EatWhat?

EatWhat Privacy Policy

Last updated: 4 November 2026

Operator: EatWhat, operated by an individual based in Thailand
Data controller: Kanisorn Laprabang
Privacy contact: kanisorn.laprabang@gmail.com

EatWhat is a restaurant discovery and food recommendation service. This Privacy Policy explains how information is collected, used, stored and shared when you use EatWhat.

1. Information we process

To provide restaurant recommendations, EatWhat processes information you provide or authorize, including:

Device location is optional. You can select an area manually instead. Please avoid entering sensitive personal information into food searches.

2. How and why we use information

EatWhat uses information for the following purposes:

Providing the service: Processing your location, searches and preferences to generate restaurant recommendations, display place details and estimate journeys.

Saving your choices: Maintaining Favorites, Your Eats and preferences in your browser.

Service improvement and reliability: Measuring recommendation performance, detecting errors and understanding how users interact with the recommendation process.

Security and administration: Supporting application operation, authentication and restricted administrator access.

Where personal data is involved, processing must have an applicable lawful basis under Thailand's Personal Data Protection Act (PDPA). Depending on the activity, this may include processing necessary to provide a requested service, legitimate interests in maintaining and improving the service, or consent where legally required.

Device-location permission is requested through your browser. Browser permission alone should not be interpreted as consent to unrelated processing.

3. Google Maps Platform

EatWhat sends relevant location information, food-search terms and travel settings to Google Maps Platform to retrieve restaurant details and travel estimates.

Google may process these requests according to its own applicable terms and privacy practices.

EatWhat stores Google Place IDs for saved locations and restaurants and retrieves current place information when needed, rather than permanently storing Google-derived restaurant names, ratings and prices.

Google Privacy Policy
Google Maps Terms

4. Information stored in your browser

EatWhat uses browser-local storage to remember:

This information generally remains until you change it or clear the application's site data.

Earlier versions stored additional Google-derived restaurant information. The updated application automatically removes those legacy fields when the device next opens EatWhat, while preserving available Place IDs and user-generated information.

Some older area selections may need to be selected again.

Clearing browser data removes locally stored information but does not automatically remove information held by service providers or server-side records.

5. Diagnostic reports

EatWhat records limited diagnostic information to understand recommendation performance and improve reliability.

These reports may include random session identifiers, selected modes and filters, travel settings, timing measurements, action counts, aggregate recommendation quality indicators, classified errors and Google request counts.

New diagnostic reports are designed to exclude raw cravings, raw exclusions, venue identities, exact coordinates, email addresses and IP address fields.

LET'S EAT records that a user accepted a recommendation. It does not establish that the restaurant was visited.

Diagnostic reports are accessible only to authorized administrators.

New diagnostic reports are scheduled for deletion after 30 days. The daily cleanup schedule and operational delays may cause actual deletion to occur later.

Earlier development diagnostic reports have been separately sanitized to remove raw typed cravings and Google error messages.

Platform infrastructure logs and native traffic analytics may be subject to different retention arrangements.

6. Service providers and international processing

EatWhat uses Lovable Cloud for application hosting, authentication and diagnostics, and Google Maps Platform for restaurant discovery and travel-related services.

External fonts and image resources may also be loaded by the application. Their providers may receive ordinary network information associated with those requests.

These providers may process information outside Thailand. International transfers of personal data are subject to applicable legal requirements and provider arrangements.

7. Your rights and choices

Subject to applicable law, you may have rights to request access to, correction of, deletion of, restriction of or objection to processing of your personal data. Other rights, including withdrawal of consent, data portability and lodging a complaint with the relevant authority, may apply.

You can decline device-location permission and select an area manually. You can also clear locally stored information using your browser settings.

For privacy requests concerning information controlled by EatWhat, contact the operator using the privacy contact listed below. Requests will be assessed and handled in accordance with applicable law.

8. Data retention and security

EatWhat retains browser-local information until it is changed or cleared, subject to the application's storage and migration behavior.

New diagnostic reports follow the scheduled 30-day deletion process described above.

Other service-provider logs and records may have different retention periods.

EatWhat restricts diagnostic administration to authorized users and uses application-level controls intended to reduce unnecessary data collection. No online service can guarantee absolute security.

9. Changes to this policy

This Privacy Policy may be updated when EatWhat's functionality, data practices or legal obligations change. The current version will be available through the application with its latest update date.

10. Operator and contact

Service: EatWhat
Operator: Individual operator based in Thailand
Data controller's legal name: Kanisorn Laprabang
Privacy email: kanisorn.laprabang@gmail.com

Please use this contact for questions or requests about your personal data.