Privacy Policy

Last updated: June 11, 2026

Galaxy Go ("we", "us") operates a delivery platform connecting customers, local businesses and delivery partners in Honduras. This policy explains what personal data we collect, why, and the choices you have. It applies to our mobile apps, websites and guest checkout.

1. Data we collect

• Account data — name, email, phone number, and password (stored as a secure hash).
• Order data — items purchased, delivery addresses, order history, tips, reviews and refund requests.
• Location data — delivery addresses you save; for Drivers, live location while online to enable order assignment and tracking.
• Payment data — wallet balance and transaction history. Card processing, when available, is handled by our payment providers; we do not store full card numbers.
• Guest data — for guest orders and gifts: your email (verified by one-time code), recipient name, phone and address you provide.
• Verification documents — for Sellers and Drivers: business and identity documents required to operate on the platform.
• Device and usage data — app version, device type, basic diagnostics, and a device identifier (such as Apple's identifier-for-vendor or the Android ID) used solely to prevent fraud and abuse, such as detecting multiple fake accounts created on one device. We do not use it for advertising or cross-app tracking.

2. How we use it

• To operate the platform: process orders, assign deliveries, enable live tracking and process payments and refunds.
• To keep the platform safe: verify Sellers and Drivers, prevent fraud and abuse, and moderate reviews.
• To communicate: transactional emails (order confirmations, one-time codes, refund updates) and, only with your consent, marketing messages you can opt out of anytime.
• To comply with legal obligations, including tax requirements.

3. Who we share it with

• Sellers see your name, order items and delivery details needed to fulfill your order.
• Drivers see your name, pickup and delivery addresses and contact info needed to deliver.
• Service providers — cloud hosting (Supabase), email delivery (Resend), maps and payment processors — only the data each needs to provide its service.
• Authorities when required by law.
• We do not sell your personal data.

4. Data retention

We keep account and order data while your account is active and as needed for legal, tax and dispute purposes. Guest session data expires automatically. You may request deletion of your account at any time (section 6).

5. Security

Data is encrypted in transit, access is restricted by role-based controls and row-level security, and administrative actions are logged. No system is 100% secure, but we work to protect your information at every layer.

6. Your rights

• Access, correct or delete your personal data.
• Withdraw marketing consent at any time.
• Request a copy of the data we hold about you.

To exercise any of these rights, email support@galaxygo.app. We respond within 30 days.

7. Children

Galaxy Go is not directed at children under 18, and we do not knowingly collect their data.

8. Changes

We may update this policy from time to time. Material changes will be announced in the app or by email, and the "Last updated" date above will always reflect the current version.

9. Contact

support@galaxygo.app · ayuda@galaxygo.app · galaxygo.app