Privacy Policy

Last updated: 11 November 2026

The short version: we collect what we need to run honest reviews — your Google sign-in, your handle, what you post, and receipts you choose to upload. Your email, phone, gender, votes and receipts are never shown to other users or businesses. We don't sell your data or show ads based on it. Reviews stay published even if you leave.

This policy explains what information ReviewKar ("we") collects when you use the ReviewKar website and app, why, who can see it, and the choices you have. It applies together with our Terms of Use.

What we collect

Google sign-in details: your name, email address, profile picture link and Google account ID. We never receive your Google password, contacts or other Google data.
Your profile: the public handle you choose (for example @IsloFoodie_99), and anything optional you add — full name, profile picture, phone number, gender, and whether your profile is Public or Private.
What you post: reviews, ratings, dine-in or takeaway, food photos, menu items you add, and your Legit / Looks Fake votes.
Receipts you upload to verify a review, and how you paid (cash, card, JazzCash and so on).
Follows and notifications: the branches and public profiles you follow, and the notifications we send you (for example "new Legit vote on your review").
Business accounts: the work email and branches a business user is linked to, their replies to reviews, and deals they submit.
Restaurant requests: when you ask us to list a restaurant, its name and city; if you're the owner or manager, also the number of branches and the contact email and phone you give. Only ReviewKar staff see these, and we use them only to check and set up the listing and to contact you about it.
Technical data: your IP address and basic device and browser information, used to keep you signed in, run the bot check, enforce limits (for example how often reviews and votes can be posted) and keep the Service secure. Our hosting providers also keep short-term server logs.

Photos: hidden location data removed

Phone photos often carry hidden details such as GPS location and camera information. We strip this from every food photo, profile picture, logo and deal poster before storing it.

What is public, and what never is

Always public: your handle, your reviews, ratings and food photos, dine-in or takeaway, visit number, whether a review has a bill uploaded, Legit / Looks Fake totals on your reviews, and any business reply to them.
Public only if your profile is Public: your profile picture, full name, review history, follower count and the Legit votes you've received. A Private profile shows just your handle on your reviews.
Never shown to other users or businesses: your email address, phone number, gender, receipt images, how you voted, who you follow and who follows you. Notifications never reveal who voted or followed.
Business replies show the restaurant and branch name, never the manager's name or email.
ReviewKar admins can see account details (including private profiles and receipts) only to verify receipts, handle complaints and keep the platform free of spam and fake reviews.

How we use information

To sign you in, show your handle on your reviews and run your profile.
To calculate scores and show reviews, feeds, search results and dashboards.
To check uploaded bills look genuine, show the "Bill uploaded" badge and include those reviews in scores.
To send you notifications inside ReviewKar.
To prevent abuse: bot checks, new-account waiting time, one account per phone number, review cooldowns, one vote per person, rate limits, and investigating fake reviews or spam.
To answer your messages and complaints, and to meet legal obligations.

We do not sell your personal information, and we don't use it for advertising. Businesses see reviews and scores for their branches, never reviewers' private details.

Reviews are permanent

To protect consumers, reviews can't be deleted by businesses, by ReviewKar or by their author. The author can correct a review for 5 minutes after posting, until someone votes on it or a receipt is uploaded. You confirm this before posting. We remove (hide) a review only if it breaks our Review guidelines or the law — never because a business disagrees with it. We may also remove food photos that are offensive, unrelated, show personal information or are spam; a visible note shows a photo was removed.

Removed accounts

If we remove an account for abuse (spam, hate speech, fake profiles or fake reviews), we hide its reviews, withdraw its votes, delete its personal details and login, and keep its email address on a block list so it can't sign up again. The handle stays reserved. If we removed an account by mistake, we can restore it: the email is unblocked, the reviews hidden by the removal come back and the person can sign in again. Votes, follows and the deleted personal details don't come back.

Who processes data for us

Supabase — database, sign-in sessions and file storage (servers in Mumbai, India).
Vercel — website hosting.
Google — sign-in when you choose "Continue with Google".
Cloudflare Turnstile — the "not a robot" check on the sign-in page.
Sentry — error reports when something breaks, so we can fix it. Reports contain technical details (page, browser, what went wrong), never your name, email, IP address, cookies or sign-in details.
Vercel Web Analytics and Speed Insights — anonymous visit counts (pages viewed, country, device type) and page-load speed. No cookies, and nothing that identifies you.

These providers process data on our behalf and may store it outside Pakistan. We may also share information if the law, a court order or a lawful request from an authority requires it, to protect people from harm, or as part of a sale or reorganisation of ReviewKar (in which case this policy continues to apply).

Cookies and local storage

A sign-in cookie that keeps you logged in.
A short-lived cookie (10 minutes) that remembers you passed the bot check while signing in.
Your light / dark mode choice, saved only on your device.

We don't use advertising or cross-site tracking cookies. Our visit statistics and error reports work without cookies.

How long we keep it

Reviews, ratings, food photos and business replies are kept permanently, as explained above.
Profile details are kept while your account exists.
Receipt images are kept to support the verified badge and to investigate fake reviews.
Rate-limit records are deleted after about 2 days; server logs are kept briefly by our hosting providers.

Your choices and rights

You can edit your full name, picture, phone, gender and Public / Private setting any time on your profile page.
You can sign out at any time.
You can ask for a copy of your personal data, a correction, or deletion of your account by emailing our contact email (coming soon). When we delete an account we remove your email, name, phone, gender, picture and Google link; your reviews stay published under your handle.
We'll reply within 30 days and may ask you to confirm it's really you.

Security

Data is encrypted in transit, receipts are kept in private storage that only admins can open through short-lived links, and database access is locked down. No system is perfectly secure; if we learn of a breach affecting you, we'll let you know.

Children

ReviewKar is not for children under 13. If you believe a child under 13 has an account, contact us and we'll remove it.

Changes

If we change this policy, we'll update the date at the top and, for significant changes, tell you on the site.

Contact

Privacy questions or requests: our contact email (coming soon).

Also see: FAQ · Terms of Use · Privacy Policy · Review guidelines · Contact & complaints