Data Safety Policy

Last updated: May 2026

1. Overview

HandyLink ("we", "our", or "us"), operated by ALFA Global Ltd, is committed to being transparent about how user data is collected and used. This Data Safety Policy provides a summary of our data practices as required by the Google Play Store and Apple App Store. For full details, please also read our Privacy Policy.

2. Data Collected

The following table summarises the categories of data HandyLink collects:

Data Type	Examples	Required?
Personal Info	Phone number, full name	Required
Account Info	Profile photo, account type (client / provider)	Required
Business Info (providers)	Business name, description, service category, hourly rate, availability	Required for providers
Location	Approximate city or region (entered manually or via GPS when requested)	Required
Photos & Media	Profile photo, cover photo, gallery images, chat attachments	Optional
Verification Documents	Government-issued ID, business registration documents (providers only)	Required for providers
Messages	In-app chat messages between clients and service providers	Required
Booking Data	Job title, description, preferred date/time, address	Required
Device Identifiers	Push notification token, device type, OS version	Required
Usage Data	Screens viewed, features used (for app improvement)	Required

3. Purpose of Data Collection

Data collected by HandyLink is used solely for the following purposes:

App Functionality: Account creation, authentication (OTP), booking management, and in-app messaging
Service Discovery: Matching clients with nearby service providers based on location and category
Verification: Confirming the identity and credentials of service providers
Communications: Sending push notifications for bookings, messages, and status updates
Analytics & Improvement: Understanding how users interact with the app to improve features
Legal Compliance: Retaining records as required by applicable laws

We do not use your data for targeted advertising, and we do not sell your personal data to third parties.

4. Data Sharing

HandyLink shares data only in the following limited circumstances:

Between Users: Your public profile (name, photo, rating, city, service category) is visible to other HandyLink users to enable service discovery and bookings.
Supabase (Infrastructure Provider): Our database, file storage, and authentication are powered by Supabase. Data is processed solely to operate the app and is not used by Supabase for any other purpose.
Expo / EAS (Push Notifications): Your device push token is shared with Expo's push notification service to deliver in-app alerts.
Legal Obligations: We may disclose data if required by law, court order, or to protect the safety of our users or the public.

No data is shared with advertisers, data brokers, or marketing platforms.

5. Data Security

Encryption in Transit: All data transmitted between the app and our servers is encrypted using TLS (HTTPS).
Encryption at Rest: Data stored in our Supabase cloud database is encrypted at rest.
Access Controls: Row-level security (RLS) policies ensure each user can only access their own data. Verification documents are stored in private, access-controlled storage buckets.
Authentication: Users are authenticated via one-time password (OTP) sent to their registered phone number. No passwords are stored in plain text.
Admin Access: Administrative operations (e.g., approving providers) require separate admin credentials and are protected by server-side authorization functions.

6. Data Retention & Deletion

We retain your personal data for as long as your account is active or as needed to provide services to you. You may request complete deletion of your account and all associated data at any time using the Settings > Data Management screen within the app, or by emailing us at alfagloballtd4@gmail.com.

Upon deletion: your profile, messages, bookings, photos, and verification documents are permanently removed from our systems. Some anonymised or aggregated records may be retained for legal compliance purposes.

7. App Permissions

HandyLink requests the following device permissions. All permissions are used solely for the stated purpose:

Camera & Photo Library: To upload profile photos, cover images, gallery photos, and chat attachments
Files / Document Access: To attach and send documents through in-app chat
Location (when-in-use): To detect your city for nearby service provider search — only when you actively use the location feature
Push Notifications: To notify you of new booking requests, messages, and status updates

All permissions can be granted or revoked at any time through your device's system settings. Revoking a permission will disable the related feature but will not affect your account.

8. Children's Privacy

HandyLink is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has created an account, we will immediately terminate the account and delete all associated data.

9. Your Rights

You have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Update or correct inaccurate information via the app's profile settings
Deletion: Request full deletion of your account and data (via Settings > Data Management or by email)
Export: Download a copy of your data from Settings > Data Management within the app
Withdraw Consent: Revoke optional permissions (e.g., location, notifications) at any time through device settings

10. Contact Us

If you have questions, concerns, or requests regarding your data, please contact us at:

ALFA Global Ltd — HandyLink
Email: alfagloballtd4@gmail.com

For the full Privacy Policy, visit alfagloballtd.com/privacy-policy.