CBODY GO — Privacy Policy

Effective Date: October 2025

1. Scope of Application

This Privacy Policy applies to the CBODY GO mobile application (the “App”) used by registered service providers (“Therapists” or “Providers”). It explains how we collect, use, store, and protect personal information when you use our services.

2. Information We Collect and How We Use It

We only collect information necessary for operation and safety of our platform:

• Account Data: name, phone number, email, profile photo, and service details provided by you for registration and identity verification.
• Location Information: your real-time and background location (when authorized) to match customer requests, calculate travel distance, and ensure service safety.
• Device Identifiers: device ID and Expo Push Token to enable notifications and prevent fraud.
• Order & Chat Records: order history and message logs to support service coordination and dispute resolution.
• Audio Permission: used only when you record voice notes or play notification sounds — we never listen or store audio without action by you.
• App Usage Data: anonymous analytics (events, crash logs, performance) for improving stability and user experience.

3. Legal Basis for Processing

Your data is processed only for legitimate and necessary purposes of platform operation as permitted under relevant data-protection laws (PDPA Thailand, PIPL China, GDPR EU if applicable).

4. Situations Where Consent Is Not Required

• To perform legal obligations (e.g., identity verification or tax compliance).
• To protect public interest or personal safety in emergencies.
• To detect and prevent fraud or technical malfunctions.
• Where data is publicly available by your own disclosure.

5. User Authorization

You may choose to grant or deny permissions when prompted by the system. However, certain functions (such as location or notifications) will not work properly without authorization. You can change permissions any time in your device settings.

6. Use of Cookies and Local Storage

The App does not use third-party advertising cookies. We may store local tokens or preferences on your device to keep you signed in and improve performance. These files are encrypted and remain within your device.

7. Information Security

All data is transmitted via HTTPS and stored in Supabase (PostgreSQL) cloud servers with row-level security (RLS). Access is restricted to authorized processes only. We implement industry-standard encryption and regular security audits.

8. Your Rights

• Right to access and request a copy of your personal data.
• Right to rectify inaccurate information.
• Right to delete your account and associated data (except as required by law).
• Right to withdraw consent or disable permissions.

You can exercise these rights by contacting us via the email listed below.

9. Third-Party SDK and Services

The App uses the following third-party SDKs solely to provide core functions:

• Expo Location: to access device GPS for service dispatch and navigation.
• Expo Notifications: to receive order and chat alerts through push notifications.
• Expo Audio / Video: to enable media playback or upload when authorized.
• Supabase SDK: for authentication, database storage, and real-time synchronization.

No advertising or tracking SDKs are included. All third-party SDKs comply with App Store and Google Play privacy requirements.

10. Data Retention and Deletion

We retain data only as long as necessary for service operation or legal obligations. When you close your account, most personal data is deleted within 30 days, while financial or transaction records may be kept for statutory purposes.

11. Cross-Border Data Transfer

Your data may be stored on servers located in Singapore or the United States operated by Supabase Inc. We ensure such transfers follow standard contractual clauses and data-protection requirements.

12. Children’s Privacy

The App is intended for adults only (18 years and above). We do not knowingly collect information from minors.

13. Policy Updates

We may revise this Privacy Policy from time to time to comply with new laws or features. Significant changes will be notified in-app. Continued use after updates means you accept the revised policy.

14. How to Contact Us

If you have any questions or requests regarding privacy or data protection, please contact us at:

Email: cbodyspa@gmail.com
Address: Bangkok, Thailand