Privacy Policy
This Privacy Policy explains how HoJiah 台灣好呷 ("HoJiah", "we", "us") collects, uses, and shares information when you use our mobile apps (iOS and Android) and our website (together, the "Service"). It is written to reflect what the Service actually does — including advertising (AdMob) on our free tier and in-app purchases (via RevenueCat) for our Premium tier.
1. Information we collect
Account information
If you sign in, we use Sign in with Google or Sign in with Apple. We receive your name, email address, profile photo (if available), and a unique account identifier. We never see or store your password — authentication is handled entirely by Google or Apple.
Content you create
Restaurant reviews and star ratings, likes, and saved favourites you add are stored against your account (or, for anonymous likes, against your device) so they sync across your devices and remain visible on the restaurant's page.
Location
The Service currently uses a fixed reference point (central Taipei) to sort restaurants by proximity and to centre the map; you can manually pan the map to change this. We do not currently request your device's precise GPS location. If a future version requests real-time location access, we will ask for your permission at that time and update this policy first.
Device & local app data
Your language and appearance preferences, an anonymous device identifier (used only to prevent duplicate anonymous likes), and unsent review drafts are stored locally on your device. This data does not identify you personally and, for signed-out use, never leaves your device.
Website analytics
Our website and web app use Google Analytics to understand visits and improve the Service. Google may use cookies to collect page URLs, referral sources, interactions, browser and device information, and approximate location. We do not send account names, email addresses, or review text to Analytics. Google Signals and advertising personalization signals are disabled in our tag.
Analytics runs only after you accept analytics cookies. We also record which sign-in button you choose (Google, Apple, or guest), without identifying your account. You can decline or withdraw consent using “Cookie settings”. We store your choice locally for up to 180 days; withdrawing consent stops future collection and removes Analytics cookies, but does not erase previously collected data.
Abuse prevention
The web app uses Firebase App Check with Google reCAPTCHA Enterprise to help distinguish requests from the genuine app from automated abuse. This security check may process browser, device and interaction signals through Google. It runs separately from optional Google Analytics cookies and does not require an “I’m not a robot” checkbox.
Advertising data (Free tier)
The free tier of our mobile apps displays ads served by Google AdMob. To do this, AdMob (and its advertising partners) may collect your device's advertising identifier (IDFA on iOS, Advertising ID on Android), general device information, and ad interaction data (impressions, clicks). On iOS, we request permission through Apple's App Tracking Transparency framework before any identifier is used for personalized ads; you can decline this and still see ads, just less tailored ones. Users in the EEA, UK and Switzerland are shown a consent form (via Google's User Messaging Platform) before any personalized advertising occurs.
Purchase & subscription data (Premium tier)
If you purchase a Premium (ad-free) subscription — monthly or yearly — the transaction is processed entirely by the Apple App Store or Google Play — we never receive your payment card details. We use RevenueCat to track entitlement status (i.e., whether your account has an active Premium subscription) across devices. RevenueCat receives your purchase/subscription identifiers and transaction metadata from Apple/Google on our behalf; it does not receive your payment information.
2. How we use this information
- To operate the Service — show restaurants, sync your reviews/likes/favourites across devices, and remember your preferences.
- To serve and measure ads on the free tier, and to recognise your Premium unlock so ads are correctly turned off.
- To keep the Service secure and to diagnose bugs.
- To comply with legal obligations.
We do not sell your personal information.
3. Who we share information with
| Party | Purpose | Data involved |
|---|---|---|
| Google Firebase (Authentication & Firestore) | Account sign-in, storing reviews/likes/favourites | Account ID, name, email, photo, your content |
| Google AdMob | Serving ads on the free tier | Advertising identifier, device info, ad interactions |
| RevenueCat | Tracking Premium entitlement across devices | Purchase/subscription identifiers, transaction metadata |
| Apple / Google (as app stores) | Sign-in, and payment processing for Premium | Handled per Apple's and Google's own privacy policies |
| OpenStreetMap contributors | Map tiles on the Map view | Your device's IP address, as part of the standard tile request (no personal data sent by us) |
4. Your choices
- Ad personalization: manage this in your device's ad settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads), or decline the App Tracking Transparency prompt.
- Account data: sign out at any time from Settings. To request deletion of your account and associated data, contact us using the details below.
- Language & theme: fully within your control in the app's Settings screen.
5. Data retention
We retain your account content (reviews, likes, favourites) for as long as your account exists, so it stays visible and synced. Locally stored device data is retained until you clear the app's storage or uninstall it.
6. Children's privacy
The Service is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect personal information from children.
7. International users
Your information may be processed in Taiwan, the United States, or other countries where our service providers (Google, RevenueCat) operate. Where required, we rely on standard contractual safeguards for these transfers.
8. Security
We rely on Firebase's and our other providers' industry-standard security practices (encryption in transit, access-controlled databases) to protect your information. No method of transmission or storage is 100% secure.
9. Changes to this policy
We may update this policy as the Service changes — for example, if we add real-time location features or new ad formats. We'll update the "Last updated" date above, and for material changes we'll provide notice in the app.
10. Contact us
Questions about this policy, or requests to access or delete your data, can be sent to hello@rxai.com.au.