Useful features, responsible data use.
DurianGoWhere helps people discover durian vendors, prices, maps, community posts and seller listings in Singapore, Malaysia and other supported locations. We use information to provide those features, keep accounts secure, moderate community activity and understand aggregate product usage. We do not sell personal information or use it for third-party advertising.
Some features use Google services. Google may process information as described in its own policies, including its Privacy Policy.
Who this policy applies to
This policy covers the DurianGoWhere mobile application, website and related services operated by Botrion Tech. In this policy, “DurianGoWhere”, “we” and “us” refer to those services.
Information we collect
Account and sign-in information
- Email sign-in: your email address, a one-time verification challenge and security information such as the request time and IP address. Verification codes are stored as hashes and expire after 10 minutes.
- Google sign-in: Google supplies a verified account identity, email address and, when available, your display name and Google profile photo. DurianGoWhere does not receive or store your Google password.
- Email and password sign-in: if you choose to set a DurianGoWhere app password after signing in, we store a one-way password hash and the time it was set. We do not store the password in plain text, and this app password is separate from your Google password.
- Sessions: a session token is stored in local app storage and only a hash is stored on our server. Sessions are designed to expire after 30 days and can be revoked when you sign out.
Profile, preferences and activity
When you use an account, we may store your handle, display name, country selection, avatar, taste profile, favourites, saved searches, price alerts, reward points and cosmetics, leaderboard visibility, community-rules acceptance and related account activity.
Community, seller and order-request content
If you choose to use Community or seller features, we store the posts, deal descriptions, comments, chat messages, reactions, reports, seller profile and listing details, order requests, and profile or deal photos that you submit. Content you publish to Community may be visible to other users and may be reviewed for safety, fraud and moderation. Seller contact details are used to facilitate an order request; DurianGoWhere does not process payments.
Location and map information
With your permission, the app can read your device’s foreground location to centre the map and calculate distances on your device. You can deny or revoke this permission in your device settings. If you use your current location to publish a community deal or complete a seller profile, the coordinates and address you confirm are sent to us, stored with that content and may be shown on the map.
DurianGoWhere uses Google Maps Platform for maps and map-related services. Google may receive map requests, IP address, device information and location-related information according to Google’s terms and privacy policy. Vendor coordinates may also come from public business listings or information submitted by users.
Technical and usage information
Requests to our website and API may include an IP address, time, page path and basic request information. The app also uses pseudonymous usage analytics consisting of a random visitor ID, session ID, screen views, screen durations and limited actions such as opening a map, changing a country or applying a filter. We may infer a broad country from an IP address for reporting. These analytics do not include message text or your precise device location, and we do not use them to build advertising profiles.
The app may keep preferences, an offline cache and pending analytics events in local device storage. Basic service, security and diagnostic logs are also processed when you use the service.
How we use information
- Provide vendor discovery, prices, maps, learning content, Community, seller listings and order-request features.
- Create and secure accounts, authenticate sign-ins, maintain sessions and prevent abuse.
- Show content based on your selected country and preferences.
- Moderate posts, chat, reports and seller activity, and enforce community rules.
- Send one-time sign-in emails and respond to support or deletion requests.
- Measure reliability and aggregate usage, and improve the service.
- Meet legal, security and fraud-prevention obligations.
When information is shared
- With other users: content and profile details you choose to publish, including community posts, comments, photos, seller listings and relevant order-request information.
- With service providers: hosting and infrastructure providers, email delivery providers for one-time codes, and Google services for sign-in and maps. They may process information only to provide their services to us and under their own applicable terms.
- For safety or legal reasons: where reasonably necessary to investigate abuse, protect users and the service, comply with law, or respond to valid legal process.
We do not sell personal information, rent it to advertisers or share precise location for advertising.
Retention
- Account, profile, community and seller information is kept while needed to provide the service or until you request deletion, subject to the exceptions below.
- Journey analytics and app-visit records are currently configured for a 90-day retention period, after which they are removed through routine cleanup.
- One-time verification codes expire after 10 minutes. Sessions are intended to expire after 30 days.
- We may retain limited records for legal compliance, security, fraud prevention or abuse investigations for as long as that purpose requires. Routine backups are removed or overwritten on their normal rotation.
Your choices and rights
- Manage location permission in your device settings and turn off Location in the app when you do not want location-based distance or map centring.
- Choose whether your leaderboard profile is visible and decide what to publish to Community or seller pages.
- Sign out to revoke the current session on the device.
- Ask us to access, correct or delete your account information by emailing info@botriontech.com. We may verify account ownership before acting on a request.
Account deletion
To request deletion, follow the steps at Delete your DurianGoWhere account or email info@botriontech.com. After verification, we delete the account and associated active data described on that page. Some limited records may remain temporarily for the legal, security and abuse-prevention reasons described above.
Security
We use HTTPS for public web and API traffic, hash authentication secrets and verification codes, restrict administrative access and apply access controls to stored content. No service can guarantee absolute security, so please do not send passwords, one-time codes or other secrets by email or in Community posts.
Children
DurianGoWhere is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and remove it where appropriate.
Changes to this policy
We may update this policy when the service or applicable requirements change. We will update the effective date on this page. Your continued use of DurianGoWhere after an update means the updated policy applies to future use.