1. Who we are
CeylonFind is a Sri Lankan discovery, listings and booking platform. This policy applies to the CeylonFind mobile app and ceylonfind.lk and explains what information we collect, why we use it and the choices available to you.
2. Information you provide
- Account and profile details, such as your name, email address, profile photo and any contact or verification information you choose to provide.
- Listing content, including descriptions, prices, attributes, photographs and the location selected for an advertisement.
- Messages, booking requests, reviews, saved listings, saved searches and reports you send through CeylonFind.
- Support communications and any other information you send directly to us.
3. Location information
When you choose Find my location or a nearby-search feature in the mobile app, we ask for foreground location permission. The GPS fix is used for that request and held in memory; it is not added to your profile or analytics history.
When you post an advertisement, the location you select is stored with that listing so people can understand where it is. CeylonFind may show an approximate area instead of an exact point for private-seller categories. You can refuse or revoke device location permission and continue general browsing.
4. Device permissions and app data
- Camera and photo access are used only when you choose a listing or profile image. Uploaded images are re-encoded to remove metadata such as embedded GPS coordinates.
- Calendar access is used only when you choose to add a confirmed booking to your calendar.
- If you enable notifications, we store an Expo push token linked to your account so we can deliver replies and booking updates. The token is removed from your account when you sign out where possible.
- Authentication tokens are stored in the operating system's secure storage on your device.
5. Technical and usage information
Our services receive normal network information such as IP address, country, page or screen viewed, session identifier and broad device or browser category. We use this for security, abuse prevention, service reliability and aggregated usage reporting.
Raw IP addresses and the nearest network edge are retained for up to 7 days. We may retain pseudonymous events and aggregated device, browser and country information for longer because those records do not contain the raw IP address or full user-agent string.
6. How we use information
- Provide accounts, search, listings, maps, bookings, messaging and notifications.
- Display information you intentionally publish and connect buyers, sellers, guests and hosts.
- Prevent fraud, spam and abuse, enforce platform rules and protect users.
- Maintain, troubleshoot and improve CeylonFind and comply with legal obligations.
7. When information is shared
We do not sell personal information. Information is shared with other users only as needed for the features you use—for example, a public listing, a message recipient or confirmed booking contact details.
We use service providers to operate CeylonFind, including Supabase for authentication, database and file storage; Expo for app builds and push delivery; Google for optional Google sign-in; OpenStreetMap contributors and tile services for maps; Vercel for website hosting and performance; Resend for email; and payment providers when a paid feature is used. These providers process information under their own terms and privacy commitments.
We may disclose information when required by law, to protect people or the platform, or as part of a business transfer subject to appropriate safeguards.
8. Retention
We retain account and user content while your account is active and as needed to provide the service. Some records may be kept longer for fraud prevention, dispute resolution, financial recordkeeping, safety or legal compliance. When information is no longer needed, we delete or anonymise it.
9. Your choices and rights
- Update profile information and manage listings from your account.
- Remove saved items, disable notifications or revoke device permissions through the app or device settings.
- Ask for access, correction or deletion of your personal information, subject to applicable law and legitimate retention requirements.
- Sign out at any time. You can continue browsing most public listings without an account.
10. Security, children and international processing
We use access controls, row-level database security, encrypted connections and secure device storage to protect information. No system is completely secure, so please use a unique password and keep your device protected.
CeylonFind is not directed to children under 13 and we do not knowingly collect personal information from them. Service providers may process information outside Sri Lanka; where this happens, we use appropriate contractual and technical safeguards.
11. Changes to this policy
We may update this policy as CeylonFind changes. The updated date will appear at the top, and material changes may also be communicated in the app or by email.