Munchpal
Last updated: 6 November 2026
Munchpal is a food discovery app for Malaysia. This policy explains what information we collect, why we collect it, and what we do with it. If you have questions, contact us at [email protected].
You must be at least 16 years old to create a Munchpal account. We do not knowingly collect information from anyone under 16. If we learn that we have collected information from someone under 16, we will delete that account and its data.
When you create an account, we ask for your date of birth. We use it solely to confirm you meet our minimum age requirement of 16 years. We store it on your account record for as long as your account is active, and delete it when you delete your account. We do not use it for advertising, profiling, or recommendations, and we do not share it with third parties.
With your permission, Munchpal uses your device's precise location to find restaurants near you. Your position is sent to our servers only to run that search and is not saved to your account. We do not track your movements or build a location history.
If you choose a home area in the app (for example, "Kepong & Jinjang"), we store that area on your profile: its name, country, and the fixed centre point of the area. This is the area you picked, not your device's position. Your area's city name may be shown on your profile to other users. You can change or clear it at any time.
If you are outside the area Munchpal currently covers and choose to join our coverage waitlist, we store your email address and an approximate location, rounded to about 1 km, so we know where to launch next. We never store your precise position for this. We only store it if you tap to join, and it is deleted when you delete your account.
Each time you open Munchpal with location permission on, your phone's last known position, rounded to about 1 km, is sent so we can record which Malaysian state you are in (for example, Pulau Pinang). Only the state is stored, never the position itself.
From version 1.1.0, if you add a place that isn't on Munchpal yet, it is added where your phone is, so we save that place's precise position (to about 10 m) together with a link to your account while it waits for review. The link is used only to limit how many places one person can add and is never shown to other people. Once the place is checked, the link to your account is removed; the place's position stays, because it's where the place is. Munchpal only adds a place from a precise position: if you allow only approximate location, your phone asks you for precise location once, or the place isn't added.
You can refuse or revoke location permission at any time in your device settings. If you do, restaurant results will be based on your chosen area, or a general default area, rather than your precise position.
When you share a food moment or set a profile picture, the photo is stored on our servers and shown to other Munchpal users. Uploaded photos are stored at public web addresses, so anyone who has a photo's address can open it, including people outside Munchpal. Your photos are removed when you delete your account. Only upload photos you have the right to share.
Each day you open Munchpal, we record that day on your account, together with your phone's language setting, which app version you're using, and the Malaysian state you were in (see Location above). We use this only to understand how many people keep using Munchpal, in which regions, and how many still use older app versions. It stays with us, is not shared with anyone, and is deleted when you delete your account.
From version 1.1.0 of the app, we also record which places we suggested to you, in what order, how well each matched your taste, roughly how far away it was (in bands such as 2–5 km, never your position or an exact distance), and what you did with them (opened, Go here, skipped, rated), with the app version. We use this to measure and improve how well suggestions match your taste. It stays with us and is deleted after 180 days, or straight away when you delete your account. You can turn this off at any time in the app under Profile → Settings → Privacy & data → Suggestions data; we then stop recording it and delete what we have.
If you allow notifications, your device is issued a token by Apple or Google that lets us deliver messages to it. We store this token against your account and share it with Google Firebase Cloud Messaging, which delivers the notification to your device. The token identifies your app installation, not you personally.
You can turn notifications off at any time in your device settings. When you sign out, the token is deactivated and we stop sending notifications to that device. The token is deleted when you delete your account.
Data may be processed on servers outside Malaysia.
We do not sell your personal information. We do not share it with advertisers, and Munchpal does not show ads. Apart from the usage statistics and crash reports described above, which stay with us and Google Firebase, we do not use analytics or advertising services, and we do not track you across other apps or websites. We do not send your information to AI providers. We do not use your date of birth for anything other than age verification.
Your display name, username, profile details (such as your bio and home area), food moments, and taste profile may be visible to other Munchpal users. Your email address, date of birth, and dietary preferences are never shown to other users.
You can control your discoverability in the app's privacy settings, including whether other users can find you in suggestions and search. Someone who already knows your exact username can still look you up.
If you send us feedback, report a bug, or contact support from the app, it opens your email app with a message addressed to us. To help us investigate, the message is pre-filled with your device model, operating system version, app version, and your Munchpal user ID and username. You can read and edit the message before sending. We receive only what you choose to send.
If you open a Munchpal invite and leave your email to hear when Munchpal is on Android, we keep that email address, the username shown in the invite you opened, and when you signed up. We use it only to email you once when the Android app is available, and then delete it. We don't use it for anything else, don't share it, and don't link it to an account. To be removed sooner, email us at the address under Contact.
We take reasonable steps to protect your information, but no online service can guarantee absolute security.
You can delete your account at any time from Settings inside the app. Deleting your account removes your profile, date of birth, taste and dietary preferences, food moments and the photos you uploaded, comments, messages, meetups you host, any coverage waitlist entry, your usage statistics, notification tokens, and your login. If you reported another user, the report is kept so we can still act on it, but it is no longer linked to you. Some content may remain in backups for a limited period before being overwritten.
Restaurant details shown in Munchpal come from OpenStreetMap and other publicly available sources, together with our own records. Halal information comes from tags in OpenStreetMap. Munchpal does not inspect restaurants or check halal certificates, so a halal-friendly tag is not a certification. Always look for the official JAKIM certificate at the premises.
Photos shown on restaurant listings are stock images. They are not photographs of that restaurant, its premises, or its food, and are shown for illustration only. Photos in food moments are posted by users and are their own.
We make a reasonable effort to keep restaurant information accurate but cannot guarantee it. Always verify certification directly with the restaurant or through the official JAKIM portal if it matters to you.
If we change this policy, we will update the date at the top of this page. Significant changes will be communicated in the app.
Questions about this policy or your data: [email protected]