cannot add a profile photo yet.

We also save the zone you last picked with your account, so it comes back when you sign in on another phone.

Posts

Photos, dish names, notes, the place, the time, and dine-in or delivery. We use them to show your post and to build the counts and lists everyone sees.

The app redraws every photo on your phone before it is posted. This leaves out the hidden details a camera stores in a photo file, such as where it was taken. Drafts you save stay on your phone until you post them.

Likes, saves, journeys and follows

Hearts on dishes in your own posts are public. Each one adds to the place's and the dish's like count.
Likes on other people's posts. Anyone can see how many likes a post has. Only the post's author can see who liked it, and we tell them in their Activity. These likes do not change a place's counts.
Saves are private. We show how many people saved a journey, never who.
Journeys you make public can be seen by anyone. When you send a journey to someone in the app, they see it, with your name, in their Activity.
Follows. We keep who you follow, to show you their posts. The person you follow is told in their Activity. Follower and following counts are public.

Location

Only if you allow it, and only while the app is open. We use it to pick the zone you are in, to show how far places are, to sort nearby places, and to suggest matches when you search for a new place (see below).

When you add a restaurant while you are standing there, its pin is set from your phone's position, and we record that you added the place. When you post from a place whose pin still comes from Google, and you are within 250 metres of it, your phone's position may become its pin. Either way, the pin is the restaurant's public location.

Apart from that, we do not store your phone's position, we keep no history of where your phone has been, and we never use your location in the background. Your posts do show where you ate: each one names the place, and your profile has a map of them.

You can turn location off at any time in your iPhone's Settings. The app still works; you pick your zone by hand.

Camera and photos

The camera is used only when you take a photo for a post. When you pick photos from your library, the app receives only the photos you pick. If you save your profile's story image, the app asks to add it to Photos; it cannot read your library.

Searching

In Tablegrub. We keep what you search for in the app, the zone, how many results came back and what you tapped, together with your account if you are signed in. We use it to improve search and to see which dishes and places people look for but cannot find.

For a place not yet on Tablegrub. The app sends what you type, and a location to search around, to Google Places to suggest matches. That location is your phone's position if you allow location, or the middle of your zone if you do not. The app asks Google directly, so Google also sees your IP address. For a place you add, we keep Google's ID and, until someone pins the place on the spot, Google's map position for it. The name and address you confirm become a Tablegrub listing.

Reports, hiding and blocking

When you flag a post or comment, or report a profile or journey, we keep the report, the reason and who sent it. We need these to act on reports and to stop people misusing them. The person you report is never told who reported them.

Each account has a report weight, which decides how much its flags count. We work it out from the account's age, how many visits it has posted, whether flags against it were upheld, and whether it is a verified reviewer. It is never shown to anyone. It stops a burst of new accounts from burying an honest post.

We keep who you block on our servers, so the app leaves them out on any phone you sign in on. Posts and comments you hide are remembered only on your phone. Nobody is told either way.

Messages to us

When you email us, we keep your message and our reply, so we can help you and keep a record of what was agreed.

Technical data

Our providers' servers record technical details such as IP addresses, app version and the time of each request. We use them to deliver the service, keep it secure and fix faults.

If you have chosen in your iPhone's settings to share analytics with app developers, Apple sends us crash reports. They do not name you.

What we do not do

We do not track you for advertising, in Tablegrub or across other companies' apps and websites.
We do not use third-party analytics or advertising tools in the app.
We do not sell or rent your personal data.
We do not ask for sensitive personal data, such as your health or religious beliefs. Please keep it out of your posts.
Sponsored listings are labelled, and they never change a count or a ranking. A sponsor may see totals, such as how many times its listing was shown or tapped, never who.

The PDPA lets us process your personal data with your consent. It also allows processing without consent in some cases, such as when it is needed to provide the service you asked for, or to meet a legal duty.

The screen where you create an account links to this policy and to our Terms of Use. You give your consent to this policy when you create an account. Location, camera and saving to Photos each ask for your permission on your iPhone. You can say no, or change your mind at any time in Settings.

If you are under 18, your parent or guardian must agree to this policy for you. By creating an account, you confirm that they have.

The sign-in details are required: without them we cannot give you an account. Everything else is up to you.

Who else handles it

We use a few providers to run Tablegrub. Each one receives only what it needs for its part. Each is bound, by its agreement with us or its terms of service, to protect your data at least as well as this policy does.

Apple runs Sign in with Apple and the App Store, and provides the maps in the app. To draw a map, your phone fetches map data for the area on screen from Apple, which sees that area and your IP address.
Supabase hosts our database and stores photos: your account, profile, posts and their photos, likes, saves, follows, blocks, journeys and reports.
Cloudflare runs this website, delivers its pages and the photos shown on it, and protects it from abuse.
Google receives your search text, a location to search around and your IP address when you search for a place not yet on Tablegrub.
Our email provider holds the emails you send us and our replies.

We may also disclose data when the law requires it, for example to the police or a court with a valid order, or to protect someone from serious harm.

If Tablegrub is sold or merged, your data would pass to the new owner, who must keep to this policy. We will tell you before that happens.

Where it is stored

Your account, posts and photos are stored in Singapore. Copies of public photos and of this website's pages are kept for a short time in data centres around the world, close to whoever is viewing them, so they load quickly. Apple and Google may handle what they receive in the United States and other countries.

Section 129 of the PDPA allows personal data to go outside Malaysia when, among other cases, the place it goes has a law substantially similar to the PDPA or protects it adequately, when the transfer is needed to provide the service you asked for, or when you consent. Singapore has its own personal data law, similar to Malaysia's. We send data abroad only to run Tablegrub, and only to providers bound to protect it as described above.

How long we keep it

Account, profile and sign-in details: Until you delete your account
Posts and likes: Until you delete them, even if you delete your account (see below)
Comments: Until you delete them or your account
The words of a post or comment you deleted: Hidden at once, erased within 90 days
Saves, follows, journeys and blocks: Until you remove them or delete your account
Searches in the app: Linked to you until you delete your account, then no longer linked
Reports and moderation decisions: 2 years after the case closes
Emails with us: 2 years after the last message
Technical logs: Up to 90 days
Backups: Gone within 12 months

When you delete a post, it disappears from Tablegrub at once and its photos are deleted. Its words, dish names and place stay hidden in our database for up to 90 days, in case they are part of a report we are dealing with, and are then erased.

When you delete your account, we erase your profile and sign-in details, your comments and journeys, and your saves, follows and blocks. Your posts and the likes you gave stay on Tablegrub, so the counts others rely on stay accurate. They show "Former member" instead of your name, with no username or bio. They do stay grouped together under that one former account, though, and a photo or a note can still say something about who wrote it. If you want them gone, ask us at any time, before or after you delete your account. Point us to one of them, and we will remove them all, photos included; we may ask you to show they are yours. How deleting your account works.

How we protect it

Data travels between the app and our servers encrypted. Our database checks every request against rules about who may see or change what, so the app cannot read or change what you have not made public. Within Vectorsoft, only the people who run Tablegrub can reach personal data that is not public, and only when they need to. Our providers' staff can reach it only as their agreements with us allow.

No system is perfectly secure. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commissioner, as the law requires.

Your rights

Access. Ask for a copy of the personal data we hold about you.
Correction. Change your profile in Settings, or ask us to correct anything else that is wrong, incomplete or out of date.
Portability. Ask for your data in a file you can keep, or ask us to send it to another service where that is technically possible.
Deletion. Delete your account in the app or by email, and ask us to remove your posts too if you want them gone. See Delete your account.
Withdraw consent. Turn off location, camera or Photos access at any time in your iPhone's Settings. To withdraw your consent to everything else, delete your account, and ask us to remove your posts as well; we cannot run an account without it.
Object. Ask us to stop processing that causes, or is likely to cause, you substantial damage or distress.
No marketing. We do not send marketing messages. If we ever do, you can stop them at any time.

Write to hello@tablegrub.com and include your username. We may ask you to confirm it is you, for example by adding a short code we send you to your bio in the app. We reply within 21 days, as the PDPA requires, and we do not charge.

If you are unhappy with how we handled your data, please tell us first so we can put it right. You can also complain to the Personal Data Protection Commissioner of Malaysia at pdp.gov.my.

Children

Tablegrub is for people aged 13 and over. If you are under 18, your parent or guardian must agree to this policy and our Terms of Use for you before you sign up. If we learn that someone under 13 has an account, we delete it. If you think a child under 13 is using Tablegrub, please tell us.

This website

We set no cookies on this site, and we run no analytics, adverts or third-party scripts or fonts on it. Our host, Cloudflare, handles your IP address to deliver the pages and to block abuse. To tell people from bots, Cloudflare may set a short-lived security cookie; it is not used to track you.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows when it last changed.

Contact

Vectorsoft Sdn Bhd, Malaysia. Email hello@tablegrub.com.

See also our Terms of Use and Community Guidelines. This policy in Bahasa Malaysia: Notis Privasi.