FoodEasy privacy

Applies to the FoodEasy mobile app for iOS and Android (repository name food-easy): a finder for licensed restaurants in Hong Kong built on the Food and Environmental Hygiene Department’s open data. The “Privacy notice” entry in the app’s Profile tab opens this section.

This service is operated by llab08, Hong Kong, and these terms are governed by the laws of Hong Kong. The section below explains this product’s data handling and current availability.

Summary

Browsing restaurants needs no account. Reviews, photos and favourites need a sign-in with Google or Apple. No advertising and no analytics as of the date below: the app loads no ad SDK and no tracking library. If a future version adds an ad unit, this section is updated first.

Location

The map and the “nearby” search use your device location only while the app is open and only after you grant the system location permission. Your coordinates are sent to our database server to run that one nearby query; they are not stored. If you decline the permission the app still works with search by name or district.

Restaurant data

Restaurant names, addresses, districts, licence types, endorsements and expiry dates are the “Restaurant licences” dataset published by the Food and Environmental Hygiene Department through DATA.GOV.HK, with map coordinates from the CSDI portal, used under the Terms and Conditions of Use of DATA.GOV.HK. This is public licensing data about premises, not data about you; it is refreshed on our server once a day.

Sign-in

Sign-in runs through our own authentication server (supabase.llab08.com) with Google or Apple as the identity provider. We store the account identifier the provider returns, your e-mail address, the display name the provider shares and sign-in timestamps. We never receive your Google or Apple password. Google or Apple see that you signed in to FoodEasy, under their own privacy policies.

Reviews, photos and favourites

Star ratings, review text and photos you post are user content: they are stored on our server and shown to every user of the app next to the restaurant, without editorial review before publication. Reviews are displayed without your name or e-mail address. Favourites are private to your account. Any signed-in user can report a review; a moderator can hide a reported review, after which only its author and moderators can still see it. Photos are kept in a private storage bucket and served through short-lived links.

Deleting your data

You can delete your own reviews in the app. “Delete account” in the Profile tab does not work yet: as of the date below the server rejects every deletion request. To have your FoodEasy records and photos removed, write to the address below. Tell us if you also want the shared llab08 sign-in identity removed, because access and linked records in other llab08 products that use it may also be affected. We do not promise immediate physical erasure of every photo or backup.

Hosting and maps

Account data and user content are stored in a database on a server we operate. Map tiles come from Apple Maps on iOS and Google Maps on Android under their respective terms, so those services see the map area you view. Our server keeps short access logs that we do not use to identify anyone.

Children

The app does not knowingly collect personal data from anyone, including children.

Contact: hello@llab08.com · Updated 25 September 2026 · All privacy notices