Data Collection
& Tracking.

Galiaraa is a mobile application. This section explains what data the app collects and how to control it.

1. Device Identifiers

We assign an anonymous session identifier to your device to maintain your session and personalise your feed. We do not access or request your iOS advertising identifier (IDFA) or Android advertising ID.

2. Push Notifications

When you enable push notifications, your device registers with our push notification provider, which issues a push token and delivers notifications to your device on our behalf. That provider receives the token and basic device information. Galiaraa stores the token for as long as your account is active and removes it on account deletion. We do not send notification content to the provider beyond what is required to deliver it.

3. OTP Authentication

When you sign in, your mobile number is shared with our OTP delivery provider, solely to send the authentication code.

4. Ad Interactions

When you tap a WhatsApp CTA on a Business ad, an anonymised interaction is recorded on Galiaraa — your identity is not shared with the business at that point. You are then redirected to WhatsApp, where that conversation is governed by WhatsApp's and Meta's privacy policies.

5. Analytics

We collect in-app usage events to understand how the platform is used and to improve it. Usage analytics events are retained for 12 months. Ad impression data is retained for 24 months.

6. Location

We do not collect precise GPS. We infer state and city level from destination searches and content engagement to personalise your feed and target Business ad campaigns.

7. Third-Party Services

We use third-party service providers to operate Galiaraa. They process your data only on our instructions, only to provide their service to us, and only for the purposes described in this policy. They are contractually bound to protect it and may not use it for their own purposes.

Categories of processing:

• Cloud hosting and storage — running the platform and storing your account, your content and our server logs.
• Payment processing — taking payments and making payouts, including the payment details you enter.
• Message delivery — sending one-time passcodes, emails and push notifications to your device.
• Diagnostics and reliability — recording errors and crashes so we can find and fix them.
• Messaging redirects — where you choose to continue a conversation on another platform.

These categories describe how your data is handled regardless of which provider we use. We may change providers within a category without changing this policy. If we ever process your data for a purpose not described here, we will update this policy first.

For the current list of the service providers we use, write to legal@galiaraa.com and we will tell you.

8. Your Controls

• Push notifications: Galiaraa app Settings → Notifications
• Account deletion: Removes all identifiable data within 30 days