Privacy Policy

Last updated: 9/15/2026

1. Information We Collect

When you use the 24hours.lk mobile and web applications, we collect different types of information depending on your interaction with our platform. This includes: (a) Account Information - when you register or sign in, we collect your name, email address, phone number, and profile information you provide; (b) Authentication Data - we use Google OAuth for sign-in, which provides us with your Google account information in accordance with their privacy policies; (c) Booking and Transaction Data - information about your bookings, rides, and transactions including dates, times, locations, services accessed, and payment details; (d) Location Data - if you use ride services or location-based features, we collect GPS location information to provide accurate service matching and driver tracking; (e) Communications - if you contact us for support, we retain those communications for customer service purposes; (f) Device Information - we collect technical data such as device type, OS version, app version, and device identifiers to improve app performance and troubleshoot issues.

We also automatically collect non-personal information such as browser types, referring domains, page interactions, and app usage patterns using analytics services. This helps us analyze traffic patterns, improve user experience, and optimize platform performance.

2. How We Use Your Information

We use the collected information for the following purposes: (a) Service Delivery - to process your bookings, connect you with service providers, and enable ride-sharing services; (b) Account Management - to manage your account, enable sign-in, process password resets, and manage profile information; (c) Communication - to send transactional emails/SMS (confirmations, receipts, status updates) and promotional content if you opt-in; (d) Safety and Fraud Prevention - to detect and prevent fraudulent transactions, monitor account security, and investigate violations of our terms; (e) Platform Improvement - to analyze usage patterns, improve features, optimize app performance, and conduct analytics; (f) Legal Compliance - to comply with legal obligations, respond to lawful requests, and enforce our terms of service.

3. Data Sharing and Third Parties

We do not sell your personal data. However, we may share information with: (a) Service Providers - with restaurants, hotels, transportation providers, and other service partners to fulfill your bookings and provide services; (b) Payment Processors - with payment gateways for secure transaction processing; (c) Third-party Analytics - with analytics services (like Google Analytics) to understand platform usage; (d) Legal Authorities - when required by law or to protect our legal rights; (e) Google OAuth - for authentication purposes in accordance with Google's privacy policies. These third parties are contractually bound to handle your data securely and only use it as necessary to provide services.

4. Data Security

We implement industry-standard security measures to protect your personal information, including: HTTPS encryption for all data transmission; secure password hashing and storage; OAuth 2.0 for secure authentication; regular security audits and vulnerability assessments; restricted access to personal data limited to authorized personnel only; secure storage practices for sensitive information. However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security. Please use a strong password and enable any two-factor authentication options we provide.

5. Data Retention

We retain your personal information for as long as your account is active or as long as needed to provide services. After account deletion, we retain certain information for legal compliance (up to 7 years for transaction records). Booking history is retained for your reference and to resolve disputes. You can request deletion of specific data except where legally required to maintain records.

6. Your Rights

Depending on your jurisdiction, you may have the following rights: (a) Access - you can request a copy of the personal information we hold about you; (b) Correction - you can update or correct your profile information through account settings; (c) Deletion - you can request deletion of your account and associated personal data (some data may be retained for legal reasons); (d) Portability - you can request your data in a portable format; (e) Opt-out - you can unsubscribe from promotional communications at any time; (f) Object - you can object to certain types of data processing. To exercise these rights, contact us at info@24hours.lk with your request details.

7. Third-party Links and Services

Our platform links to external services and service providers. We are not responsible for the privacy practices of these third-party websites. When you access external services (restaurant booking sites, transportation providers, etc.), you are subject to their privacy policies. We encourage you to review the privacy policies of any service you access through our platform.

8. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by updating the revision date at the top of this page and, if required, by sending a notification through the app or email. Continued use of our platform after changes constitutes your acceptance of the updated policy. If you have any questions about this Privacy Policy or our privacy practices, please contact us at info@24hours.lk.