සේවා සපයන්නන්
අප වෙනුවෙන් පෞද්ගලික දත්ත සකසන සමාගම්, ඒ එක් එක් සමාගම කරන දේ, සහ ඔවුන් එය සකසන ස්ථානය.
මෙම ලේඛනය ඉංග්රීසි බසින් ප්රකාශයට පත් කර ඇත.
1How we work with service providers
The companies listed here act as processors for Infinite Global Solutions (Pvt) Ltd. That means:
- they may use your personal data only to provide their service to us, on our documented instructions, and never for their own purposes;
- their contractual terms with us cover confidentiality, security, sub-processing, assistance with your rights, breach notification, and deletion or return of data when the service ends;
- we assess each one before we engage them, and again when their service or location changes; and
- where they process data outside Sri Lanka, we apply the cross-border safeguards described in section 8 of our Privacy Policy, as required by section 26 of the Personal Data Protection Act No. 9 of 2022.
Google also acts as a controller in its own right for distributing the app and taking payment through Google Play, and for your Google account. Its own privacy notice applies to that activity.
2Current providers
| Provider | What it does for us | Data involved | Processed in |
|---|---|---|---|
| Supabase | Runs our database, sign-in, photo and media storage, and backups | Account and profile data, photographs, the encrypted text of messages — which Supabase cannot read — and usage analytics | India (Mumbai) |
| Text.lk | Sends the one-time code that verifies your mobile number | Mobile number, delivery status | Sri Lanka |
| Resend | Sends verification, security, deletion-confirmation and service email | Email address, name, message content | Japan |
| ImprovMX | Receives email sent to our published addresses — support, privacy, legal and child safety — and forwards it to the people who answer it | Your email address, your name and anything you write to us, including a deletion request or a child-safety report | France |
| Agora | Carries voice and video calls between members | Call routing data and metadata. Calls are not recorded | Agora's global real-time network — calls may be routed through servers in any country where it operates |
| Google — Firebase Cloud Messaging | Delivers push notifications to your device | Device push token, notification content | United States and Google's global infrastructure |
| Google — Google Play | Distributes the Android app and takes payment for paid plans | Purchase and subscription records, order numbers | United States and Google's global infrastructure |
| Cloudflare — Turnstile | Checks that a sign-up or form is being submitted by a person and not an automated script | IP address, browser and device signals, the result of the check | Cloudflare's global network |
| Shorebird | Delivers small fixes to the installed app between Play Store updates | App version, device type, a random install identifier, and the IP address the request comes from. No account, profile or message data | United States and Shorebird's global delivery network |
Hamuwemu for iOS has not been released. When it is, Apple will distribute the iOS app and operate in-app purchase for it, processing purchase and subscription records and device push tokens in the United States and on Apple's global infrastructure. This page will be updated before the iOS app becomes available.
3Changes to this list
We update this page whenever we add, change or remove a provider, and we keep our Google Play Data safety declaration in step with it. Where a change materially affects how your personal data is processed — for example a new category of provider, or processing moving to a new country — we will tell you in the app or by email before it takes effect.
Questions about any provider on this list: privacy@hamuwemu.lk.
