On this page
The short version
- We collect what you tell us, like your account, profile, plans, and messages, and some information about how you use SoloSquare.
- Other members see your profile and what you post in plans and chats. Your email, birthday, gender, and LGBTQ+ answer aren’t shown to other members.
- We don’t sell your data, and we don’t send your email, name, messages, gender, or community answers to analytics or advertising partners.
- Analytics and ad measurement cookies are on unless you turn them off in Cookie settings.
- You can see, correct, and delete your data. Deleting your account in Settings erases it straight away.
Questions? Write to [email protected].
1Who we are
SoloSquare App, based in Estonia, runs SoloSquare and is responsible for your personal data (the “controller”). This policy covers the SoloSquare website at solosquare.app and our mobile apps.
For anything about your data, email [email protected].
2What we collect
What you give us
- Account: your email address and first name. Supabase handles your sign-in credentials. For mobile email authentication, our server securely forwards your password to Supabase without storing it or writing it to logs.
- Profile: your photos, bio, home base, traveler type, travel styles, languages, interests, the places you’ve visited, and social links. If you choose to add them: your birthday, home country, career or life chapter, and self-described social energy.
- Gender and community: your gender (Prefer not to say is an option) and, only if you choose to tell us, whether you’re part of the LGBTQ+ community. We also save your separate choice about using that community in people suggestions.
- Selfie review, if you ask for one: the selfie you send so our team can compare it with your profile photos.
- Plans: plans you host (title, description, time, meeting point and its place on the map, group size, and who can join), plans you join, save, or ask to join, and the message you send a host with a request.
- Messages: what you post in plan chats and city chats, including photos you share in plan chats. We convert chat photos to WebP and remove their original metadata before storing them privately. We save which conversations you mute.
- Recaps: your answers to the three recap questions, your optional note to our team, and, if you host, who came.
- Square waiting lists: the cities you choose for future organized gatherings, when you join, and whether you joined through onboarding, the map or the list. Our team can see this interest and your account contact details to plan launches and future invitations. This does not publicly check you in.
- City check-ins: the city you check in to, your chosen stay type, and the duration or leaving date if you set one. Your stay type and leaving date stay private; your chosen city can be shared with members. When setup asks for your current city, Continue saves that city and when you accepted its visibility explanation. Your profile appears in that city for 30 days only after you finish setup. We store the city center, not your device’s exact location. Square waiting-list interest remains a separate choice.
- Safety and support: people you block, reports you make, and what you tell us when you contact us.
What we collect as you use SoloSquare
- Device and usage: your IP address, browser and device type, the pages you visit, actions such as joining or creating a plan, and when they happen.
- Location: when you choose Near me or share location during setup, your device’s location is used to find nearby plans or suggest a city. Near me sends coordinates to our servers to find plans, and those requests can appear in server logs. In mobile versions supporting automatic city updates, location permission and automatic updates let us use a recent location while you use the app to show you among travelers in your city. Your device may use its platform’s geocoding service to identify the locality. We store the city center, your update setting and latest location-update time, not the precise device coordinates or a location history. Only the city is shared with members. Choose a city manually, turn off automatic updates, or hide yourself in Your city. We do not continuously track your location in the background.
- Bot checks: sign-in flows that use Cloudflare Turnstile send browser signals to check that you’re a person. Native Apple/Google sign-in and the new mobile email and phone flows work without Turnstile; we limit authentication requests to reduce abuse.
- Records we create: your show-up record (meetups, show-ups, and no-shows, from hosts’ confirmations), in-app alerts and your alert settings, sign-in sessions, and moderation decisions about your account.
3How we use it, and why
The law (GDPR) requires a legal basis for each use of your data. Here are ours.
- Run SoloSquare Create your account, show your profile, let you host, join, chat, and recap plans, show your meetup record, suggest people you may have things in common with, and send in-app alerts and account emails, like confirming your email or resetting your password.
- Open the right plans and rooms Girls only, Boys only, and LGBTQ+ plans and city rooms use your gender and your LGBTQ+ answer. You can withdraw your LGBTQ+ answer at any time by emailing us, and we’ll remove it.
- Keep people safe Review reports, enforce our rules, stop spam, bots, and abuse, secure accounts, and keep records of moderation decisions.
- Review your selfie When you ask for a selfie review.
- Improve SoloSquare and measure our ads Understand how SoloSquare is used and which ads bring new members (see Cookies). You can object at any time by turning off optional cookies.
- Help you Answer your messages and requests.
- Meet legal requirements Comply with the law and establish, exercise, or defend legal claims.
People suggestions use details you choose to put on your profile. LGBTQ+ community contributes only when both members separately opt in and have declared that community. You can turn this optional use off in Edit profile at any time. Your community answer and consent choice stay private; a “Similar to you” indicator does not reveal why it appears. We do not send these choices or indicators to analytics or advertising platforms.
We don’t make decisions about you based only on automated processing that have legal or similarly significant effects. Your show-up rate is a simple count of hosts’ confirmations, and hosts can see it when they decide on a request to join. If you think a host marked you wrongly, tell us and we’ll look into it.
4What others can see
- Visitors who aren’t signed in can browse plans and the map, but not who is hosting or going, profiles, or chats.
- Signed-in members can see your profile: your name, photos, age (not your birthday), home country, home base, bio, career or life chapter, social energy, traveler type, travel styles, languages, interests, the places you’ve visited, when you joined, your founding member number, whether your selfie was reviewed, and your meetups and show-up rate. They can also see the plans you host and the plans you’re going to. A “Similar to you” indicator may appear around your profile for another member. Your social links are visible only to the members you choose.
- People in a plan see its group chat, including shared photos. Leaving removes access. Conversations become read-only 24 hours after the plan ends, or immediately if it is cancelled; members can still read their history in Inbox. Our moderators can review reported photos while the message exists. The host sees the message you send with a request to join.
- Members checked in to a city see its city chat. Girls only, Boys only, and LGBTQ+ rooms are visible only to members who can join them. While your check-in is on, members browsing that city can see you among the travelers there, and people in your plans may see a “From afar” note if your city is far from the plan.
- Not shown to other members: your email, birthday, gender, LGBTQ+ answer and matching consent, muted conversations, device location, recap answers and notes, and the reports you make.
Anything you post can be seen, copied, or shared by the people who can see it, and we can’t control what they do with it.
Joining a Girls only, Boys only, or LGBTQ+ plan or room can show the people in it that you’re eligible to join.
Our team: a small number of authorized people at SoloSquare can access account and moderation information when it’s needed to run SoloSquare, help you, and keep members safe. Their actions in our admin tools are logged.
6Transfers outside Europe
SoloSquare App is based in Estonia, in the European Union, but our servers and database are in Singapore, and some providers are in the United States or work worldwide. When your data leaves the European Economic Area, we protect it as EU law requires: with an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, for certified companies) or the European Commission’s standard contractual clauses. You can ask us for a copy of these safeguards.
7How long we keep it
- Your account and profile: while your account exists.
- When you delete your account: we delete your sign-in, profile, photos, messages, join requests, saved plans, recaps, attendance marks, alerts, city check-in, automatic city-update settings, and blocks. You leave the plans you joined, and plans you’re hosting that haven’t ended are cancelled. Past plans you hosted stay for the people who went, shown as hosted by “Deleted member”, without your name or photos.
- Selfie review: the selfie is deleted as soon as it’s reviewed. We keep only the result.
- Sign-in sessions: up to 30 days, or until you log out.
- City check-in: shown until its duration or chosen leaving date ends. If you choose “I live here” or “Not sure yet,” it stays visible until you change city or hide your check-in. Your latest check-in stays on your account until you check in again, hide it, or delete your account. We retain your setup city choice and its acceptance and activation times until account deletion, so resuming setup cannot recreate a check-in you hid or let expire. Automatic GPS check-ins have no automatic expiry: your last shared city stays visible until you check in manually, hide it, turn off automatic sharing, or delete your account. A new permitted location can update that city while automatic sharing is on. Hiding or selecting a manual stay stops automatic updates; we retain that setting so a later device update cannot undo your choice. If your device is offline, a request to hide your city takes effect when it reaches our servers.
- Reports and moderation records: as long as they’re needed to keep members safe, handle appeals, and meet legal obligations, including after an account is deleted.
- Server logs: records of requests to our servers, such as IP address, device type, the address requested, and time. We keep them to protect SoloSquare, investigate attacks and abuse, and fix problems, for as long as they’re needed for these purposes. Only authorized people can see them.
- Backups: deleted data can stay in our database provider’s encrypted backups for a short time, until they’re replaced.
- Analytics: Google Analytics keeps event data for no longer than 14 months.
- Emails to us: as long as needed to help you and handle any follow-up.
9Your rights and choices
You have the right to:
- Access your data and get a copy of it.
- Correct it. You can edit most of your profile yourself. Ask us to fix anything else, including an attendance mark you think is wrong.
- Delete it. Delete your account in Settings → Privacy & safety, or ask us.
- Take it with you in a machine-readable format.
- Object to uses based on our legitimate interests. For analytics and ads, turn off optional cookies in Cookie settings.
- Restrict how we use your data while a concern is checked.
- Withdraw your consent at any time, for example to your LGBTQ+ answer. This doesn’t affect what we did before.
To use these rights, email [email protected] from the email address on your account. We may ask you to confirm your identity.
You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, [email protected], aki.ee, or to the data protection authority where you live or work. We’d appreciate the chance to help first.
10Keeping your data safe
- Every connection to SoloSquare is encrypted.
- Supabase handles your sign-in credentials. We don’t store passwords or write them to logs. We keep sign-in sessions only in a scrambled (hashed) form.
- Selfies for review are kept in private storage, opened only by reviewers through short-lived links, and deleted after review.
- Our systems get only the access they need, our admin tools have a separate login, and moderation actions are logged.
No system is perfectly secure. If a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
11People under 18
SoloSquare is only for people 18 and over, and we don’t knowingly collect data from anyone younger. If you think someone under 18 is using SoloSquare, report their profile or email us, and we’ll look into it.
12Changes to this policy
We’ll post any update here with a new date.
Questions about your data?
SoloSquare App · Estonia · [email protected]