SoApp Social App Privacy Policy.

SoApp Social SAS is the controller for the processing described here unless a specific feature states otherwise. For privacy questions or rights requests, contact contact@soappsocial.com.

• Account and profile data: name, pseudonym/username, email, phone number, profile information and profile media where provided.
• Authentication and security data: credentials, sessions, registered devices, push/VoIP identifiers, login and security events.
• User content: messages, images, videos, files, polls, checklists, event content, reactions and other content you choose to share.
• Calls: data needed to establish and operate voice/video calling features.
• Location and event data: location, addresses or geofencing information when a feature requires it and you grant the necessary permission.
• Contacts: with your permission, the mobile app reads contact names and phone numbers to build a local address-book index. Contact loading does not upload names or address-book rows. Phone numbers for contacts displayed in a picker can be sent automatically to SoApp's search service to find matching accounts; selecting a contact can also trigger a lookup. SoApp also processes in-service contact/social relationships you create inside SoApp.
• Accountless participation: guest/session identifiers, first-entry time, environment access state and contributions made before account creation.
• Technical and diagnostic data: service logs, network/security signals and other technical information necessary to operate, secure and troubleshoot SoApp.

We process data to create and secure accounts, deliver messages and shared content, operate events/calls/geofencing, provide accountless access, prevent abuse, troubleshoot the service, comply with law and exercise or defend legal rights.

Depending on the context, processing is based on performance of the service contract, legitimate interests in operating and securing SoApp, consent where required for optional processing, and legal obligations. An operating-system permission controls device access; it does not by itself determine the legal basis for every use of personal data.

See App permissions for camera, microphone, library access, automatic event sharing, background location, contact matching and call permissions, including how to change your choices.

When you send or share content into a conversation, event or other shared environment, that content becomes available to the intended participants and may form part of their conversation or group history.

If your account is later deleted, copies already shared with other participants may remain where they have independent shared utility. Where retained, SoApp's target deletion model removes the active account relationship and uses a neutral deleted-account identity rather than keeping the former account active. Content itself may still contain personal information that you included in it.

Accountless access to an environment expires seven days after first entry unless you create a SoApp account. Expiry removes the guest's access/session. Contributions already shared into the environment may remain where other participants rely on them, under a neutral guest identity where appropriate.

Before active participation, SoApp may record acceptance of the applicable lightweight terms/community rules and privacy information.

SoApp uses infrastructure and service providers to operate the product, including hosting/storage, databases, push notifications, verification, calls, geocoding and media/content services. The exact production processor list and regions are being verified against the launch environment and will be kept aligned with the actual implementation.

We do not sell personal data. We share data only as needed to provide the service, comply with law, protect users/service integrity, or complete a transaction or corporate operation lawfully.

We retain data only for as long as needed for the purposes described above, subject to legal, security and operational requirements. Active account data is generally kept while the account exists; shared content may remain while the relevant shared conversation/object exists.

For account deletion, SoApp's working policy allows inaccessible disaster-recovery backup copies to age out for up to 90 days. This maximum remains subject to final verification against the production backup lifecycle before it is treated as a guaranteed technical limit.

Permanent account deletion is different from uninstalling the app or temporarily deactivating access. SoApp's target deletion model removes account identity, credentials and account-only/private data while preserving independently held shared conversation state where necessary for other participants.

See Delete your SoApp Social account for the current external request process and implementation status.

Subject to applicable law, you may have rights of access, correction, deletion, restriction, objection and portability, and the right to withdraw consent where processing is based on consent.

To exercise a right, contact contact@soappsocial.com. You may also lodge a complaint with the competent data-protection authority, including the CNIL in France.

SoApp is not specifically directed at children. Minors may use SoApp only where permitted by applicable law and, where legally required, with parent or guardian authorization. We may apply additional age-appropriate safeguards where law requires them.

We may update this policy as SoApp and its infrastructure evolve. Material changes apply prospectively and the date above identifies the current version.

Questions: contact@soappsocial.com.