SpaGo
Privacy Policy
Last updated: 7 November 2026
This policy explains how the SpaGo mobile app and service ("SpaGo", "we") handle your information. SpaGo helps people in Sri Lanka find spas and wellness centres. Contact: [email protected].
Information we collect
| Information | Why |
|---|---|
| Account details: name, email address, phone number and password (stored as a hash) | To create and secure your account and send verification codes |
| Location: precise location if you allow it. If you do not, your IP address is used to estimate an approximate location | To show nearby spas and distances. It is sent with your search and is not saved to your profile. It may remain in routine server logs for a limited time |
| What you post: reviews, ratings, likes and reports | To show reviews and keep them safe. Your name appears next to your reviews |
| Spa owner details: spa information, photos, and documents you upload to claim a spa | To publish listings and verify ownership. Ownership documents are private and are seen only by our admins |
| Device and usage data: notification token, app version, crash reports, performance data, and how the app is used | To send notifications, fix problems and improve the app |
| Advertising data: advertising ID and related device data | To show ads, limit how often they appear and measure them |
Information kept only on your phone
To send spa reminders, the app remembers on your phone which spas you viewed, called, messaged, opened in maps, liked, reviewed or saved. This history and your saved spas are not uploaded to our servers. You can turn reminders off in Settings → Spa Reminders.
Services that receive data
- Google AdMob: ads. In regions where it is required, the app asks for your consent first.
- Google Firebase: notifications, analytics, crash reporting, performance monitoring and app settings.
- ipapi.co: your IP address, to estimate location when precise location is not available.
- OpenStreetMap: map images. Your device requests them directly, which shares your IP address.
- Cloudflare and our hosting provider: to deliver and secure the service.
- Apps you choose to open: calling a spa, or opening WhatsApp or a maps app, sends you to that app under its own policy.
We do not sell your personal information.
Your choices
- Turn off location or notifications in your phone's settings.
- Turn off offers and spa reminders in the app's Settings.
- Change ad consent in Settings → Privacy & Ad Choices, where this option applies.
- Reset or delete your advertising ID in your phone's settings.
Deleting your account
You can delete your account in the app or by following the steps on our account deletion page. This deletes or anonymises your personal data, as described on that page.
Security and retention
Data is sent over encrypted connections. We keep account data until you delete your account. No system is completely secure, so we cannot guarantee absolute security.
Children
SpaGo is intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
Changes
We may update this policy. The date at the top shows the latest version.