Privacy policy

Who we are

Salo (salo.thekovie.com) is an independent project. For anything about your data, write to salo@projects.thekovie.com.

What we collect

• What you type into an order: display names, dishes, sizes and notes, group names, the order’s name, and a reason if the host removes someone. Everyone in that order can see it; nobody else can.
• An order cookie: a random key that keeps your browser in an order. We store only a scrambled (hashed) copy of it. See the cookie policy.
• Your IP address, briefly: used in the server’s memory to limit abuse (for example, too many wrong join codes). It is not saved with your order. Server and proxy logs may record IP address, time and page requested for security and troubleshooting, and are kept for a short time.
• Usage analytics: see below.

We don’t ask for your email, phone number, real name, location or payment details.

Analytics and session replays

To find confusing parts of the app, Salo uses PostHog (servers in the United States). It records anonymous usage: pages visited, taps and clicks (without the words on the buttons), errors, the kind of device and browser, an approximate location derived from the IP address, and session replays, a recreation of how the screen changed while you used it.

Replays hide everything you type, plus people’s names, dishes and order names, so we can see where people get stuck without seeing who ordered what. Analytics data isn’t linked to your name and is never sold or used for ads.

You can turn analytics off for your browser on the cookie policy page. If your browser sends Do Not Track, Salo sends nothing.

Why we use it

• Order data and the order cookie: to run the order you asked for (adding dishes, sharing with your table, the waiter ticket, “who ordered what”).
• IP addresses and logs: to keep the service secure and working.
• Analytics: our legitimate interest in understanding what is hard to use and fixing it.

How long we keep it

• An order and everything in it is deleted 7 days after it ends, or after 30 days with no activity. A cancelled order is deleted after 1 day.
• The order cookie expires after 31 days, and stops working once its order is deleted.
• Abuse-limit counters live only in the server’s memory and reset within the hour, or on restart.
• Analytics and replays are kept according to our PostHog retention settings, and only as long as they help improve Salo.

Who else handles it

• Our own server (a virtual private server we run), which hosts the app and its database.
• PostHog, Inc., which processes analytics and replays for us in the United States.

We don’t sell or rent personal data, and we don’t share it with advertisers.

Your rights

Under the Philippine Data Privacy Act of 2012, you can ask to see, correct or delete personal data about you, object to its processing, or ask for a copy. Email salo@projects.thekovie.com and tell us which order (its name and date) it is about. Because Salo has no accounts, we may ask you to show it’s your order, for example from the phone you used. You can also complain to the National Privacy Commission (privacy.gov.ph).

Children

Salo is meant for groups ordering together and isn’t designed for children to use on their own.

Changes

If this policy changes, we’ll update this page and the date at the top.