Privacy Policy

Last updated: 1 October 2026

1. Who we are

Spontio is operated by Spontio Limited, a company registered in England and Wales. We run a mobile and web platform that helps people discover and join spontaneous local social activities. In this policy "Spontio", "we", "us" and "our" all refer to Spontio Limited.

If you have questions about this policy or how we handle your data, contact us at talongcompany@gmail.com.

2. Data we collect

We collect information you give us directly and information generated by your use of the platform:

Account data — your full name, username, email address and password (hashed).
Profile data — profile photo, short bio, interests and general location (city/area).
Activity data — events you create, join or interact with; messages sent in activity chats; ratings you give or receive.
Location data — precise location when you choose to share it to find nearby activities. We do not track your location in the background.
Device & usage data — device type, operating system, app version, pages viewed, and actions taken in the app, collected via standard logs.
Communications — emails or messages you send us.

If you sign in with Google, we receive your name, email address and profile photo from Google as part of the OAuth flow.

3. How we use your data

To create and manage your account.
To show you relevant nearby activities based on your location and interests.
To facilitate chat and connections between users attending the same activity.
To send you transactional notifications (activity updates, new messages).
To enforce our Community Guidelines and keep the platform safe.
To improve the app through aggregated, anonymised analytics.
To comply with legal obligations.

4. Legal basis for processing (UK GDPR)

Contract — processing necessary to provide the service you signed up for.
Legitimate interests — fraud prevention, platform security, and improving our service.
Consent — push notifications and precise location access (you can withdraw consent at any time in your device settings).
Legal obligation — where we are required to retain or disclose data by law.

5. Who we share your data with

We do not sell your personal data. We share it only with:

Supabase — our database and authentication provider (EU-hosted infrastructure).
Google — for Sign in with Google authentication.
Expo / EAS — for push notification delivery on iOS and Android.
Netlify / Vercel — for hosting the web platform.
Law enforcement — if required by a valid legal request.

All third-party processors are contractually required to protect your data in line with UK GDPR.

6. How long we keep your data

Account and profile data — retained while your account is active.
Activity and chat data — retained for 2 years after the activity ends.
Server logs — retained for 90 days.

When you delete your account we delete or anonymise your personal data within 30 days, except where retention is required by law.

7. Your rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your data ("right to be forgotten").
Restriction — ask us to limit how we use your data.
Portability — receive your data in a machine-readable format.
Object — object to processing based on legitimate interests.
Withdraw consent — at any time for consent-based processing.

To exercise any of these rights, email us at talongcompany@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

The web platform uses strictly necessary cookies to manage your login session. We do not use advertising or tracking cookies.

9. Children

Spontio is not intended for users under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. The "Last updated" date at the top of this page always reflects the most recent version.

11. Contact us

Spontio Limited
United Kingdom
talongcompany@gmail.com