Operated by Cardiff (Private Limited), Singapore. A few items (UEN, EU/UK
representatives, processor list) remain to complete, and review by qualified
counsel is recommended before a wide public launch. Prepared 15 July 2026.
Effective date: 15 July 2026
Operator ("we", "us"): Cardiff (Private Limited), UEN 202322862D, 3 South Buona Vista Road, #01-16 Viva Vista, Singapore 118136, Singapore.
Contact / Data Protection Officer: Data Protection Officer, [email protected].
This policy explains what personal data VegHere ("the app", at veghere.app) collects, why, and your rights. VegHere is an informational guide to vegetarian and vegan food; listings are imported and not independently verified (see our Terms and the in-app Data & Notices page).
| Data | When | Why | Legal basis (GDPR/UK GDPR) |
|---|---|---|---|
| Email address | If you join the early-access / updates list | To contact you about the launch and product updates | Consent |
| Approximate location | Only when you use Nearby, and only if you allow it | To rank nearby places by distance | Consent |
| Menu photo (may contain incidental faces, handwriting, other detail) | When you use Menu scan | To read the menu and flag likely-veg dishes | Consent |
| Device-local data (saved places, diet/theme/city preferences) | As you use the app | To make the app work for you | Stored on your device; not collected by us |
| Technical logs (IP address, request metadata, error diagnostics) | Automatically, when the app contacts our servers | Security, abuse-prevention, reliability | Legitimate interests |
| Listing correction requests you send us | If you contact us about a listing | To handle your request | Legitimate interests / legal obligation |
Under PDPA (Singapore) we rely on your consent / deemed consent and, where applicable, the legitimate-interests basis. Under CCPA/CPRA, we do not "sell" or "share" personal information as those terms are defined. Under India DPDP and Brazil LGPD, we process on the equivalent consent / legitimate-purpose bases.
When you scan a menu, the image is sent over an encrypted connection to our menu-reading service, which uses an AI model to identify dishes and return a reading. Images are processed transiently to return the reading and are not retained by us afterwards. The reading is a best-effort aid and can be wrong — do not rely on it for allergies or religious dietary requirements; always confirm with the restaurant.
Our servers are currently located in Singapore. Where personal data is transferred out of the EEA/UK or your region, we rely on appropriate safeguards (such as Standard Contractual Clauses).
not retained (menu photos are processed transiently).up to 90 days, then deleted or anonymised.Depending on where you live, you may have the right to access, correct, delete, port, or object to / restrict processing of your personal data, and to withdraw consent. To exercise any right, email [email protected]. We will respond within the period required by applicable law.
VegHere is not directed at children under 16 and we do not knowingly collect their personal data.
We use encryption in transit and access controls. No system is perfectly secure; we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authority where required by law.
We may update this policy; we will post the new version here with a revised effective date and, for material changes, provide prominent notice.
Cardiff (Private Limited) — Data Protection Officer — [email protected] — 3 South Buona Vista Road, #01-16 Viva Vista, Singapore 118136.