Privacy Policy

What we collect

When you use galpal, we collect:

• Google account: for account creation and login via Google OAuth
• Profile information: name, date of birth, neighborhood, bio, interests, and profile prompts you provide
• Photos: profile photos and selfie for verification, stored in Supabase Storage
• Chat messages: text messages in 1:1 conversations
• Activity data: event RSVPs, waves, connections, game scores, and stories you post
• Analytics: anonymized usage data via PostHog (page views, feature usage, session replays with input masking)
• Error logs: crash reports via Sentry to fix bugs

How we use it

• To create and manage your account
• To show you events, circles, and other users in Bangalore
• To enable chat, waves, and connections with other women
• To personalize your experience based on city tenure and interests
• To send push notifications you've opted into (waves, matches, event reminders)
• To enforce our women-only policy through a short manual verification call with our team
• To improve the product through anonymized analytics

Who we share it with

We do not sell your data. We share data only with services required to run galpal:

• Supabase: database, authentication, file storage, and real-time messaging
• Vercel: app hosting and serverless functions
• Google: OAuth sign-in
• PostHog: product analytics (anonymized)
• Sentry: error monitoring

Your profile information (name, photo, neighborhood, interests) is visible to other galpal users. Chat messages are only visible to participants in that conversation.

Data storage

Your data is stored in Supabase (PostgreSQL) with Row Level Security enabled on every table. Photos are stored in Supabase Storage with authenticated access. All data is encrypted in transit (HTTPS) and at rest.

Your rights

• Delete your account: available in Settings. This permanently deletes all your data including profile, photos, messages, and connections (cascading delete)
• Block users: blocked users cannot see your profile or message you
• Report users: for harassment, fake profiles, spam, or MLM activity
• Opt out of analytics: contact us to disable PostHog tracking for your account

Cookies & local storage

We use browser cookies for authentication (Supabase session tokens). We use local storage for game progress and app preferences. We do not use third-party advertising cookies.

Women-only policy

galpal is designed exclusively for women. Every new member is manually verified by our team over a short call before they can see anyone else on the platform. By using galpal, you confirm that you identify as a woman. Accounts found to violate this policy will be removed.

Contact

For privacy questions or data requests, email us at care@galpal.in