Privacy Policy

We collect only essential information: (a) email address, used to sign you in and to verify your account and to reset your password, (b) profile information, name, surname, username, and chosen avatar colour, (c) location data, only when you choose to share it for event discovery, (d) event information, events you create or participate in, (e) social connections, users you follow and interests you select. We do not collect browsing history or any unnecessary personal data. We also store a push notification token for each device you sign in on so we can deliver invitations and event notices. We also hold: (f) your bio, (g) the words you send us as feedback with the app version and the device model, (h) the business listing details and photos you submit, (i) the messages in a business listing chat, and (j) the short lived records a server keeps, such as the address your phone connects from. When you accept these terms we record the version you accepted, the date and the way you signed in.

Your email is used to sign you in and to verify your account and to reset your password. Location data is used to show you nearby events, to measure how far places are from you, and to choose who receives a Splora Promotion in an area. Profile information enables event discovery and social connections. Splora Promotions may reach you as an event in your feed, chosen by the interests you follow and the area you are in. We analyse how the app is used, without your name, to improve it. You can turn that off under Settings, Data & Privacy, Improve Splora. We never sell, rent or share your personal information with third parties for marketing purposes.

When you buy a Splora Business subscription inside the app the payment is handled by Apple or Google. We receive a record of the transaction from the store so we can activate your listing and keep it active. That record holds a store transaction identifier, the product, the environment, the amount and currency where the store reports it, and the renewal or expiry dates. It is linked to your account. We also hold the business details you submit for your listing design.

We do not sell your information. Period. Your data is stored in our own database, hosted on secure access controlled servers with a globally recognised infrastructure provider. Those servers are located outside South Africa, so your information is processed abroad. Google (Firebase) processes a limited set of data on our behalf for sign in, push notifications and crash and usage reporting, and crash reports are linked to your account so we can investigate problems. Our email provider, Resend in the United States, receives your email address and first name to send you a password reset, a verification or a deletion notice. The on device location service of Apple or Google receives your rounded position to turn it into a place name. Each of these processors is bound by an agreement to protect your information to a standard no lower than this policy. We only share information when: (a) required by South African law or valid legal process, (b) necessary to protect the safety and rights of users, (c) you explicitly choose to share events or profile information with other users. Event data you create is visible to users who follow you for that interest category.

You have full control over your data. You can: (a) delete your account at any time from Settings under Data & Privacy or on the web at dartweaver.co.za/delete-account, (b) delete individual events you created, (c) update your profile information, (d) control location sharing preferences, (e) manage who can send you follow requests, (f) receive a copy of everything we hold about you under Settings, Data & Privacy, Export my data. You also have the right to object to how we process your information, to ask what we hold and to complain to the Information Regulator of South Africa. If you cannot sign in, email splora@dartweaver.co.za from the address on your account and we will complete the deletion within 30 days. When you delete your account it is removed immediately and permanently: your sign in, profile, interests, location, follows, invitations, events and device tokens are deleted. Reports and feedback you submitted are kept for moderation under a random identifier that cannot be traced back to you, with your name removed. A business listing request is kept as a commercial record with your name removed. Store transaction records are kept as financial records without your account identifier. Server logs rotate on a rolling basis and are not kept long term. Encrypted backups that still hold your information are overwritten within 30 days and are never restored except to recover from a failure. Crash and usage reports linked to your account are deleted through Google's deletion service when you delete the account inside the app. We send a confirmation to your email address once the deletion is complete.

We implement industry standard security measures including encrypted data transmission, sign in secured by Firebase Authentication, content moderation to prevent offensive material and regular security updates. While we take security seriously, no internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your password.

For privacy questions or concerns, contact us at splora@dartweaver.co.za. We will respond to all enquiries within 30 days. DartWeaver is operated by Ian Inch, who is the Information Officer for these purposes, and is based in South Africa. Our postal address is available on request by email.