Sosiale Moments Privacy Policy

Privacy Policy

Effective date: 26 July 2026

Controller

Sosiale Moments is operated by Sosiale AI OÜ, registry code 17034664, Järvevana tee 9, Kesklinna linnaosa, Tallinn 11314, Estonia (“Sosiale”, “we”, or “us”). Contact: info@sosiale.ai.

Data we process and why

Data

Purpose and legal basis

Email, account ID, authentication records

Sign-in, account security, and service delivery under our contract.

Display name, age range, city, languages, interests, role, photo

Build your profile and nearby experience under our contract.

Onboarding answers and selected city

Personalize onboarding and improve the service under our contract and legitimate interest. These controlled-choice answers are not a health assessment.

Moments, photos, chat, ratings, reviews, blocks, and reports

Provide the social service, prevent abuse, resolve disputes, and protect users under our contract, legitimate safety interests, and legal obligations.

Push token and notification delivery records

Send notifications you enable. You can withdraw permission in device settings.

App events, diagnostics, moderation and access audit logs

Reliability, fraud prevention, accountability, and service improvement under our legitimate interests.

Subscription product, entitlement, renewal, billing, and expiry state

Provide and reconcile membership under our contract and legal duties.

We do not sell personal data, use it for third-party advertising, or track you across other companies’ apps and websites. Please do not place special-category or highly sensitive information in free-text fields unless it is necessary for a safety report.

Service providers and disclosures

Supabase: authentication, database, storage, and server functions.
Expo: app delivery and push notification infrastructure.
Apple App Store, Google Play, and RevenueCat: payment processing and subscription entitlement management. Sosiale does not receive your payment-card number.
Mapbox and Open-Meteo: city suggestions. The text you type is sent to Mapbox and may be sent to Open-Meteo when fallback search is needed.
Google Cloud Vision: optional uploaded profile and moment photos are sent for sexual-content safety screening before publication. The app tells you before opening the photo picker. You can choose not to upload a photo.
Vercel: hosting for these public information pages.
Authorities or professional advisers when required by law or reasonably necessary to protect people, investigate abuse, or establish or defend legal claims.

Providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision or appropriate contractual safeguards. Contact us to request information about safeguards relevant to your data.

Photo moderation and human review

New photos remain private while automated screening checks for sexual or explicit content. Clearly prohibited images may be removed automatically; uncertain results remain private for human review. You can appeal an eligible moderation decision in the in-app Safety Center. We do not continuously read private chats. Reported-message review is limited to the reported message and necessary surrounding context; exceptional access requires a documented safety or legal reason, administrator multi-factor authentication, and an audit record.

Retention

Account, profile, onboarding, and active service data: while your account is active.
Push tokens: until logout, account deletion, permission withdrawal, or invalidation.
Shared chat after account deletion: pseudonymized and read-only for up to 24 months so the other participant can preserve context and report safety concerns.
Resolved reports, evidence snapshots, notices, appeals, moderation actions, and authorized-access logs: normally up to 24 months.
Data subject to an active investigation, legal claim, preservation request, or child safety duty: for the required or reasonably necessary period. Legally reported child sexual exploitation material is securely preserved for the period required by law.
Subscription and transaction records: while needed to provide access and meet tax, accounting, dispute, and legal obligations.

Delete your account from Profile > Delete account. Account deletion does not cancel Apple App Store or Google Play billing; manage the subscription with the applicable store first if you do not want renewal. If you cannot access the app, use the web deletion instructions.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. We may need to verify your identity. Contact info@sosiale.ai. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or your local supervisory authority.

Children and safety

Sosiale Moments is for adults aged 18 or older. We do not knowingly provide the service to children. Report suspected underage use immediately. We may restrict access, preserve evidence, and notify competent authorities where legally required. Do not upload or forward suspected child sexual exploitation material to us; use the in-app report against the relevant content or our illegal-content notice.

Security and changes

We use access controls, private storage, encryption in transit, administrator multi-factor authentication, scoped moderation access, and audit logging. No system is completely secure. Material policy changes will be shown in the app and may require new acceptance before continued use.