Privacy Policy

1. Introduction

BeliBuddy ("we", "our", or "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform at belibuddy.com.

By registering an account, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We collect only the minimum data necessary to operate the platform:

• Email address — used for authentication only. Never shown publicly.
• Username — auto-generated at registration. Shown publicly on reviews and your profile.
• Display name and bio — optional. Shown publicly if provided.
• Reviews and ratings — content you submit. Shown publicly.
• Activity data — points, streaks, badges earned through platform use.
• Age range, state, household size, shopping frequency — optional demographic fields collected after registration. Used to show relevant products. Never shown publicly.
• Household income range — optional, collected at review milestone. Used for anonymised market insights only.
• Product scan history — barcodes of products you scan. Used to personalise your feed and generate platform insights.
• Photos — optional product photos attached to reviews. Shown publicly alongside your review.
• Analytics data — page views and interaction events collected via PostHog analytics. Used to improve the platform. Can be declined via cookie settings.

3. How We Use Your Data

• To provide and operate the BeliBuddy platform
• To authenticate your account and maintain session security
• To display your reviews and profile to other users
• To calculate gamification scores, tiers, and badges
• To send platform notifications (tier upgrades, helpful votes)
• To moderate content and maintain platform integrity

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data will be anonymised within 30 days. Aggregated, non-identifiable data (e.g. product ratings) may be retained indefinitely.

5. Your Rights Under PDPA

As a Malaysian resident, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Erasure — request deletion of your account and personal data
• Withdrawal of consent — withdraw consent to data processing at any time by deleting your account

To exercise these rights, contact us at admin@belibuddy.com or use the account deletion feature in your profile settings.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and secure authentication provided by Supabase. However, no system is completely secure — please use a strong, unique password for your account.

7. Third-Party Services

We use the following third-party services to operate BeliBuddy:

• Supabase — database and authentication (servers in ap-southeast-1)
• Vercel — hosting and deployment
• Open Food Facts — public product database (no personal data shared)
• PostHog — product analytics platform. Collects anonymised usage events. You can opt out via our cookie settings.
• Brevo — email delivery service used to send account notifications. Your email address is shared with Brevo for this purpose only.

8. Children

BeliBuddy is intended for users aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has registered, contact us at admin@belibuddy.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via platform notifications. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related queries or to exercise your PDPA rights:

• Email: admin@belibuddy.com
• Company: BeliBuddy.com
• Address: Malaysia (address withheld for now)