Privacy Policy

Tango Deals ("we", "us", "our") operates the Tango Deals mobile application and the website at tangodealz.com (collectively, the "Service"). We connect customers with local deals, offers, and homestay experiences across Sri Lanka.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By using the Service, you agree to the practices described in this policy.

For any privacy-related questions, contact us at: privacy@tangodealz.com

Information you provide directly:

• Account registration details: name, email address, password
• Profile information: profile photo, phone number
• Booking information: guest names, special requests, contact details
• Payment information: billing name, email address (payment card details are handled entirely by PayPal and are never stored by us)
• Communications: messages sent to vendors, support requests
• Reviews and ratings you submit

Information collected automatically:

• Device information: device model, operating system, unique device identifiers
• Location data: approximate or precise location when you grant permission, used to show nearby deals
• Usage data: features you use, pages you view, time spent, search queries
• Push notification tokens: to send you booking alerts and deal notifications
• Log data: IP address, browser type, pages visited, timestamps, crash reports

Information from third parties:

• Google Sign-In: name, email address, and Google account ID if you choose to sign in with Google
• Apple Sign-In: name, email address, and Apple account ID if you choose to sign in with Apple
• Camera and photo library access: only when you choose to upload a profile photo

Information collected when you use moderation features:

• User reports: when you report another user, we record the reported account, the reason you selected, and any description you provide
• User blocks: when you block another user, we record both account identifiers so that blocked content is hidden and communication is prevented

We use the information we collect to:

• Create and manage your account
• Show you relevant deals, offers, and homestays near your location
• Process bookings and payments
• Send booking confirmations, receipts, and check-in reminders
• Send push notifications for new deals matching your interests (you can opt out at any time)
• Enable messaging between customers and vendors
• Detect and prevent fraud, abuse, and security incidents
• Improve our Service through analytics and user feedback
• Comply with legal obligations
• Respond to your support requests

We do not sell your personal information to third parties. We do not use your data for automated decision-making that has significant legal effects on you.

We may share your information in the following circumstances:

With vendors/businesses

When you make a booking or redeem an offer, we share the relevant booking details (your name, contact information, and request details) with the vendor fulfilling your booking. Vendors are required to handle this data solely for the purpose of providing you their service.

Service providers we use:

• Supabase — database, authentication, and file storage (data may be hosted in the EU or US)
• PayPal — payment processing. PayPal's privacy policy applies to payment data
• Google Firebase — push notifications (Firebase Cloud Messaging)
• Expo / EAS — app build and update infrastructure
• Resend — transactional email delivery
• Vercel — web hosting

All service providers are contractually required to protect your data and use it only as directed by us.

Legal requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Tango Deals, our users, or the public.

Business transfers

If Tango Deals is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time (see Section 6).

We may retain certain information after account deletion where required by law (e.g. financial records for tax compliance) or for legitimate business purposes (e.g. fraud prevention). Such data is retained for no longer than 7 years unless a longer period is legally required.

Booking records are retained for 3 years after the booking date to comply with financial regulations.

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information via your account settings or by contacting us
• Deletion: Delete your account and associated personal data directly from the app (Profile → Account → Delete Account), or by emailing privacy@tangodealz.com. In-app deletion is immediate; email requests are processed within 30 days.
• Push notifications: You can disable push notifications at any time in your device Settings → Notifications → Tango Deals
• Location: You can revoke location permission at any time in your device Settings → Privacy → Location Services. Note that some features (nearby deals) will not work without location access.
• Marketing emails: Unsubscribe from any marketing email using the unsubscribe link in the email

Tango Deals provides in-app tools to help keep the community safe. From any chat conversation, you can report or block another user.

Reporting: When you submit a report, we collect the account being reported, the reason category you selected, and any optional description you provide. This information is reviewed by our moderation team. We may take action on the reported account including a warning, suspension, or permanent removal. We do not notify the reported user of the reporter's identity.

Blocking: When you block a user, that user can no longer send you messages or view your profile. Block records are stored to enforce the restriction and are not shared with the blocked user. You can unblock a user at any time from your account settings.

Report and block data is retained for the life of the accounts involved and for up to 2 years after account deletion to support safety investigations and prevent ban evasion.

The Tango Deals app requests access to your device location to display deals and homestays near you. Location is requested only when you use the app ("While Using the App" permission) and is not collected in the background.

Precise location is used only to calculate distance to nearby listings. We do not store a history of your location movements.

The app requests camera and photo library access only when you choose to upload a profile picture. We do not access your camera or photos without your explicit action.

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) for all data communications
• Passwords are hashed and never stored in plain text
• Row-level security policies on our database to enforce data access controls
• Regular security reviews of our infrastructure

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability. If you suspect a security incident, contact us immediately at security@tangodealz.com.

Tango Deals is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@tangodealz.com.

Tango Deals is based in Sri Lanka. Our service providers (including Supabase and Vercel) may process data in the United States or the European Union. By using our Service, you acknowledge that your information may be transferred to and processed in countries with data protection laws that may differ from those in Sri Lanka.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, by sending you an email or in-app notification. We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us: