When you create a Skallor account, we collect information you provide or authorize: display name/nickname, profile photo, gender, age range, interest tags, city of residence, bio, and authentication identifiers. If you register via Apple Sign-In, we receive a limited profile dataset authorized by you and Apple.

When you create or join activities, we collect titles, types, descriptions, cover images, member limits, time strategies, location strategies, join modes, application messages, confirmation status, attendance signals, and related activity metadata. See Section 4.

We process messages you send in one-to-one chats and activity conversations, including system messages about applications, approvals, confirmations, and cancellations. See Section 5.

With your permission or when you enter it, we collect location text, map-selected places, approximate areas (e.g., "near Wangjing"), or precise coordinates used for meetup planning and discovery. Exact location may be blurred for non-members. See Section 6.

After activities, we collect mutual reviews (punctuality, communication, experience), no-show flags, and related reputation/credit signals associated with your account.

We automatically collect device model, OS version, unique device identifiers, IP address, app version, crash logs, and performance diagnostics to maintain service quality and diagnose issues.

We record how you use the Service: activities browsed, searches, applications sent, sessions, and feature engagement. This informs product improvements and optional personalization.

If you contact support, submit a report/block request, or participate in surveys, we retain the content and metadata of those communications for resolution and safety.

All payments are processed exclusively by Apple App Store or Google Play. We do not store your payment card details. We receive only anonymized transaction confirmation tokens and purchase entitlement data for virtual coins and premium features.

We use your information to authenticate your account, publish and discover activities, process applications, deliver chat, lock time/place, send reminders, operate reviews, enforce policies, process purchases, and provide core Service functions.

We use age-range signals to confirm you meet the minimum age for social features (16+) and to restrict access where required. See Section 3.

Activity and location data are used to help members coordinate offline meetups, including confirmations, attendance, and reminders (e.g., T-24h / T-2h).

We process reports, blocks, reviews, no-show records, and behavioral signals to detect abuse, harassment, fraud, and policy violations, and to surface safety tips.

Your browsing, interests, city, and engagement may be used to personalize activity discovery. See Section 9.

Aggregated and de-identified usage data is analyzed to improve matching, messaging reliability, and overall performance.

With your consent where required, we may send promotional communications about features and offers. You may withdraw consent via in-app settings or unsubscribe links.

We process personal data as necessary to comply with applicable laws, respond to valid legal process, enforce our Terms of Service, and protect users and the public.

Skallor is a social meetup Service for users who are 16 years of age or older. Where supported by the platform, we request Declared Age Range / Age Signals so we can gate social features appropriately.

If you decline to share your age range, social features that require the age gate may remain unavailable until sharing is enabled in system settings and re-requested in the app.

We retain the resulting eligibility/status associated with your account as needed to operate age-gated features and comply with platform requirements. We do not store identity documents from this process because none are collected.

Activity cards, applications, invitations, member lists, and confirmation states are stored to operate the meetup workflow from recruitment through completion or cancellation.

Public activity fields (title, type, cover, city/area, time strategy, join mode) may appear in discovery feeds. Precise venue details may be limited to members according to activity settings.

Confirmation of attendance, cancellations, and no-show marks are retained to support trust/credit features and safety enforcement.

One-to-one and activity conversation content is processed to deliver messaging, notifications, and moderation. Message content is visible to conversation participants and may be reviewed when reported.

Application results, confirmations, and cancellation notices are generated and stored as part of activity coordination.

When a user reports a conversation or account, relevant message excerpts may be accessed by our safety team for investigation.

You may enter location as free text, select a map place, or specify a range. Device location permission, if granted, may help suggest nearby discovery results.

Exact meetup venues may be shown primarily to confirmed members. Non-members may see only city or approximate area where the activity is configured that way.

Map selection and navigation may rely on Apple Maps or other third-party map services governed by their own privacy policies.

Activity posts, photos, chat messages, reviews, and profile content you publish constitute User-Generated Content (UGC) stored on our servers associated with your account.

By publishing UGC on Skallor, you grant us a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, reproduce, display, and distribute your content within the Service and in connection with promoting Skallor, subject to visibility settings. You retain ownership of your original content.

UGC is subject to automated screening and human review for Community Guidelines compliance. Violating content may be removed and accounts may be suspended or terminated.

You may delete eligible content subject to product capabilities. Deleted content is removed from public view within 48 hours, from production servers within 30 days, and from backup archives within 90 days, except where retention is required for safety or law.

Public activities and profile snippets may appear in discovery for other users, including display name, avatar, city/area, and activity summary.

Mutual reviews after meetups may be associated with your profile reputation signals visible as permitted by product design.

You may report or block users or content. Reports are reviewed by our safety team; your identity as reporter is kept confidential from the reported party where feasible.

Skallor helps coordinate meetups but does not supervise offline interactions. We encourage meeting in public places and using in-app safety tools. See also the Terms of Service.

Skallor may use your interests, city, browsing history, and engagement to personalize which activities are surfaced.

Your activity and chat data are not sold to third-party advertising networks for cross-context behavioral targeting without your explicit consent.

Where available, you may disable personalized recommendations in Settings. Skallor will then present a less personalized discovery feed.

We share personal information with trusted providers supporting operations: cloud hosting, push notifications, analytics, customer support, maps, payment processors, and moderation tools. Providers are contractually bound to process data on our instructions.

We do not sell your personal information, chat content, or age-range status to advertisers or data brokers.

In a merger, acquisition, or asset sale, your data may transfer to the acquiring entity. We will notify you before your data becomes subject to a materially different privacy policy where required.

We may disclose information to law enforcement or authorities when required by law, valid legal process, or to protect safety. Where legally permitted, we will notify affected users.

Your display name, profile photo, and public activity fields are visible to other Skallor users according to settings.

Apple Sign-In is governed by Apple's terms and privacy policy. Our use of data from Apple is limited to account creation and basic profile population.

Declared Age Range / Age Signals are provided by the OS platform. Platform policies govern how you share age range with apps.

Mobile analytics/crash SDKs may measure performance and engagement with privacy-preserving configurations where available.

Media and activity data are stored on cloud infrastructure. Push notifications may use APNs / FCM.

We retain your personal information while your account is active. Accounts with no login for 24 consecutive months may receive a dormancy notice; inactive data may then be anonymized or deleted.

Activity records and chats are retained for the life of your account or until deletion, subject to safety holds.

Financial transaction records for coin purchases are retained for a minimum of seven years where required by accounting, tax, or consumer protection law.

Moderation actions, reports, and enforcement decisions may be retained for up to 36 months after account closure.

We implement TLS 1.2+ for data in transit, encryption for sensitive data at rest where applicable, role-based access controls, and anomaly monitoring.

Access is restricted on a need-to-know basis, requires authentication controls, and is audit-logged where feasible.

Report security vulnerabilities responsibly to service@skallor.co.

If a personal data breach poses risk to your rights and freedoms, we will notify authorities within 72 hours where required and inform affected users without undue delay.

Skallor uses session tokens, local storage, and analytics SDKs (not traditional browser cookies) to maintain sessions and preferences.

On iOS, we request ATT consent before accessing IDFA. On Android, we respect device advertising opt-outs. Identifiers are used only to measure our own acquisition campaigns where applicable.

Our website may use standard cookies for session and analytics, manageable via browser settings.

Your personal data may be transferred to and processed in countries other than your country of residence.

For transfers from the EEA, UK, or Switzerland lacking an adequacy decision, we rely on EU Standard Contractual Clauses (SCCs) and, where applicable, the UK IDTA.

Where mandatory localization laws apply, we take reasonable steps to store required categories in the mandated territory.

Request a copy of personal data via in-app settings or by emailing service@skallor.co with subject "Data Access Request."

Correct inaccurate information in account settings, or contact us for data you cannot self-correct. We will action corrections within 30 days where required.

Request deletion via Settings > Delete Account or by emailing us. See Section 22.

Request your data in a structured, machine-readable format where applicable.

Object to or request restriction of certain processing. We pause relevant processing while assessing your request where required by law.

Withdraw consent for marketing, personalization, or age-range sharing (via system settings) at any time. Withdrawing age-range sharing may disable social features.

Email service@skallor.co with "Privacy Rights Request," your registered identity details, and a description of your request. We verify identity and respond within applicable legal timeframes.

For EEA and UK users, Skallor acts as the data controller of your personal information under the GDPR and UK GDPR.

We process data under: (a) contractual necessity; (b) legal obligation; (c) legitimate interests (safety, improvement, fraud prevention) where not overridden by your rights; and (d) consent (marketing, optional personalization, and age-range sharing where required).

You may lodge a complaint with your national supervisory authority. We encourage contacting us first.

California residents have rights under the CCPA/CPRA including the right to know, delete, correct, and opt out of sale/sharing of personal information. Skallor does not sell personal information and does not share it for cross-context behavioral advertising.

Exercising California privacy rights will not result in denial of services, different pricing, or reduced quality solely for that reason.

You may designate an authorized agent with written proof of authorization. We verify both agent and resident identity before processing.

Brazilian users have rights under the LGPD including confirmation, access, correction, anonymization, deletion, portability, and withdrawal of consent.

We process Brazilian users' data based on contract performance, legal obligation, and consent where applicable.

You may lodge complaints with the ANPD where you believe processing violates the LGPD.

Skallor is designed for users who are 16 years of age or older. We use platform age-range signals and account controls to enforce eligibility. Confirmed underage accounts are terminated and associated data deleted as required.

If you are a parent or guardian and believe a minor under 16 has created a Skallor account, contact service@skallor.co. We will investigate and delete confirmed underage accounts without delay.

All in-app purchases of virtual coins are processed exclusively through Apple App Store or Google Play. Skallor does not store payment card details.

Coin purchases and spends (e.g., publishing certain activities) are recorded as entitlement/transaction data associated with your account.

Transaction records are retained for a minimum of seven years where required by law.

Delete your account via Settings > Delete Account, or email service@skallor.co with subject "Account Deletion Request."

After you request deletion, if you do not log in again within 14 days, your information will be cleared: removed from public view within 48 hours of final processing, from production servers within 30 days, and from backups within 90 days of the next rotation, subject to legal holds.

Certain data is retained where required by law: transaction records (up to 7 years); safety and moderation records (up to 3 years); data subject to a legal hold. Retained data is isolated and used only for the required purpose.

Material changes are communicated at least 14 days before taking effect via in-app notice, push, and/or email. Non-material corrections may be made without advance notice.

Continued use after a revised Policy's effective date constitutes acceptance. If you do not agree, delete your account before changes take effect.

Prior versions are available upon request at service@skallor.co.

For questions, data rights requests, or privacy concerns:

• Email: service@skallor.co
• Subject: "Privacy Inquiry — [Your Name]"

We acknowledge inquiries within 5 business days and respond within 30 days.