Privacy Policy

1. Introduction

MakanApa ("we", "our", or "us") is a food recommendation service operated by PT Trini Adimulia Inspira (Trini AI), a company registered in Jakarta, Indonesia. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our website at makanapa.trini-ai.com and related services (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information from Instagram Graph API

We use the Instagram Graph API (a Meta Platform product) to access publicly available data from Instagram Business and Creator accounts. This includes:

• Public profile information (username, display name, profile picture, biography, follower count, media count)
• Public media data (captions, media URLs, timestamps, like counts, comment counts, media type)
• Public media permalinks

We do not access private/personal Instagram accounts, direct messages, private stories, passwords, or any non-public data. We only access data from Business and Creator accounts through Meta's official business_discovery API endpoint.

2.2 Information You Provide Directly

If you contact us (e.g., via email for support, data deletion requests, or feedback), we collect the information you provide such as your name and email address.

2.3 Automatically Collected Information

When you visit our website, we may automatically collect standard web server log data, including:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring URL

This data is used solely for analytics and improving the Service. We do not use this data to identify individual users.

3. How We Use Information

We use the information we collect for the following purposes:

• Provide food recommendations: We analyze publicly available food influencer content to extract restaurant names, locations, and menu information for our recommendation engine.
• Improve the Service: We use aggregated analytics to improve our recommendation accuracy and user experience.
• Respond to inquiries: We use contact information to respond to support requests and feedback.
• Comply with legal obligations: We may process data as required by applicable laws and regulations.

We do not use collected data for advertising, profiling individual users, selling data, or any purpose unrelated to the food recommendation service.

4. Data Sharing and Third Parties

We do not sell personal data to any third party. We may share data only in the following limited circumstances:

• Service providers: We use third-party services (hosting, analytics, AI processing) that may process data on our behalf under strict data processing agreements. These include Vercel (hosting), OpenAI (transcription), Anthropic (text analysis), and Google Cloud (geocoding).
• Legal requirements: We may disclose data if required by law, regulation, legal process, or governmental request.

All third-party service providers are contractually obligated to protect the data and use it only for the purposes we specify.

5. Data Retention

We retain data for the following periods:

• Instagram public data: Retained for as long as it remains publicly available on the source platform. We periodically review and remove data that is no longer publicly accessible.
• Processed restaurant data: Retained indefinitely as part of our recommendation database, as this data is de-identified and aggregated.
• Contact information: Retained for up to 12 months after your last interaction with us, then deleted.
• Server logs: Automatically deleted after 90 days.

6. Data Deletion and Your Rights

You have the right to request deletion of any data we hold about you. You can exercise this right by:

• Visiting our Data Deletion page
• Sending an email to privacy@trini-ai.com with the subject line "Data Deletion Request"

Upon receiving a valid deletion request, we will:

1. Verify your identity and the scope of the request
2. Delete the requested data within 30 days
3. Confirm deletion via email

Additional Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have additional rights including:

• Right of access: Request a copy of data we hold about you
• Right of rectification: Request correction of inaccurate data
• Right to object: Object to processing of your data
• Right to portability: Receive your data in a portable format
• Right to restrict processing: Request limitation of data processing

To exercise any of these rights, contact us at privacy@trini-ai.com.

7. Data Security

We implement appropriate technical and organizational measures to protect data, including:

• HTTPS encryption for all data in transit
• Access controls and authentication for data systems
• Regular security reviews of our infrastructure
• Minimal data collection (we only collect what is necessary)

While we strive to protect data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@trini-ai.com.

9. Meta Platform Data Use

Our use of data received from Meta Platform APIs (including Instagram Graph API) complies with the Meta Platform Terms and Developer Policies. Specifically:

• We only access data through official, authorized API endpoints
• We do not store Meta Platform data longer than necessary for our stated purpose
• We delete all Meta Platform data upon request by Meta or the data subject
• We do not transfer Meta Platform data to any data broker, ad network, or unauthorized third party
• We do not use Meta Platform data to build or augment user profiles for advertising

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@trini-ai.com
• Company: PT Trini Adimulia Inspira (Trini AI)
• Location: Jakarta, Indonesia