WAWT Privacy Policy

Last updated: 29 September 2026

WAWT (heywawt.com) is operated by Conceptrex Pte Ltd (UEN: 202423719C) (“we,” “us,” “our”), a Singapore-based company. This policy explains what personal data we collect, why, and how we handle it, in line with Singapore's Personal Data Protection Act (PDPA).

1. Who this applies to

This policy covers two kinds of users:

Customers — people who use the WAWT food picker (Surprise Me or a typed food request), which works without signing up, and people who sign up to discover merchants or follow shops.
Merchants — business owners who claim or register a shop listing on WAWT.

2. What we collect

From customers:

Name (first and last)
Email address (via our sign-in provider, Clerk)
Birthday (optional — used for future birthday-related features; you can skip this)
Neighbourhood preferences (up to 3, optional — used to personalise what you see)
Usage data — which shop profiles you view, follow, or favourite, and interactions like tapping “Directions” or “Website” on a shop page (this helps us understand what's useful and, in aggregate, helps merchants understand interest in their shop)
If you use “Surprise Me” or type a food request — your query text, and which dish/shop was recommended or selected
Approximate location, if you allow it — used to pick the nearest weather reading and to sort nearby shops by distance. We don't store your exact coordinates; we keep the name of the nearest weather area (for example, “Geylang”) with the record of your recommendation.

From merchants:

Business name, category, and description
Contact information (email, phone, address)
Claimant identity information, used to verify you're authorised to manage a listed business
Any photos or content you choose to upload for your shop profile

We do not currently process payments and do not collect financial or card information.

3. How we use it

To provide the core service — showing you relevant merchants, letting you follow/favourite shops, and (for merchants) letting you manage your shop's listing
To personalise your experience — e.g. showing merchants near neighbourhoods you've selected
To verify merchant claims and prevent unauthorised claims of a business listing
To send you transactional emails (e.g. claim confirmations) via our email provider, Resend
To improve the product — understanding, in aggregate, which features and shops get used

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share it with

We use a small number of service providers to run WAWT, each of which processes data on our behalf:

Provider	Purpose
Clerk	Authentication (sign-up/sign-in, account/session management)
Airtable	Storage of product data (accounts, shop listings, claims)
Resend	Sending transactional emails
Vercel	Hosting the website and app
Google	Optional sign-in via Google (if you choose this method)
Anthropic	Generates food recommendation text. Your typed request or quiz answers, plus general context like time of day and weather, are sent to Anthropic's Claude AI model.
Upstash	Rate limiting and abuse prevention

We don't share your personal data with any other third party except where required by law, or as necessary to investigate fraud or protect the safety of our users.

For merchants:business information you submit (name, category, description, photos, hours) is displayed publicly on WAWT as part of the discovery product — that's the nature of a merchant listing. Personal claimant verification details are not made public.

5. Data retention

We keep your data for as long as your account is active, or as long as needed to provide the service. If you'd like your account or data deleted, contact us (below) and we'll action this, subject to any legal retention requirements.

6. Your rights

Under Singapore's PDPA, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Withdraw consent to our collection/use of your data (which may limit what we can offer you)
Ask us to delete your data, subject to legal exceptions

To exercise any of these, contact us at hello@heywawt.com.

7. Cookies and similar technologies

We use minimal, functional cookies/local storage necessary for you to stay signed in and for the app to work correctly. We do not use third-party advertising trackers.

When you use the food picker, we also set a random guest identifier cookie and use a one-way scrambled (hashed) form of your IP address, only to prevent abuse. The rate-limit records they're used in expire after about an hour.

8. Children's privacy

WAWT is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, contact us and we'll remove it.

9. Security

We take reasonable technical and organisational measures to protect your data, including relying on the security practices of our service providers (Clerk, Airtable, Vercel). No system is 100% secure, and we can't guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. We'll update the “Last updated” date above when we do. Material changes will be communicated where appropriate.

11. Contact us

Questions, requests, or concerns about your data: hello@heywawt.com