Terms & Privacy

1. Introduction

Welcome to PlugIt, a mobile application developed and operated by Lexa Labs (Pvt) Ltd ("Company," "we," "us," or "our"). PlugIt helps electric vehicle (EV) owners discover and navigate to EV charging stations across Sri Lanka, and enables station owners to register and manage their charging facilities through the same platform.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application (the "App") available on iOS and Android platforms. Please read this policy carefully. By creating an account or using the App, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

2. Information We Collect

We collect the following categories of personal information from users of PlugIt:

2.1 Information You Provide Directly

When you register for an account or use our services, you may provide:

• First name and last name
• Email address
• Phone number
• Zip / postal code

2.2 Information Collected Through Google Sign-In

We offer Google Sign-In as an authentication method. When you choose to sign in with your Google account, Google may share with us certain profile information, including your name and email address, in accordance with your Google account privacy settings. We do not receive your Google account password. Your use of Google Sign-In is also governed by Google's Privacy Policy, available at https://policies.google.com/privacy.

2.3 Location Information

We collect GPS location data from your device through the Google Maps SDK to provide our core service: displaying nearby EV charging stations and those available across Sri Lanka. Location data is used solely for this navigation and discovery purpose and is not stored on our servers beyond the duration of your active session. You can control location permissions through your device settings at any time.

2.4 Station Owner Content

If you register as an EV charging station owner, in addition to the information listed above, you will be required to upload:

• A minimum of three (3) photographs of your charging station

These photos are used solely to verify and display your station listing within the App. We do not collect bank account information, payment details, or financial data of any kind at this time.

2.5 Information Collected Automatically

When you use the App, we may automatically collect certain technical and usage information, including:

• Device type, operating system, and version
• App version and crash or error logs
• General usage patterns (e.g., features accessed, session duration)

This data is used to maintain and improve the App and is not linked to your personal identity.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 To Provide and Operate the App

• Creating and managing your user account
• Authenticating your identity through Google Sign-In
• Displaying EV charging stations near your current GPS location
• Enabling station owners to register, verify, and manage their station listings

3.2 To Communicate With You

• Responding to your inquiries, support requests, or feedback
• Sending service-related notifications (e.g., account updates, policy changes)

3.3 To Improve Our Services

• Analyzing usage trends and app performance
• Diagnosing and fixing technical issues
• Developing new features and enhancements

3.4 To Ensure Safety and Legal Compliance

• Preventing fraudulent, unauthorized, or illegal activity
• Enforcing our Terms of Service
• Complying with applicable laws and regulations in Sri Lanka

4. How We Share Your Information

We respect your privacy and do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Third-Party Service Providers

We use the following third-party services which may process your data on our behalf, strictly for the purposes described:

• Google Maps SDK: To display maps and EV station locations. Subject to Google's Privacy Policy.
• Google Sign-In (OAuth 2.0): To authenticate your identity. Subject to Google's Privacy Policy.

These service providers are contractually obligated to use your data only as directed by us and in accordance with applicable privacy laws.

4.2 No Sharing With Station Owners

User personal information is not shared with EV charging station owners. Station owners can view aggregated usage statistics for their station listings but cannot access the personal details of individual users.

4.3 Legal Requirements

We may disclose your personal information if required to do so by law or in response to a valid request from a public authority (e.g., a court order or government agency), or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices available to you.

5. Data Retention

We retain your personal information for as long as your account is active and you continue to use the App. We will retain and use your data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account and associated data, we will permanently delete your personal information from our systems within a reasonable timeframe, subject to any legal retention obligations. To request data deletion, please contact us using the information provided in Section 13.

Certain anonymized or aggregated data that cannot be used to identify you may be retained indefinitely for analytical and service improvement purposes.

6. Location Data and Google Maps

PlugIt requests access to your device's GPS location data exclusively to identify nearby EV charging stations and to display charging infrastructure across Sri Lanka. Location data is processed in real-time to deliver this functionality and is not stored on our servers or shared with third parties beyond what is necessary to render the map view.

You may deny or revoke location permissions at any time through your device's operating system settings:

• iOS: Settings > Privacy > Location Services > PlugIt
• Android: Settings > Apps > PlugIt > Permissions > Location

Please note that denying location access will limit the core functionality of the App, as station discovery relies on your current location.

Our use of the Google Maps SDK is governed by the Google Maps Platform Terms of Service and Google's Privacy Policy.

7. Children's Privacy

PlugIt is not intended for individuals under the age of 15. We do not knowingly collect personal information from children under 15 years of age. If we become aware that we have inadvertently collected personal information from a user under the age of 15, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe your child under 15 has provided us with personal information, please contact us immediately at lexalabs@outlook.com.

8. Data Security

We implement industry-standard technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission using HTTPS/TLS protocols
• Secure authentication via OAuth 2.0 through Google Sign-In
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews of our App and infrastructure

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Your Rights and Choices

You have the following rights with respect to your personal information:

9.1 Access and Correction

You may access, review, and update your personal information directly within the App through your account settings. If you are unable to correct an inaccuracy, please contact us.

9.2 Account and Data Deletion

You may request the deletion of your account and associated personal data at any time by contacting us at lexalabs@outlook.com. We will process your request and delete your data in accordance with applicable law.

9.3 Location Permissions

You can enable or disable location access for PlugIt at any time through your device's system settings:

• iOS: Settings > Privacy > Location Services > PlugIt
• Android: Settings > Apps > PlugIt > Permissions

9.4 Google Sign-In

If you signed in using Google, you can revoke PlugIt's access to your Google account at any time through your Google Account settings at https://myaccount.google.com/permissions. Revoking access will sign you out of the App and may affect your ability to use certain features.

9.5 Opt-Out of Communications

You may opt out of receiving non-essential communications from us by following the unsubscribe instructions included in any email we send, or by contacting us directly.

10. Third-Party Links and Services

The App integrates with third-party services, including Google Maps and Google Sign-In. These services are governed by their own privacy policies, which we encourage you to review:

• Google Privacy Policy: https://policies.google.com/privacy
• Google Maps Platform Terms of Service: https://cloud.google.com/maps-platform/terms

We are not responsible for the privacy practices of third-party services and this Privacy Policy does not apply to those services.

11. Geographic Scope

PlugIt is currently available exclusively in Sri Lanka. Your personal information is processed and stored in accordance with the laws and regulations applicable in Sri Lanka, including but not limited to the Personal Data Protection Act No. 9 of 2022 (PDPA) of Sri Lanka.

If you access the App from outside Sri Lanka, please be aware that your data may be transferred to and processed in Sri Lanka, where data protection laws may differ from those in your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the App or via email prior to the change becoming effective
• Obtain your consent where required by applicable law

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to periodically review this page for the latest information on our privacy practices.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Lexa Labs (Pvt) Ltd
• Email: lexalabs@outlook.com
• App: PlugIt (iOS & Android)

We will respond to all legitimate requests within a reasonable timeframe. Please include your full name and the email address associated with your account to help us process your request efficiently.

This Privacy Policy was prepared for PlugIt by Lexa Labs (Pvt) Ltd. It is intended to comply with the requirements of the Google Play Developer Program Policy and Apple App Store Review Guidelines.