Your data rights
What you can ask MageRide to do with the information it holds about you, under Sri Lanka’s Personal Data Protection Act.
Last updated not yet published
This document is being prepared
The formal data-protection notice is being written and reviewed. The two sections below describe what the platform already does, so that this page is useful before that notice is published rather than after.
A copy of your data, or its erasure
You can ask for a copy of everything MageRide holds about you, and you can ask for your account and personal data to be erased. Either request is due within 30 days of being made, and MageRide tracks that deadline rather than treating it as a target.
Erasure has one limit, and it is worth stating plainly: records the law requires MageRide to keep — the financial ones, mainly — are kept. Everything that is not required is removed.
Source specs/architecture-design-document.md#pdpa-svc
How to ask
From inside the app, under settings. It is there rather than here because a request has to be tied to an account, and the app already knows which account you are signed in to. A form on this page could not know that, and asking you to prove who you are by email would mean collecting more about you in order to give you less.
Source specs/user-requirements-document.md#us-1-8