Request Privacy Policy

Effective Date: October 11, 2025

1. Our Commitment to Privacy and Safety

Welcome to Request. We respect your privacy and are committed to keeping you safe when you use our mobile application and website (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and what choices and rights you have.

By using the Service, you agree to this Policy. If you do not agree, please discontinue use of the Service.

Data Controller: Request Technologies
Address: 473/1, Inigala, Katugastota, Sri Lanka
General Contact: info@request.lk
Data Protection Contact (DPO): privacy@request.lk

2. Scope and Applicability

This Policy applies globally to all users of the Service, regardless of country. Where local laws grant additional rights or impose specific obligations (e.g., EU/UK GDPR, California CCPA/CPRA, Sri Lanka PDPA), we honor those requirements as described below.

3. Information We Collect

3.1 Information You Provide

• Account Data: Name, email, phone number, password, and profile details.
• Verification Data: ID documents or proofs you upload for safety or compliance, handled with heightened security.
• User Content: Requests you post, offers you make, ratings/reviews, and in-app chat messages.
• Support Communications: Information you provide when contacting support.

3.2 Information Collected Automatically

• Usage Data: Screens viewed, features used, and actions taken.
• Device and Log Data: IP address, device type, OS, app version, crash/error logs, and unique identifiers.
• Location Data (optional): If you grant permission, approximate or precise location to show nearby requests and enhance safety features. You can disable this in device settings.

3.3 Information from Third Parties

• Payment Processors: Limited payment metadata (e.g., last four digits, transaction IDs). We do not store full card details.
• Authentication/Analytics Providers: Data to help verify accounts, prevent abuse, and improve performance.

4. How We Use Your Information

• Provide and Maintain the Service: Create/manage accounts, connect requesters and responders, enable messaging, and process transactions.
• Safety and Security: Verify identities, prevent fraud and abuse, detect suspicious activity.
• Improve and Personalize: Analyze usage, fix bugs, and enhance features and recommendations.
• Communications: Send service-related notices and, with your consent where required, promotional messages. You can opt out of non-essential communications.
• Legal Compliance: Comply with applicable laws, regulations, and lawful requests.

4A. Fraud Prevention in Help and Emergency Flows

To protect users in Help and Emergency requests, we may analyze activity patterns, messages, account signals, and abuse reports to detect scams, impersonation, spam, and unsafe conduct. Where legally required or necessary to protect users, we may share relevant information with law enforcement or competent authorities.

Even with these measures, no platform can eliminate all fraud risk. Users must use independent judgment and safety precautions before engaging with other users.

5. Permissions and Your Choices

Camera: Used to capture profile images and verification documents. You may deny and upload from gallery instead.

Location: Used to show nearby/relevant requests and improve safety features. You control this in device settings.

Some features may not function without the relevant permission.

6. How We Share Information

We do not sell your personal data. We share it only as needed:

• With Other Users: Limited profile and request-related details needed to facilitate connections.
• With Service Providers: Hosting, communications, payments, analytics, safety/fraud prevention — bound by contracts requiring data protection.
• For Legal Reasons: To comply with law or protect rights, safety, and security.
• Business Transfers: In a merger, acquisition, or asset sale, with appropriate safeguards.

7. International Data Transfers

We operate globally. Your information may be processed in countries with different data protection laws. Where required, we use appropriate safeguards (such as EU Standard Contractual Clauses) for international transfers.

8. Data Retention

We keep personal data only as long as necessary to provide the Service, for legitimate business needs, and to comply with legal obligations. When no longer needed, we securely delete or anonymize it. You may request account deletion via in-app settings or by contacting us.

9. Security Measures

• Encryption in transit (TLS) and at rest where applicable
• Access controls and least-privilege principles
• Security monitoring and vulnerability patching
• Employee confidentiality obligations and training

No system is 100% secure, but we continuously work to protect your information.

10. Your Privacy Rights

Regardless of where you live, you may have rights to access, correct, delete, object to or restrict processing, and obtain a portable copy of your data. Many rights can be exercised in-app; otherwise contact privacy@request.lk.

Your Privacy Rights by Region

• EEA/UK (GDPR/UK GDPR): Access, rectification, erasure, restriction, portability, objection; withdraw consent; complain to a supervisory authority.
• California (CCPA/CPRA): Know, delete, correct; opt out of sale/sharing; limit use of sensitive personal information; non-discrimination.
• Sri Lanka (PDPA): Access, rectification, erasure, objection, and withdrawal of consent, subject to legal exceptions.
• Other Regions: We respect rights under your local laws. Contact us to exercise your rights.

11. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from children. If you believe a child provided us data, contact us and we will take appropriate steps to remove it.

12. Cookies and Similar Technologies

We may use cookies, device identifiers, and similar technologies for functionality, preferences, and analytics. Where required, we will request consent. Manage through your browser/device settings.

13. Third-Party Services

We integrate with hosting providers (e.g., AWS), authentication and analytics (e.g., Google/Firebase), communications, and payment processors. Their use of your data is governed by their own policies.

14. Changes to This Policy

We may update this Policy from time to time. For material changes, we will update this page and effective date and, where appropriate, notify you in-app or by email.

15. Contact Us

Email (General): info@request.lk
Data Protection Contact (DPO): privacy@request.lk
Address: 473/1, Inigala, Katugastota, Sri Lanka
In-App: Use the in-app support feature

© 2025 Request Technologies. All rights reserved.