1. Who We Are
AROI is a food map for Chiang Mai, Thailand, available at aroimap.com. The service helps visitors find cafes, restaurants, bars, photos, ratings, menu names and menu prices.
2. Information We Handle
- Basic request data: when you access the site, Cloudflare and our server functions may process your IP address, user agent, request URL, time of request and related technical logs for security, delivery, debugging and abuse prevention.
- Local preferences: the app may save your selected currency in your browser local storage. A service worker may cache app files on your device for faster loading and offline fallback. These are stored on your device, not in an AROI account.
- Search and map use: search terms, category filters and API requests are processed to return venues and menus. AROI does not use these interactions to create AROI-owned advertising profiles.
- Optional browser location: if you allow browser geolocation, the app uses your approximate latitude, longitude and accuracy in your browser to sort venues by distance, show your position on the map and pan the map. AROI does not require this permission, does not create user accounts from it and does not store precise browser geolocation in the AROI database.
- Menu submissions: if you submit a menu, we may store the venue ID, menu item names, translations, prices, categories, optional contributor name or handle, submission time and review status.
- Photo submissions: if you upload a venue or menu photo, we may store the image, file metadata, caption, attribution, contributor name or handle, venue ID, timestamp and review status. Approved photos may be shown publicly.
- Review submissions: if you submit a venue review, we may store the venue ID, rating, review text, language, optional display name, submission time and moderation status. We do not collect email for review submission in the current MVP. For abuse prevention, we may store short-retention HMAC hashes derived from your browser session and request IP, without storing the raw IP address.
- Menu-photo extraction: if AI menu extraction is enabled and you use it, the submitted image may be sent to an AI provider to read menu text and prices. The extracted text is returned for review before submission.
- Advertising and cookies: if advertising is enabled, Google and other advertising vendors may use cookies, local storage, device identifiers or similar technologies to serve ads, prevent fraud, limit frequency, measure performance and, where permitted, personalize ads based on visits to this and other sites.
- Venue and map data: AROI displays public venue information from OpenStreetMap, Overture Maps, user contributions and Google Places display data. Google photo bytes may be cached in Cloudflare R2 under a two-year lifecycle rule.
AROI does not currently provide user accounts or paid checkout. Advertising features, when enabled, are handled through third-party ad technology and regional consent settings.
3. How We Use Information
- To provide the map, venue pages, menu search, photos and price information.
- To review, moderate and display submitted menu and photo data.
- To review, moderate and display submitted venue reviews.
- To improve performance, reliability, security and abuse prevention.
- To display, measure and protect advertising when ads are enabled.
- To comply with data source licenses, platform rules and legal obligations.
4. Third-Party Services
AROI may rely on the following service providers or data sources:
- Cloudflare: Pages hosting, Functions, D1 database, R2 object storage, caching, security and logs.
- Google Maps Platform / Google Places: venue ratings, review counts, price level, Google Maps links and display-only photo references.
- OpenStreetMap, Overture Maps, CARTO and Leaflet/CDN providers: venue data, map tiles and client-side map libraries.
- Exchange-rate providers: display-only currency conversion for menu prices.
- AI providers: only when menu-photo extraction is used.
- Google AdSense and advertising partners: ad serving, ad measurement, consent handling, fraud prevention and related advertising operations when ads are enabled.
These providers may process data under their own privacy policies and may operate in countries outside your location.
5. Retention
- Technical logs are retained as needed for security, reliability and provider operations.
- Approved menu and user-contributed photo data may remain available while AROI operates, unless removed or replaced.
- Rejected or obsolete submissions may be deleted during moderation or maintenance.
- Review submission abuse-control hashes are retained for 30 days and then deleted.
- Google photo cache objects under the
gphoto/prefix are configured for automatic physical deletion after two years. - Advertising vendors may retain cookie, consent and ad event data under their own policies and applicable law.
- Browser cache and local storage remain on your device until your browser or you clear them.
6. Location Data
AROI may ask for browser geolocation permission so you can see nearby venues first. If you allow it, the location is used in the browser for distance sorting and map display. You can deny the request, revoke permission in your browser settings or continue using the map manually.
7. Your Choices
- You can clear local storage and cached files in your browser.
- You can deny or revoke browser location permission.
- You can manage cookies and ad personalization through your browser, regional consent choices and Google ad settings where available.
- You can choose not to submit menus, names, captions or photos.
- You may request removal or correction of submitted content by contacting us.
8. Children
AROI is a general food map and is not directed to children. Please do not submit personal information about children.
9. Contact
For privacy requests, corrections or removal requests, contact: [email protected].
10. Changes
We may update this policy as AROI changes. The latest version will be posted on this page with the updated date.
This policy is written to describe the current AROI implementation. It is not a substitute for legal advice.