Privacy notice

Last updated: 2026-05-20. Status: DRAFT-1 — Ella-stamped, counsel review pending before LAUNCH POINT.

What we collect

• Account info. When you sign in (Google, Apple, magic link, email/password), we store the email address you authenticated with, your display name, and locale preference.
• Pet profiles you create. Pet name, species, breed, dates, photos.
• Posts you publish. Captions, images, hashtags, audience selection.
• Engagement signals. Posts you liked, comments you wrote, accounts you followed.
• Technical context. IP at sign-in (for abuse detection), browser user-agent, the locale you visited from.

What we don't do

• We don't sell your data.
• We don't run advertising trackers.
• We don't share with third parties except the processors required to run Manja: Resend (email delivery), Cloudflare (CDN, R2 object storage, Stream video), our database host.

Cookies

Essential only. manja_consent — your dismissal of this disclosure. auth.session-token — your sign-in session.

Your choices

• Edit or delete pet profiles, posts, comments from your account.
• Export your data: email [email protected].
• Delete account: account → settings → delete. Your content (pet profiles, posts, comments, photos) is removed within 30 days. Security and abuse-prevention logs (sign-in IPs, moderation actions) are retained for up to 12 months, then deleted on a rolling basis.

Where you are

Manja serves Singapore, Malaysia, and Indonesia. Singapore's PDPA applies as the default framework; we also intend to honour Malaysia's PDPA 2010 and Indonesia's PDP Law 2022 where applicable. This notice is DRAFT-1 — reviewed by Manja's editorial team, but not yet reviewed by counsel. External counsel review is scheduled before public launch.

Reach us

[email protected] — privacy questions, data export, account deletion. We aim to respond within 7 working days.