Privacy Policy

Last updated: 2026-08-13

The Chinese version of this document governs.

1. Introduction

Welcome to my PICK (the "Platform"). We take your privacy seriously and are committed to protecting your personal data. This policy explains how we collect, use, disclose and protect your information.

2. What we collect

When you use the Platform we may collect:

• Account data: email address and mobile number (where applicable).

• Location data: your real-time location, with your permission, used to recommend nearby restaurants and activities.

• Your preference settings.

• Usage data: recommendation history, assistant conversation content and history, check-in history, pk coin transactions and sign-in records.

• Device data: device model, operating system version and how you use the app.

3. How we use it

• To provide personalised restaurant and activity recommendations.

• To save and continue your assistant conversations and understand follow-up questions within them.

• To improve service quality and user experience.

• To process pk coin rewards and VIP subscriptions.

• To send you relevant notifications, where you have agreed to receive them.

• To analyse usage trends and improve the product.

4. Sharing your data

We never sell, rent or trade your personal data to third parties. We share it only:

• with your explicit consent;

• to comply with legal or regulatory requirements; or

• with service providers, and then only as far as delivering the service requires.

4a. Third-party services we use

The following processors handle limited data so the Platform can operate. Each receives only what its service requires:

• Supabase (accounts, database, notification dispatch): email address, account identifier, and the records you create in the app.

• Google Places and OpenWeatherMap: coarsened coordinates when searching. We snap your position to a grid and never send your exact location.

• Google AdMob (rewarded ads): device advertising identifier, ad view and verification records. You can limit ad tracking in your device settings.

• RevenueCat and the Apple App Store / Google Play (subscriptions): transaction identifiers and subscription status. Payment details are handled by the store; we never receive your card details.

• OneSignal (push notifications): a push identifier, your account identifier, and your notification category preferences. Active only after you agree to receive notifications.

• PostHog (product analytics): pseudonymous usage events. Off by default and collected only after you turn analytics consent on. Payloads never include email, phone number, exact coordinates, allergy information or any free-text you have written.

• Sentry (crash reporting): error stack traces, app version and device model. Request headers, query strings, profile fields and coordinates are stripped before sending.

Some of these providers operate servers outside Hong Kong. Our arrangement with each of them limits their use of your data to providing the service to us.

4b. Your notification and analytics choices

• Push notifications are off by default. We ask the operating system for permission only after you have agreed in the app. Transactional and social notifications (friend requests, nudges, subscription status) are a separate category from marketing messages; marketing is off by default and must be turned on deliberately.

• You can switch any category off at any time in Notification settings, or withdraw permission entirely in your device settings. The underlying records stay visible in the app either way — push is a delivery method, not the data itself.

• Product analytics are off by default. You can turn them on or off at any time in Notification settings. Turning them off stops collection and clears this device’s analytics identifier.

• Advertising: watching a rewarded ad is entirely voluntary. Declining does not restrict any feature — it only forgoes the 2 pk coins.

5. Security

We use SSL-encrypted transmission and apply reasonable security measures to protect your data.

6. Your rights

You have the right to:

• access, correct or delete your personal data;

• withdraw consent, though this may affect your use of the service; and

• have your request handled within 14 days.

Email [email protected] to exercise these rights.

7. Retention

We keep your data until your account is deleted. After deletion we erase it completely within 30 days.

7a. Deleting your account

You can delete your account yourself at any time from Me → Account in the app. You do not need to email us and you do not need to wait for approval.

On confirmation: your sessions are revoked, and your profile, assistant conversations, pk coin ledger, check-ins, favourites, friendships, shares and reports are deleted from the database by cascade. We also request deletion of your OneSignal push identity and your PostHog analytics identifier.

Deletion is irreversible. Your pk coin balance, sign-in streak and draw eligibility are not retained and cannot be restored.

Deleting your MyPick account does not cancel an App Store or Google Play subscription. Subscriptions must be cancelled in that store’s subscription settings — we have no ability to cancel one on your behalf.

Transaction and abuse records may be retained in anonymised form for a reasonable period where we are legally required to keep them.

8. Age limit

The Platform is for people aged 18 and over. If you are under 18 you may not register or use the Platform, and we do not create accounts for minors.

If we find that an account holder is under 18 we will close the account and delete the associated personal data.

9. Changes to this policy

We may update this policy from time to time and will announce changes in the app.

Language versions

The Chinese version of this document governs. If there is any discrepancy between the Chinese and English versions, the Chinese version prevails.