Privacy Policy

StandWithLK ("StandWithLK", "we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and Services.

We aim to align our practices with the Personal Data Protection Act, No. 9 of 2022 (PDPA) and any applicable regulations issued by the Data Protection Authority of Sri Lanka.

1. Who we are

StandWithLK is a platform that enables individuals and communities affected by disasters in Sri Lanka to publish reports about damage, upload photos, share locations, and connect with donors, volunteers, and NGOs.

2. Data we collect

2.1 Information you provide to us

Account & profile data:

• Name or username
• Email address
• Phone number
• Password or authentication information

Report data:

• Type of damage (house, farm, land, business, etc.)
• Description of damage and needs
• Contact information
• District and location details
• Coordinates or map links
• Images or videos of damage

Comments and messages:

• Content of comments you post on reports
• Messages you send via the Platform

Note: If a conversation is reported for safety violations, Platform administrators may view the last 10 messages of that conversation to investigate the report.

2.2 Data collected automatically

When you use the Platform, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent

3. Legal bases for processing

We process your personal data on the following legal bases:

• Consent – when you opt in to create reports or subscribe to communications
• Contract – to provide you with the Services
• Legitimate interests – improving the Platform and supporting disaster-relief efforts
• Legal obligations – to comply with applicable laws

4. How we use your data

We use your personal data to:

1. Provide and operate the Platform – manage accounts, display reports, enable communication
2. Support disaster response – help connect affected communities with donors and volunteers
3. Secure and improve the Platform – monitor usage, prevent abuse, enhance functionality
4. Communicate with you – send service messages and respond to inquiries
5. Comply with law – respond to lawful requests from authorities

5. Sharing of data

We do not sell your personal data.

We may share your data with:

• Service providers – Supabase (database), Cloudinary (image hosting), hosting providers
• Other users – when you create public reports visible to visitors
• Authorities – where required by law

6. Data retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, maintain historical records of disaster damage, and comply with legal obligations.

7. Your rights

Subject to the PDPA and applicable laws, you may have rights including:

• Right to access – request confirmation of data we process and obtain a copy
• Right to rectification – request correction of inaccurate data
• Right to erasure – request deletion of certain personal data
• Right to object – in specific circumstances
• Right to withdraw consent – where processing is based on consent

To exercise your rights, please contact us at standwithlanka.25@gmail.com

8. Children's privacy

The Platform is not intended for use by children under 18 without parental consent. We do not knowingly collect personal data from children under 18 for independent accounts.

9. Security & Legitimacy

We implement reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and database security policies.

We have done everything to verify the legitimacy of users on our platform to the best of our ability, to ensure a safe and trustworthy environment for our community.

However, no system can be guaranteed 100% secure. You are responsible for keeping your account credentials safe.

If there is no way to report anything through the app (e.g. specialized concerns or technical issues), please send us an email via the email given below (standwithlanka.25@gmail.com).

10. Cookies

Our Platform may use cookies to remember your login session, understand usage patterns, and improve user experience.

You can control cookies through your browser settings.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify you through the Platform or by email.

12. Contact us

If you have questions about this Privacy Policy, contact:

• Email (privacy): standwithlanka.25@gmail.com
• Email (general): standwithlanka.25@gmail.com