What we hold, what we won’t, and what you can demand.

What Kada is

A price comparison site for prepared meal plans in Metro Manila, run by a husband-and-wife team here. It reads providers’ public prices, divides them onto one per-day axis, and publishes what diners report back about delivery and food.

• Reachable at [email protected], usually the same day. That address is the data protection contact as well as everything else.
• The methodology is published in full, including a log of every correction we have had to make.

What it is not

• Not a merchant or a marketplace. No orders are taken here, no payments are processed, no cart exists. Every plan link goes to the provider’s own site, where their terms apply and ours stop.
• Not affiliated with any provider listed. No provider has approved, reviewed or paid for their listing, and none uses their logo here.
• Not earning a commission. Every discount code on the site carries the line “we earn nothing from this code” because that is currently true of all 0 of them. If one ever pays us, that line changes on that code before it goes live.
• Not funded. A domain and hosting, out of pocket. Two things are for sale and both are sold to providers rather than to you: a monthly report about the market a kitchen competes in, at ₱3,000 a month, and a labelled sponsored box above the results, at ₱3,000 a month on its own. Both rates are published on the provider page rather than negotiated, and nothing has been sold. Neither buys a change to anything published here, including where a plan sits in the ranking. When money does come in it will be registered and taxed like any other income.

So we don’t keep it

• A goal filter is never written against an email, an account or a device identifier. It increments a city-level counter and is discarded.
• The one alert we offer — a new provider or a new promo code in your city — is keyed to a city and nothing else. Both events are rare, and that rarity means the email does not need targeting by goal — so no goal is ever stored against it. There was an earlier design that stored the matching plan IDs instead; keying on the city removed the inference altogether rather than disguising it.
• The aggregate given to providers is counts by city, with no minimum-cell trickery available to reverse it to a person.

What that costs you

Real things, and it is fairer to name them than to claim the choice was free:

• The site cannot personalise. It will never greet you with “new PCOS-friendly plans this week”, because it does not know that about you.
• Your alert can tell you a new provider or promo code has turned up in your city. It cannot tell you whether the plan suits you, because it does not know what you want — the email names what they sell and you judge it.
• Clearing your browser storage loses your theme choice and nothing else, because there is nothing else.

Cyber-libel is a real exposure

Online libel under the Cybercrime Prevention Act of 2012 (RA 10175) applies to statements about a named business, and it exposes both the person who wrote it and the site that published it. We are two people with no legal budget.

A delivery photo timestamped against a stated window is a fact and defensible. “This kitchen is filthy” may well be true and we are not equipped to prove it in front of anyone. So we do not host it — and we say that plainly rather than accepting reviews and moderating them away quietly.

What we publish instead

Fixed questions, one tap each, aggregated with the base printed: on time, whether the food was good, what diners flagged, portion, chilled, would-order-again. An aggregate of a fixed question is a statistic rather than an allegation.

That distinction is the entire design, and it took a correction to get right — the methodology used to say food quality was out of scope because opinion cannot be verified, which confused prose we cannot check with a question we can count. The reasoning in full.

Why we can name you

• A provider’s name is used to identify the business being compared and nothing else. No logos, no brand assets, no suggestion of endorsement or partnership.
• A price on a public order page is a fact about a business, and every listing prints the quote it was derived from and the date it was read so the arithmetic can be checked.
• Corrections from the provider outrank everything else we hold and publish the same day. We would rather you corrected us than let us guess.

What we will and won’t remove

• Will: any wrong price, window, city, calorie figure or plan, same day.
• Will: publish your reply of up to 300 characters, unedited, under any figure you dispute, plus the rule and the base behind it.
• Will: delist you entirely on request. Listing is free and it is also optional.

• Won’t: delete a verified diner report because it is unflattering.
• Won’t: remove an accurate price, or a competitor’s listing, at anyone’s request.
• Won’t: change a ranking. It is arithmetic and it is not for sale.

Think we have infringed something? [email protected], with the specific page and what is wrong with it, and you will get a person rather than a form.

Almost nothing, and it is checkable

• No Google Analytics, no Facebook pixel, no ad network, no session recorder. None. This is the claim easiest to verify and hardest to fake — open your browser’s network tab. You will see requests to this site and to nowhere else, and the only ones that are not the page itself are the four below, which happen when you do something rather than when you arrive.
• No third-party requests at all. The fonts are served from this site rather than fetched from Google, so nobody else learns that you visited.
• One item in local storage: kada-theme, holding “light” or “dark” if you chose one. No cookies are set on the public site.
• Four things this site records, all of them to itself. An outbound click — which plan, which day, and the filters that were active. A discount code being revealed. A search that came back empty, with the filters that emptied it. And the alert or area form, if you fill one in, which is the only one of the four that holds an address, because you typed it.
• None of the first three holds an identifier of any kind. No cookie, no device id, no hashed anything — so there is nothing on those rows that could be joined back to you, to each other, or to a report. It is what lets a provider be told how many clicks opened their plans without anyone being told who did the clicking, and it is the same reason we could not tell you what you personally did here even if you asked.

If something leaks

The realistic worst case here is the photo and order-confirmation store, which is why it holds 90 days rather than forever.

• We notify the National Privacy Commission and every affected person within 72 hours of establishing that a breach happened, as the Act requires.
• The notice says what was taken, when, and what we have done — not that “an incident may have occurred”.
• It gets published on this page as well as emailed, so it cannot be handled quietly.

Two people maintaining a site is a security limitation in itself, and stating it is more honest than a paragraph about industry-standard encryption.