Privacy Policy

This Privacy Policy explains how Tharindu Jayasekara, trading as Hadissiya (ABN 91 576 730 203) ("Hadissiya", "we", "us") collects, uses, discloses, and protects personal information through the Hadissiya app, in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

By using Hadissiya you agree to the collection and use of information as described in this policy.

Account information: your mobile phone number (used to sign in via one-time passcode), full name, and profile photo.

Profile information: bio and general location/suburb you choose to add to your profile.

Task information: details of tasks you post or bid on, including descriptions, budgets, required dates, and any photos you attach.

Payment information: when you add a payment method, Stripe (our payment processor) collects and stores your card details directly — we never see or store your full card number. We do store a reference (a Stripe customer ID) and whether you have a saved payment method.

Messages: content you send through in-app chat, which is hosted by our chat provider, Stream.

Reviews: ratings and written reviews you give or receive.

Device and technical information: push notification token (so we can send you notifications), and standard technical logs generated by the app and our service providers.

Directly from you, when you create an account, complete your profile, post or bid on a task, make a payment, send a message, or leave a review.

Automatically, through our service providers (Supabase for authentication, database, and file storage; Stripe for payments; Stream for chat; Expo for push notifications) as a normal part of operating the Service.

To create and manage your account and verify your identity via phone OTP.

To operate the marketplace: showing your listings/bids to other users, connecting Posters with Taskers, and displaying reviews.

To process payments for tasks via Stripe.

To enable in-app messaging between users about a task.

To send you push notifications about offers, messages, and account activity.

To detect, investigate, and prevent fraud, abuse, and breaches of our Terms of Service.

To comply with our legal obligations.

We don't use your personal information for unrelated marketing without your consent, and we don't sell your personal information.

Other users: your name, profile photo, ratings/reviews, and task listings are visible to other users of the app as part of how the marketplace works. Your phone number is not shown to other users — only used for sign-in.

Service providers, who process data on our behalf under their own privacy and security obligations: Supabase (database, authentication, file storage), Stripe (payment processing), Stream (chat messaging), and Expo (push notification delivery).

Legal and safety: we may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of Hadissiya, our users, or the public.

Some of our service providers store or process data outside Australia. Our database and file storage (Supabase) is hosted in a Japan (Tokyo) data centre. Stripe, Stream, and Expo may process data in the United States or other countries in which they operate.

Where personal information is disclosed overseas, we take reasonable steps to ensure those recipients handle it consistently with the Australian Privacy Principles, including relying on the service providers' own contractual and security commitments.

We rely on industry-standard security practices from our service providers, including encryption of data in transit, access controls, and secure payment processing through Stripe (we never store full card details). No system is 100% secure, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

We keep your personal information for as long as your account is active, and for a reasonable period afterwards where we have a legal or legitimate business reason to do so (for example, transaction records).

You can delete your account at any time from Profile → Account Settings → Delete account. When you do, we delete your Supabase Auth identity (ending your ability to sign in), delete your saved payment method and chat identity, delete your avatar photo, and remove your name and other personal details from your profile. Historical records that other users can see — like completed task listings, offers, and reviews — are anonymised rather than deleted outright, so we don't break other people's transaction history, but no personally identifying information about you remains attached to them.

You can access and correct most of your personal information directly in the app under Profile → Account Settings. For anything you can't change yourself, or to request a copy of your data, contact us at info@hadissiya.lk.

If you think we've mishandled your personal information, please contact us first at info@hadissiya.lk so we can try to resolve it. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We send you SMS messages for phone verification (OTP) purposes and push notifications for account and task activity. Verification SMS is required to use the Service. You can disable push notifications at any time in your device settings. Where we send any promotional messages, they will include a way to opt out, consistent with the Spam Act 2003 (Cth).

Hadissiya is not intended for anyone under 18. We don't knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make a material change, we'll notify you in the app before it takes effect.

For any privacy question or request, contact us at info@hadissiya.lk.