Privacy Policy — Out of Solo

OUTOFSOLO PRIVACY POLICY Version 2.0 Effective date: October 2026 1. Who We Are OutOfSolo is a social discovery and dating service for adults aged 18 and over. For the purposes of applicable data protection law, the Service is currently operated by Serhii Pavlov, Spain, who acts as the data controller. Privacy contact: support@outofsolo.com Website: outofsolo.com If responsibility for OutOfSolo is formally transferred to a company, this Privacy Policy will be updated to identify the new controller and the date from which that change applies. 2. About This Privacy Policy This Privacy Policy explains what personal data OutOfSolo processes, why we process it, how it is used, who may receive it, how long it may be retained, and the choices and rights available to you. Using OutOfSolo does not mean that you consent to every type of data processing. Some processing is necessary to create and operate your account and provide features you request. Where applicable law requires consent, we ask for that consent separately. Optional consent is not required to use the core Service. 3. Personal Data We Process 3.1 Account information Depending on how you use OutOfSolo, we may process your email address; username; first and last name where provided; authentication and verification status; account status; age or date-of-birth information where required to confirm eligibility or provide age-related functionality; and privacy and consent choices. Passwords are not stored as readable text. 3.2 Profile and Planet information Information you choose to add may include profile photos; bio; city and country; interests; concepts and selections added to your Planet; personality, hobby, lifestyle, cultural, relationship and other categories available within the Service; matching preferences; and other profile information you deliberately provide. You control some aspects of how this information is displayed through privacy and profile settings. 3.3 Activity and social interactions We may process information about profiles you view; Discovery and Search interactions; Swipe actions; likes and passes; matching and compatibility results; connection requests and connection status; messages you send and receive; Alerts; blocks; reports; and other actions necessary to provide the social and matching features you use. 3.4 Device, session and security information To operate and protect the Service, we may process limited technical information such as IP address; device or browser type; operating system; app version; language; request timestamps; authentication sessions and security tokens; login and security events; and information used to prevent abuse, unauthorized access and excessive requests. We seek to minimize technical information to what is reasonably necessary for operation, security and troubleshooting. 4. Sensitive Profile and Matching Information Because OutOfSolo is a dating and social discovery service, certain profile or matching choices may reveal or allow inferences about information that receives additional protection under data-protection law, including sexual orientation or information concerning a person's sex life. Information voluntarily entered into profile text, photographs, interests or messages may also reveal other sensitive information. Where OutOfSolo intentionally asks you to provide information requiring explicit consent under applicable law, we will request that consent separately before using the information for the relevant purpose. You may withdraw such consent through controls provided by the Service or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal. Please consider carefully what sensitive information you choose to make visible to other users. 5. How We Use Personal Data We process personal data to create and authenticate accounts; maintain and secure the Service; create and display profiles and Planets; provide Discovery and Search; provide Swipe functionality; calculate and display matching and compatibility information; provide Perfect Match and related recommendations; process likes, connections and other social interactions; deliver messages and Alerts; apply privacy and blocking preferences; prevent fraud, abuse and unauthorized access; investigate reports and safety issues; provide customer and privacy support; maintain and troubleshoot the Service; comply with legal obligations; and establish, exercise or defend legal claims. We do not use private messages merely because they are technically accessible. Access may occur where reasonably necessary for security, investigation of a report, support, legal compliance or protection of users. 6. Matching and Recommendations OutOfSolo uses information associated with your Planet and other matching information to help you discover people who may share interests, concepts or preferences with you. For example, the Service may compare selected concepts between users and use those similarities to calculate compatibility percentages, identify potential matches, or rank profiles in features such as Search or Perfect Match. Different discovery features may use this information differently. General Discovery may show a broad range of available users, while personalized search and matching features may prioritize users based on shared information. These calculations are intended to help users discover and connect with other people. They do not make decisions that produce legal or similarly significant effects concerning you. 7. Optional Analytics and Measurement OutOfSolo may offer a voluntary Analytics & Measurement setting. Where this option is offered, optional analytics are disabled unless you allow them. Analytics may be used to understand how people use the Service, identify problems, improve features and measure OutOfSolo's own acquisition or marketing campaigns. Optional analytics are designed not to include private message content, photographs, profile text, passwords, authentication tokens or sensitive matching information. You can change your Analytics & Measurement choice in Settings where the control is available. Changing your choice stops future optional collection governed by that choice after the change is applied. It does not necessarily erase information already lawfully processed before withdrawal. 8. Legal Bases Where the GDPR or equivalent rules apply, we rely on different legal bases depending on the processing. Performance of our contract with you generally covers processing necessary to provide features you request, including account creation, authentication, profile functionality, Planet, Discovery, Search, matching, connections and messaging. We may rely on legitimate interests for activities such as security, fraud and abuse prevention, maintaining service integrity, necessary diagnostics, enforcing our terms and protecting OutOfSolo and its users. Where we rely on legitimate interests, we consider the necessity of the processing and its potential impact on users. We rely on consent where required for optional analytics or processing of designated sensitive information. You may withdraw consent without losing access to core functionality that does not depend on that information. We may process information where necessary to comply with applicable law, lawful requests or regulatory obligations. 9. Who May Receive Personal Data We do not sell personal data. We do not provide third-party display advertising within the Service. Personal data may nevertheless be processed by third parties where necessary to operate OutOfSolo. Service infrastructure: OutOfSolo currently uses Supabase for backend functionality including authentication, database services and related application infrastructure. Relevant account, profile, interaction and application data may therefore be processed through this infrastructure. Email services: Transactional email providers may process your email address and content necessary to send account-related messages such as verification or authentication emails. Other users: Other users receive information that you choose to make available through your profile, Planet and social interactions. A recipient of a message receives the content you deliberately send to them. Legal and safety recipients: We may disclose relevant information to courts, authorities, professional advisers or other appropriate recipients where required by law or reasonably necessary to protect users, investigate serious abuse, or establish, exercise or defend legal claims. Service providers may use subprocessors or process information outside your country, subject to applicable data-protection requirements. 10. Profile Visibility and Communications Depending on your settings and the relevant feature, other OutOfSolo users may see information such as username; name, if you choose to display it publicly; profile photos; city and country; bio; Planet concepts and interests; and compatibility or matching information. Public-facing profile functionality is not intended to disclose your email address, authentication credentials, security tokens, internal account identifiers, block list or internal security information. Messages are shared with their intended recipients. Remember that another user may retain, copy or redistribute information you deliberately share with them. Do not send information that you are not comfortable sharing with the recipient. 11. Blocking and Safety OutOfSolo provides blocking functionality. When you block another user, the Service may process the relationship between the accounts in order to prevent or restrict further interaction and to keep blocked users from appearing where appropriate. Block information is not intended to be publicly visible. We may retain limited information concerning blocks, reports or serious abuse where reasonably necessary to protect users, prevent repeated abuse, resolve disputes or comply with legal obligations. 12. Data Retention We retain personal data only for as long as reasonably necessary for the purposes described in this Policy. Account, profile, Planet, interaction, message and user-generated information may generally remain while your account or relevant content remains active. When an account is deleted, account-linked information under our control will be deleted or de-identified within a reasonable operational period, subject to limited exceptions. Some information may be retained for longer where reasonably necessary for security and fraud prevention; investigation of abuse; legal obligations; disputes or legal claims; demonstrating consent or withdrawal; or backup and disaster-recovery processes. Backups may retain deleted information temporarily until they are overwritten through normal backup rotation. Information that has been genuinely anonymized so that it can no longer reasonably identify you may be retained for statistical or analytical purposes. 13. Your Rights and Controls Depending on where you live, you may have rights concerning your personal data. These may include the right to access your personal data; obtain a portable copy of eligible data; correct inaccurate information; delete your account and eligible personal data; withdraw consent; object to certain processing; request restriction of processing; and lodge a complaint with a competent data-protection authority. You can change certain profile and privacy information directly through OutOfSolo Settings. Privacy requests may also be submitted to support@outofsolo.com. We may need to verify your identity before fulfilling a request. Where GDPR applies, requests will normally be handled within the time limits required by applicable law. If Spain is the competent supervisory jurisdiction, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD). You may also contact another competent supervisory authority available to you under applicable law. 14. Account Deletion You may request deletion of your OutOfSolo account through account controls provided by the Service or by contacting us. Account deletion initiates deletion or de-identification of active account-linked personal data under our control. Limited information may remain temporarily in backups; for security and fraud prevention; where necessary to investigate serious abuse; where required by law; or for establishment, exercise or defence of legal claims. Information that another user has independently retained outside OutOfSolo cannot necessarily be deleted by us. 15. Security We use technical and organizational measures designed to protect personal data. These may include encrypted network connections; secure authentication; password hashing; access controls; session and token protections; database access restrictions; rate limiting and abuse prevention; data minimization; and security monitoring. No online service can guarantee absolute security. If you believe your account or personal information has been compromised, contact us as soon as possible. 16. International Data Transfers Some service providers or their subprocessors may process personal data outside Spain or the European Economic Area. Where applicable law requires safeguards for an international transfer, we use or rely on an appropriate legal mechanism, which may include an adequacy decision, Standard Contractual Clauses or another mechanism permitted by applicable law. 17. Adults Only OutOfSolo is intended only for people aged 18 or older. We do not knowingly permit people under 18 to maintain accounts. If we reasonably determine that an account belongs to a person under 18, we may suspend or remove the account and delete associated active account information, subject to limited retention where necessary for safety or legal reasons. Suspected underage accounts may be reported to support@outofsolo.com. 18. Changes to This Privacy Policy We may update this Privacy Policy when OutOfSolo changes, when our processing practices change, or when required by law. The current version and effective date will be displayed with the Policy. If a material change requires new consent under applicable law, continued use of OutOfSolo will not by itself substitute for that consent. 19. Contact For privacy questions, requests or complaints: support@outofsolo.com Website: outofsolo.com Data controller: Serhii Pavlov, Spain