GalaTayo Privacy Policy

GalaTayo may collect account information, profile information, onboarding and policy acceptance records, app activity, user-submitted places, uploaded photos, GalaTayo AI and Live Search activity, technical and security information, and location-related information depending on the features you use.

• Account data may include user ID, email, login provider, account creation date, session-related information, account status, and onboarding status.
• Profile data may include first name, middle name, last name, display name, username, avatar URL, bio, visibility settings, follower/following settings, and timestamps.
• Policy acceptance data may include accepted Terms and Privacy versions, acceptance timestamps, user ID, and related audit records if stored.

GalaTayo uses personal data to manage accounts, complete onboarding, record agreement to policies, manage profiles, save favorites and history, create gala plans, support community features, moderate reports and content, provide search and recommendations, operate AI features if enabled, prevent abuse, debug errors, improve reliability, respond to requests, and send necessary account or service-related messages.

GalaTayo may process personal data based on consent, service necessity, legitimate interests such as security and moderation, and legal obligations such as responding to valid privacy or rights-related requests.

Publicly visible information may include display name, username, avatar, public profile details, public gala plans, submitted public places, approved uploaded photos, comments, replies, reviews, ratings, hearts or likes, and follower/following information depending on settings.

Private account information such as email address, authentication details, first name, middle name, last name, private gala plans, private settings, security logs, internal moderation notes, and backend records are not intended to be publicly visible by default.

GalaTayo may display third-party place images and place information for system display purposes and does not claim ownership unless expressly stated. Rights owners may contact officialgalatayo@gmail.com for review.

Uploaded photos may be stored, processed, resized, compressed, displayed, reviewed, moderated, or removed as needed to operate the system. Users should only upload photos they own, have permission to use, or are allowed to submit.

GalaTayo may use providers such as Supabase, Google Sign-In, Azure, Upstash Redis, Cloudflare R2 or another storage provider, map and direction providers, and AI or search providers. These providers may process data as needed to provide their services. GalaTayo does not sell personal data.

If GalaTayo AI or Live Search is used, prompts and related context may be processed to generate responses. Users should avoid submitting sensitive personal information, passwords, private documents, financial details, medical information, or information about other people into AI prompts.

GalaTayo may send necessary account or service-related emails, such as authentication messages, password reset or recovery messages, security notices, important account updates, policy notices, account deletion, or data request communications. GalaTayo does not send promotional marketing emails unless a separate optional consent is introduced in the future.

GalaTayo keeps personal data only as long as needed for the purposes described in this Privacy Policy, unless a longer period is required for legal, security, backup, moderation, or legitimate operational reasons.

GalaTayo uses reasonable technical and organizational measures such as authentication controls, database access controls, Supabase Row Level Security where applicable, secure secrets management, HTTPS where applicable, rate limiting, backend validation, limited production data access, logs and monitoring, and moderation controls. No system is completely secure.

Subject to applicable law, users may request access, correction, deletion, blocking, removal, objection, withdrawal of consent, portability, or other privacy assistance by contacting officialgalatayo@gmail.com. GalaTayo may need to verify the requester’s identity.

Users may request account deletion or personal data assistance by contacting officialgalatayo@gmail.com or using account deletion tools if available. Some information may be retained when needed for legal, security, anti-abuse, moderation, backup, copyright, rights-review, or legitimate operational reasons.

Users, rights owners, place owners, or concerned individuals may contact officialgalatayo@gmail.com to request review of content, place submissions, or images. GalaTayo may remove, hide, update, or restrict content when appropriate.

GalaTayo is not intended for users under 13 years of age. We do not knowingly collect, store, or process personal data from children under 13.

If we learn that a user under 13 has provided personal data, we will take steps to delete that information and restrict or remove the associated account.

If you are a parent, guardian, or responsible adult and believe a child under 13 has provided personal data to GalaTayo, please contact us at the address below.

GalaTayo may use cookies, local storage, or similar technologies for login sessions, authentication, security, remembering preferences, app functionality, debugging, and system performance.

Some third-party services used by GalaTayo may store or process data outside the Philippines. GalaTayo will rely on appropriate service providers and reasonable safeguards for system operation and data protection.

GalaTayo may update this Privacy Policy from time to time. If major changes are made, users may be notified through the system, email, or another reasonable method. If a change significantly affects personal data use, GalaTayo may request renewed consent where appropriate.

For privacy concerns, data requests, rights requests, content concerns, place concerns, or image concerns, contact GalaTayo Support / Privacy Contact at officialgalatayo@gmail.com.