Social²

Privacy Policy

Last updated: 10 March 2026

Operated by: Dabalaya Ltd, United Kingdom

Dabalaya Ltd ("we", "us", "our") operates the Social² mobile application (the "App"). This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the App, and describes your rights under applicable data protection law.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this Privacy Policy carefully. By using the App, you confirm that you have read and understood this policy.

1. Data Controller

The data controller responsible for your personal data is:

Dabalaya Ltd
United Kingdom
Email: team@social2.app
Website: www.social2.app

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. What Personal Data We Collect

We collect the following categories of personal data when you use the App:

2.1 Account Information

• Name or username
• Email address
• Password (stored in encrypted form)
• Profile photo (if provided)

2.2 Usage Data

• Placelists you create, including names, place descriptions, personal notes, and place ratings
• Places you save, including place names, addresses, categories, and their public or private visibility status
• Photos you choose to share from your device gallery to identify or illustrate a place
• Sources from which places are saved (e.g. Instagram, TikTok, Pinterest, device photo gallery)
• In-app interactions such as searches, saves, and favourites
• App feature usage and engagement patterns

2.3 Location Data

• Approximate or precise location, if you grant the App permission to access your device's location services
• Location data is used solely to enable location-based features such as nearby place discovery and map display
• You can withdraw location permission at any time through your device settings

2.4 Device and Technical Data

• Device type, model, and operating system
• Unique device identifiers
• IP address
• App version and crash reports
• Time zone and language settings

2.5 Payment Data

• We do not directly collect or store payment card details
• Subscription payments are processed by Apple App Store or Google Play; their respective privacy policies govern payment data
• We receive confirmation of subscription status from these platforms but not your full payment details

2.6 Third-Party Platform Data

• When you connect third-party platforms (such as Instagram, TikTok, or Pinterest), we may access metadata associated with content you choose to save, such as image URLs, post captions, and location tags
• When you share photos from your device gallery, we access only the specific images you select. We do not access your full photo library without your explicit permission
• Places you mark as public may be visible to other Social² users on the Map view and in search results. Places marked as private are visible only to you. You can change the visibility of any saved place at any time within the App
• We do not access, connect to, or log into your Instagram, TikTok, or Pinterest accounts. The App uses only the publicly available share functionality provided by those platforms to receive the URL or link of content you choose to share

3. How We Use Your Personal Data

We use your personal data for the following purposes, relying on the legal bases indicated:

3.1 To Provide and Operate the App (Contract)

• Creating and managing your account
• Enabling you to save, organise, and curate places into Placelists, including manual editing, ratings, and descriptions
• Displaying public places on the Map view so other users can discover them, in accordance with your privacy settings
• Enabling place and Placelist sharing between users
• Processing subscription payments and managing free trial periods
• Providing customer support

3.2 To Improve and Develop the App (Legitimate Interests)

• Analysing how users interact with the App to improve features and user experience
• Diagnosing technical issues and fixing bugs
• Conducting internal research and analytics

3.3 To Communicate With You (Legitimate Interests / Consent)

• Sending service-related notifications such as account confirmations and subscription updates
• Sending marketing communications where you have opted in (you may opt out at any time)
• Responding to your enquiries and support requests

3.4 To Comply With Legal Obligations (Legal Obligation)

• Complying with applicable laws and regulations
• Responding to lawful requests from public authorities
• Maintaining records for tax and accounting purposes

4. How We Share Your Personal Data

We do not sell your personal data to third parties. We may share your data in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating the App, including:

• Cloud hosting and infrastructure — Amazon Web Services (AWS), which stores and processes app data on servers in AWS-managed regions (aws.amazon.com/privacy)
• Analytics providers (to understand App usage)
• Customer support tools
• Crash reporting and performance monitoring services

These providers are bound by data processing agreements and may only use your data on our instructions.

4.2 App Store Platforms

Apple App Store and Google Play process subscription payments on our behalf. Their privacy policies govern how they handle your data.

4.3 Legal Requirements

We may disclose your data if required to do so by law, court order, or in response to a request from a competent public authority, or where we believe disclosure is necessary to protect our legal rights or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the relevant third party. We will notify you of any such change and the choices available to you.

4.5 With Your Consent

We may share your data with third parties where you have given your explicit consent to do so.

5. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), to protect your data in accordance with UK GDPR requirements.

If you would like more information about the safeguards we use for international transfers, please contact us.

6. Data Retention

We retain your personal data for as long as necessary to provide the App's services and fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Account data is retained for as long as your account remains active
• If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes
• Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytical purposes
• Backup copies of data may be retained for up to 90 days following deletion

7. Your Rights Under UK GDPR

As a UK data subject, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you
• Right to Rectification: You have the right to request that we correct inaccurate or incomplete data
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances ("right to be forgotten")
• Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transfer it to another controller
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes
• Rights in Relation to Automated Decision-Making: You have the right not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at team@social2.app. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data in accordance with applicable law.

8. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will take steps to delete such information.

Users between the ages of 13 and 18 should review this Privacy Policy with a parent or guardian before using the App.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit using industry-standard protocols (TLS/HTTPS)
• Encryption of passwords and sensitive data at rest
• Access controls limiting data access to authorised personnel only
• Regular security reviews and monitoring

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You are responsible for keeping your account credentials secure and confidential.

10. Cookies and Tracking Technologies

The App may use analytics tools and similar technologies to collect information about how you use the App. These may include:

• Analytics SDKs that track usage patterns and app performance
• Crash reporting tools that collect diagnostic information when the App encounters an error
• Attribution tools that help us understand how users discover the App

You can opt out of analytics tracking through your device's privacy settings or by contacting us. Opting out of analytics will not affect your ability to use the App's core features.

11. Marketing Communications

With your consent, we may send you marketing communications about Social², including new features, Placelist inspiration, promotional offers, and app updates. We will only contact you for marketing purposes where you have opted in to receive such communications.

Marketing communications may be sent via the following channels:

• Email — including to users who have joined our pre-launch waitlist and opted in to receive updates
• Push notifications — if you have granted permission for the App to send notifications to your device
• In-app messages and announcements

You may withdraw your consent to marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Disabling push notifications in your device settings
• Contacting us directly at team@social2.app

Please note that withdrawing consent to marketing does not affect your ability to use the App or receive essential service-related communications such as account confirmations and subscription updates.

12. Google APIs and Third-Party SDKs

The App uses Google APIs and other third-party software development kits (SDKs) to provide certain features. By using the App, you acknowledge that data may be shared with these providers as described below.

12.1 Google Maps Platform

The App uses the Google Maps Platform, including the Maps SDK and Places API, to power the Map view, display place locations, and enable address search and autocomplete. By using these features, you are also subject to Google’s Privacy Policy, available at policies.google.com/privacy.

Data shared with Google Maps Platform may include:

• Your device’s location (if location permission is granted) to display nearby places on the Map view
• Search queries you enter when looking up or verifying a place address
• IP address and device identifiers for API authentication and usage tracking by Google

12.2 Firebase, AWS, and Other Third-Party Services

The App integrates with the following third-party services, each governed by its own privacy policy:

• Firebase (Google) — used for user authentication, real-time database, cloud storage, and crash reporting. Data processed by Firebase is subject to Google’s privacy policy (firebase.google.com/support/privacy)
• Amazon Web Services (AWS) — used for cloud infrastructure, server-side data storage, and backend processing. Your data may be stored on AWS servers located within the European Economic Area or other AWS regions. AWS is subject to its privacy policy (aws.amazon.com/privacy) and is certified under relevant data protection frameworks
• Apple App Store and Google Play — for subscription and payment processing (policies.google.com/privacy and apple.com/legal/privacy)
• Instagram, TikTok, Pinterest — we do not connect to, access, or store credentials for your accounts on these platforms. When you share a post or link from these apps using their native share functionality, we receive only the URL of that content. No account login or OAuth connection is required or performed

If you have questions about which specific SDKs or APIs are active in the current version of the App, please contact us at team@social2.app.

13. Third-Party Links and Services

The App allows you to save place references from third-party platforms such as Instagram, TikTok, and Pinterest using their native share functionality. We do not integrate with, log into, or access your accounts on these platforms — we receive only the URL of the content you choose to share. This Privacy Policy does not apply to third-party platforms themselves. We encourage you to review the privacy policies of any platform you use in connection with the App.

We are not responsible for the privacy practices or content of third-party services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy within the App or by sending you a notification.

The date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Dabalaya Ltd
United Kingdom
Email: team@social2.app
Website: social2.app
Privacy enquiries: social2.app/privacy

We aim to respond to all privacy-related enquiries within 30 days.