Langkau ke kandungan
RESEPIChe Nom.

Privacy Policy

This Privacy Policy explains how Resepi Che Nom ("we", "us") collects, uses and protects your personal information when you use our website and mobile application. We are committed to complying with applicable law, including the Personal Data Protection Act (PDPA) in Malaysia.

This is an English translation of our Dasar Privasi, which is the authoritative version.

1. Scope of Data Collection

We may collect the following types of personal information:

  • Full name
  • Email address
  • Date of birth
  • Profile picture (if uploaded)
  • Payment information (for paid subscriptions)
  • IP address and activity/logging records

This information is collected through account registration, use of the site, or interaction with particular features (for example, uploading a recipe or a cooking photo).

2. Purpose and Use of Data

  • Account registration: to let you sign in and use the features of the service.
  • Confirmation and marketing email: to send confirmations, updates or promotions where you have consented.
  • Internal analysis: to improve features, understand trends and personalise your experience.
  • Payment processing: to complete paid subscription transactions through third-party payment providers.

We also share basic data with third-party providers such as hosting providers, analytics providers (for example Google AdSense) and payment systems, on the condition that they are bound by confidentiality obligations.

3. Third-Party Authentication

You can sign in using third-party providers such as Google, Facebook and Apple. When you do, we may receive from that provider:

  • Your name and email address
  • Your profile picture
  • Your unique identifier from that service

If you use Sign in with Apple and choose to hide your email address, we receive only Apple's relay address.

YouTube membership linking

This feature uses YouTube API Services. When you choose to connect YouTube, Google asks for permission to view your YouTube account. We use this permission to identify the channel you own and compare its channel ID with Che Nom's current member roster, which our administrators import separately from YouTube Studio. We use this match to check eligibility for RCN member benefits.

For a successful link, we store your channel ID, available handle, channel name, profile-image URL and verification time with your RCN account. New links do not copy this information to your public profile. The roster contains membership status, level and membership duration. We keep an encrypted Google refresh token on our server to check authorization and update channel information, normally daily. Access tokens are used transiently for these requests. We do not request your YouTube password or modify your YouTube content.

This information is processed by our server and database providers for operating the feature; the roster is accessible to authorised administrators. We do not use YouTube membership information for advertising or sell it. Google processes the authorization and API requests under its Privacy Policy.

Use Account → Subscriptions → Buang Pautan to delete the membership link and its stored channel identity from RCN immediately. A matching handle copied by an older version is also removed; an independently edited profile handle can be removed in profile settings. An accepted account-deletion request removes this link and the public handle immediately, without waiting for the account deletion period. We also request revocation of the member feature's Google access immediately and retry if Google is unavailable. Legacy links created before this separate member app used the shared RCN Google app; those older grants can be revoked in Google security settings. Unlinking does not cancel your YouTube membership or delete your YouTube channel, and does not remove Che Nom's separately imported roster entry. If Google reports that access has been revoked, we delete the stored identity. If authorization cannot be confirmed for 28 days, access stops and the hourly cleanup deletes the identity. This keeps stored channel data within a 30-day refresh or deletion period. Failed revocation requests retain only an encrypted credential and an RCN account reference until the request succeeds. You can also revoke Google access through your Google security settings. For deletion of other stored YouTube information or privacy questions, contact [email protected].

4. Data Retention

  • We keep personal data for as long as it is needed for the purpose it was collected for, or as required by law.
  • When data is no longer relevant we delete it or keep it in anonymous form. There is no specific automatic deletion schedule, but you may request account deletion at any time (see section 7).

5. Your Rights

Access and correction: you may request a copy of your personal data, or ask us to correct it if it is inaccurate.

Withdrawal of consent and deletion: you may request that your account be deleted, or withdraw consent for marketing communications. Contact [email protected] or use the form at Hubungi Kami.

6. Cookies and Tracking Technologies

We use cookies or similar technologies for analytics, advertising (for example Google AdSense) and to keep you signed in. You can block cookies in your browser, but some features may be affected.

7. Mobile Application

If you use the Resepi Che Nom mobile application, we may process the app version, device type, operating system, membership status and a pseudonymous installation identifier in order to provide app features and maintain service security and operation.

  • Product activity: we record recipe views and Dapur actions such as plan generation, shopping-list use and cooking progress. Account activity is associated with a user id and used for app functionality and internal product analytics.
  • Search: app search terms are sent to our server in the request address. Security and operational access logs containing the search term, IP address and client information are rotated daily and retained for up to 14 daily rotations.
  • Notifications: device tokens and reminder preferences are stored only after you choose to enable notifications.
  • Product analytics: third-party mobile behavioural analytics are enabled only after consent and when the service is configured. We do not send your name, email, database user id, shopping-list contents, avoided ingredients, login tokens or payment details to that service.
  • Crash diagnostics: when configured, Sentry may receive technical error reports, with personal data and request contents filtered before transmission.
  • In-app purchases: when purchasing is enabled, Apple, Google and RevenueCat process product and subscription status. We do not receive your full payment card number from them.

Our mobile app does not use this data to track you across other companies' apps or websites for advertising, and we do not sell it to data brokers.

8. Account and Data Deletion

A deletion request can be started inside the app or through our account deletion page. Active sessions are revoked when the request is received. Personal data is scheduled for deletion within 30 days, except for the minimum records we must retain for invoices, transactions, fraud prevention, dispute resolution or legal obligations.

9. Facebook Data Deletion

In compliance with Facebook's Platform Terms, you may request deletion of the data we obtained through Facebook Login by:

  1. Visiting the Facebook Data Deletion Request Form
  2. Contacting us directly at [email protected]

On a valid request we delete your Facebook data from our systems within 30 days, including your Facebook account connection and any data specifically associated with your Facebook login. This covers only data obtained through Facebook Login; content or information you provided by other means must be deleted separately, or contact us for assistance.

10. Legal Compliance

We work to comply with the PDPA in Malaysia and other applicable laws. There are no specific exemptions at this time.

11. Data Security

We take reasonable security measures (such as encryption and access controls) to protect personal data against unauthorised access. No security measure can be guaranteed to be completely effective.

12. Changes to This Policy

We may amend this policy at any time. Any change is published on the website and takes effect immediately. You are encouraged to review this page from time to time.

13. Privacy Questions and Complaints

For any privacy question or complaint, email [email protected] or send a message through Hubungi Kami.

By using this service you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please stop using the service.

Last Updated: 10 September 2026