Privacy Policy

This Privacy Policy explains how Dabei ("Dabei", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and this website (together, the "Service").

By creating an account or otherwise using the Service, you agree to the collection and use of information in accordance with this policy. This policy is designed to comply with the requirements of the Apple App Store and Google Play, as well as the EU General Data Protection Regulation (GDPR).

Depending on how you use Dabei, we may collect:

• Account data: name, email address, profile photo, and a unique identifier provided by Apple or Google when you sign in.
• Profile & activity data: events you create or join, categories you follow, and your interactions within the app.
• Location data: your approximate or precise device location, with your permission, to show nearby events.
• Content you create: event details, photos, and messages you send to other users.
• Device & usage data: device type, operating system, app version, crash logs, and basic analytics needed to keep the Service reliable.
• Push notification tokens: a token issued by Apple (APNs) or Google (FCM) used to deliver notifications to your device.
• Phone number & contacts (optional): only if you enable contact discovery, your phone number and matches found among your device contacts, used solely to help friends find you and to suggest people you already know who use Dabei.
• Business data (Dabei Business): if you register a business, the business name, email, logo, description, and location you provide, used to display your public business profile and the events you publish.

You can use Dabei as a guest with an anonymous account tied to your device, or sign in with Apple or Google.

Phone number & contacts are optional and off by default. If you enable contact discovery, your phone number is never public and is never shown to other users — it is stored separately from your public profile and used only to find matches. When you tap "Find friends in my contacts", the numbers on your device are checked against people who use Dabei and have also enabled discovery; we do not store your full address book. You can disable discovery or remove your number at any time.

Dabei lets you create an account using Sign in with Apple or Google Sign-In. When you use either option, the provider shares limited information with us — typically your name, email address (or a private relay email, in Apple's case), and a unique account identifier — so we can create and secure your Dabei account.

We do not receive your Apple ID or Google account password. You can manage or revoke Dabei's access to your Apple or Google account at any time from your device or account settings.

Dabei is built around discovering what is happening near you. With your permission, we access your device's location to:

• Show events and plans close to where you are.
• Let you filter events by distance.
• Position events accurately on the map when you create them.

You can allow location access "while using the app" or deny it entirely from your device settings. If you deny location access, some features — such as nearby event discovery — will be limited or unavailable. We do not sell your location data.

When you create an event, the title, description, category, location, date, and any images you attach are visible to other users of the Service, as intended by the feature. Please avoid including sensitive personal information in public event details.

Dabei allows you to message people you are meeting up with through an in-app chat. Messages are stored securely so that conversation history is available to the participants of a chat. We do not use the content of your private messages for advertising purposes.

We send push notifications to keep you informed about invitations, new messages, and activity relevant to events near you. Push notifications are delivered through Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM). You can disable push notifications at any time from your device's notification settings.

If you upload a profile photo or images for an event, those files are stored in secure cloud storage associated with your account. Images you mark as public (such as an event photo) are visible to other users as part of the relevant feature; profile photos are shown according to your profile visibility settings.

Dabei uses Supabase as its backend infrastructure provider for authentication, database storage, and file storage. Supabase stores your account data, event data, chat messages, and uploaded images on our behalf, under a data processing arrangement. Supabase implements industry-standard security controls, including encryption in transit.

We may also use other trusted infrastructure providers (such as Apple and Google for authentication and notifications) strictly to operate the Service. These providers act as data processors and are contractually bound to protect your information.

• To create and maintain your account.
• To show you relevant events, people, and plans nearby.
• To enable chat and communication between users.
• To send push notifications you have not disabled.
• To maintain the security and integrity of the Service.
• To diagnose issues and improve app performance.
• To comply with legal obligations.

We do not sell your personal data. We share information only with:

• Other users, to the extent required by a feature (e.g. your profile name and photo are visible to people you chat or share events with).
• Service providers who process data on our behalf, such as Supabase, Apple, and Google, solely to operate the Service.
• Authorities, where required by law, regulation, or legal process.

You can request deletion of your Dabei account and personal data at any time by emailing cmaigual25@hotmail.com from the email address associated with your account, with the subject line "Delete my account".

Once we verify your request, we will, within 30 days:

• Permanently delete your profile, account credentials, and settings.
• Delete events you created, or anonymize them if other users have joined and still rely on that event data.
• Delete your chat messages and conversation history.
• Delete photos and images you uploaded from our storage.
• Remove your push notification tokens.

We may retain limited information where required by law, to resolve disputes, or to enforce our agreements (for example, records needed for fraud prevention or legal compliance).

We retain your data for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at cmaigual25@hotmail.com. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Dabei is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Your data may be processed and stored in countries other than your own, including through our infrastructure providers. Where this occurs, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data.

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, how your data is handled, or to request access, correction, or deletion of your data, contact us at cmaigual25@hotmail.com.