Privacy notice

1. Controller

The confirmed provider and data controller will appear below. The technical hosting organisation name OASIS Trivon does not by itself identify the legal controller. This remains a draft until identity and contact details are confirmed.

2. Data categories

The platform may process account name/email, profile and search area, self-reported Social DNA answers/results, interests, circle applications/membership, messages, event participation, feedback and safety reports. Payments add subscription and financial references. Push uses device tokens, consent and preferences. Passwords are not stored as readable profile information.

3. Purposes and legal bases

Account, club, conversation and order data support the requested contract/service. Necessary security and abuse prevention may rely on legitimate interests after assessment. Legal recordkeeping has a separate legal basis. Optional push and marketing require separate consent where applicable. You can withdraw consent without losing your account. Reading this notice is not consent to every processing activity.

4. Profiling

Social DNA provides group recommendations, not clinical assessments. Similarities support familiarity and differences support group variety. Results are suggestions, not guarantees or standalone decisions with legal or similarly significant effects. You may change answers and request human review. Avoid unnecessary sensitive information in free text. Processing special-category data would first require a separate lawful design.

5. Visibility and sharing

Members see information within the relevant functions and access rights. Circle content is not intended as a public social post. Staff/moderator access is task-based. Hosting, authentication, payment, email and push providers receive data needed for their functions. Social publishing is a separate approved administrator action; personal DNA profiles are not automatically shared.

6. Providers and transfers

The present setup uses Cloudflare for the web app/app database and Supabase for authentication/background work. The selected email provider and any active payment/push providers will be specified in operational details. An EU database region does not exclude international support or subprocessors. Processor agreements and lawful transfer safeguards must be documented before final publication.

7. Retention

Data is kept no longer than necessary for its purpose and legal obligations. Specific periods, deletion procedures and exceptions for financial records, safety cases and backups will be documented below. A complete retention schedule has not yet been confirmed; this is one reason the notice remains draft.

8. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, objection and portability. Withdrawal of consent operates prospectively. Profile tools offer preferences, data download and an erasure request. Identity checks and lawful retention exceptions may apply. You may complain to the competent supervisory authority, including the Dutch Autoriteit Persoonsgegevens.

9. Security and device storage

We use encrypted connections, server-side secrets and access controls. Necessary session cookies support secure sign-in; local storage may hold language settings. Push also requires device/browser permission; iOS may require Home Screen installation. Non-essential tracking must not be introduced without the required choice. Absolute security cannot be guaranteed.

10. Contact and updates

Use the confirmed privacy contact below. Material changes receive a new version and additional notice where needed. Registration records the accepted version; material new processing may require further information or consent.

Provider & operational details

Legal name

To be confirmed

Registered address

To be confirmed

Registration number

To be confirmed

Country

To be confirmed

Contact & complaints

To be confirmed

Privacy contact

To be confirmed

Hosting & processors

To be confirmed

Email service

To be confirmed

Retention & erasure

To be confirmed

International transfers & safeguards

To be confirmed