Privacy Policy

• Your account: name, email, phone and WhatsApp number. If you use a password, it is stored only in a scrambled (hashed) form. If you sign in with Google, we receive your name and email from Google.
• Places you add: business name, address, map location, contact numbers, opening hours, services and photos.
• Blog posts you write: title, text and photos.
• Favorites and votes: which places you saved and how you voted on posts.
• Technical data: sign-in cookies that keep you logged in, your light/dark theme choice (saved only on your device), and basic logs (such as IP address and browser) that our hosting providers keep for security.

Your location is used only on your device, to centre the map ("Near me") or to drop a pin when you add a place. We don't store where you are. A place's pin is saved only when you submit that place.

• To run Garage Go: show places on the map, save your favorites, publish your listings and posts.
• To review every listing and post before it goes public, and to contact you about them if needed.
• To send account emails: confirming your email, resetting your password and a one-time welcome.
• To keep the service safe and stop spam or misuse.

• Everyone: approved listings (including the contact numbers you enter for the business) and approved blog posts with your name as the author. Vote totals are public; who voted is not.
• Only you: your favorites, your votes and listings or posts still in review.
• Our admins: your account details, to review submissions and handle reports.
• Service providers that run parts of Garage Go for us: Supabase (database, sign-in and photo storage), Resend (emails), Google (only if you sign in with Google), OpenStreetMap (map images load from their servers), Telegram (our admins get a short alert with the place or post name and who sent it) and Cloudflare (domain and email setup).
• Authorities, only when the law requires it.

Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you can ask to see, correct or delete your personal data, or withdraw your consent.

• Update your details any time in My account.
• Delete your listings and posts while they are in review; ask us to remove ones that are live.
• Delete your account at any time in My account. This removes your profile, the places and posts you added, their photos, and your favorites and votes, straight away.
• For anything else, email hey.garagego@gmail.com from the address you signed up with. We reply within 30 days.

We keep your data while your account is open, and delete it when you delete your account or ask us to.

We use encrypted connections and database access rules so each person sees only what they should. No system is perfect, so please use a password you don't use elsewhere.

Garage Go is not meant for children under 16.

If we change this policy, we'll update the date at the top. For important changes, we'll also let you know in the app or by email.