Privacy Policy

GATHERBIZ (PTE. LTD.) ("GatherBiz", "we", "our", or "us"), a company incorporated in Singapore (Registered Office: 60 Paya Lebar Road, #11-22 Paya Lebar Square, Singapore 409051, Singapore), is dedicated to safeguarding your personal privacy and maintaining data sovereignty under the Singapore Personal Data Protection Act (PDPA). This Privacy Policy explains how we collect, store, process, and protect your information across the GatherBiz mobile application, web application, and associated cloud synchronization services.

By downloading, accessing, or using GatherBiz, you consent to the data practices described in this policy.

1. Information We Collect

A. Account & Authentication Information

• Phone Number: We collect your mobile number in full international E.164 format (e.g., +65XXXXXXXX) and password. We use your phone number strictly for account authentication, account security, and mutual friend discovery. We do not sell, rent, or trade your phone number to telemarketers or third-party advertisers.
• User Profile: Information you voluntarily supply, including your chosen display name, unique handle, and avatar photo.

B. Device Location Data (Foreground Only)

• Precise & Approximate Location: When using map-based features in our travel planning mini-app (GungHo) — such as the "Locate Me" button, place searches, or itinerary navigation — we request permission to access your device's geolocation.
• Strict Foreground Scope: Location is accessed strictly while the application is in active foreground use. We do not access, track, or record your location in the background when the application is closed or minimized.
• Purpose: Geolocation coordinates are used solely to center the map on your position and calculate distances to itinerary waypoints. Your location history is not sold, monetized, or logged on our servers without your explicit addition of an itinerary stop.

C. User-Generated Content & Attachments

• Travel Itineraries & Notes: Trip names, scheduled places, notes, task lists (WeDo), custom category sets, and item comments.
• Photos & Media: Trip hero photos and activity images you upload. Photos are cached locally on your device and synchronized to secure cloud storage buckets (trip_photos).
• Travel Documents & Files: PDF reservations, tickets, and document attachments linked to your travel items, uploaded to secure cloud storage buckets (trip_files).
• Collaborative Workspaces: Information regarding groups you create or join, including group names and member rosters.

D. Device & Technical Diagnostics

• Operating system version, device model, and crash diagnostics collected strictly for debugging technical faults, maintaining local-first SQLite sync integrity, and optimizing app performance.

2. How We Use Your Information

We process collected information exclusively to provide and enhance GatherBiz features:

1. Core Offline & Sync Functionality: Providing local-first offline storage (PowerSync SQLite on your device) that seamlessly synchronizes with our cloud backend (PostgreSQL hosted via Supabase) whenever network connectivity is available.
2. Social Collaboration: Enabling cooperative trip planning and shared task management with accepted friends and collaborative workspace members.
3. Task & Reminder Alerts: Scheduling local device notifications for your upcoming tasks and trip activities.
4. Safety & Moderation: Enforcing our zero-tolerance policy against abusive, harassing, or objectionable user behavior.

We do not sell your personal data to data brokers. We do not track your browsing activity across third-party websites or applications.

3. Third-Party Service Providers & Subprocessors

To deliver reliable service, we integrate with trusted third-party cloud infrastructure providers:

• Google Maps Platform (Google LLC): Provides map tiles, place search, and point-of-interest details via the Google Places API.
• Supabase (Supabase, Inc.): Provides backend database hosting, user authentication, and secure encrypted cloud storage for media attachments.
• PowerSync (Journey Mobile, Inc.): Manages local-first SQLite database synchronization between client devices and cloud databases.
• Cloudflare (Cloudflare, Inc.): Provides global content delivery, web hosting, DDoS protection, and SSL/TLS encryption.

4. Data Storage & Security

• Encryption in Transit: All communications between your device, our sync engine, and cloud databases are encrypted using modern Transport Layer Security (TLS 1.2+ / HTTPS).
• Row-Level Security (RLS): Cloud databases are strictly partitioned by PostgreSQL Row-Level Security. Private trips, notes, and tasks are inaccessible to any unauthorized third party or user. Shared group records are strictly confined to confirmed group members.
• Device Sandboxing: Local database tables reside strictly within your operating system's private application sandbox.

5. Account & Data Deletion Rights

You maintain full control and sovereignty over your personal data. We provide two separate methods to permanently delete your account and all associated data:

Upon verified account deletion, your profile credentials, mobile number, friendships, personal trips, notes, tasks, and cloud attachment files are permanently purged.

6. Children's Privacy

GatherBiz is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately so we can promptly delete the account.

7. Governing Law & Regulatory Compliance

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Singapore, including the Singapore Personal Data Protection Act 2012 (PDPA), without regard to conflict of law principles.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Office:

• Entity: GATHERBIZ (PTE. LTD.)
• Registered Address: 60 Paya Lebar Road, #11-22 Paya Lebar Square, Singapore 409051, Singapore
• Phone: +65-65183620
• Email: [email protected]
• Jurisdiction: Republic of Singapore