PolimalkThis page explains the current Polimalk privacy practices in English. The app's full Privacy Policy describes the account, provider and booking records in more detail. This guidance does not change the terms accepted when you create an account.
Information used to run the service
Account setup uses a name, Sri Lankan mobile number and email. Phone verification uses an OTP sent through Text.lk and account authentication is handled by Supabase. Provider records can include service descriptions, hours, prices, locations and uploaded media. A booking stores the selected service, requested time, reference, status and the details needed for that service.
Public and private information
Approved providers' published profile information and media are visible to visitors. Account data, private booking details and administrative records are not public directory content. Home-visit addresses and optional map pins are shared with the parties to that booking and authorised administration. Provider verification documents are kept separately from public profile media.
Location, camera and notifications
Nearby search asks for location when you choose it; you may instead enter a town. A home-service map pin is a separate optional booking input. Camera-based QR scanning asks for camera access when selected. Push permission is requested when you choose to enable push. You can disable device push registration through the available controls; delivery also depends on device settings and its push service.
Optional analytics and advertising
Cloudflare supplies hosting and public-page performance measurement. Optional Google Analytics runs on eligible public pages only after your separate analytics choice. Account, booking and administrative screens are excluded, and URLs with queries or fragments are not sent by that optional loader. Advertising is disabled in this content release pending publisher approval. Sinhala booking screens and private records are excluded from advertising.
Other services and external links
Supabase provides authentication, database and media storage. Text.lk receives the phone number and message needed for an authorised OTP or booking SMS. Android push uses Firebase where supported. Opening a Google Maps or WhatsApp link takes you to another service, whose own privacy terms apply. A normal support message should not contain passwords, OTPs, bank details or medical reports.
Your account choices
You can review profile details, booking SMS preferences and device notification controls in the app. The footer Analytics settings link lets you change optional Google Analytics consent. For account deletion, use the Profile controls or the published email process if you cannot sign in. A request is checked for ownership and unresolved bookings; submitting it does not immediately delete every record. See the full policy for which completed booking records may be retained without the customer account link.