Privacy Policy

1. Who we are

SoloYolo (“SoloYolo”, “we”, “us”) is a mobile application operated by Exaflair Technologies Private Limited, a company registered in India. This policy explains what personal information the SoloYolo app collects, why, and what control you have over it.

For the purposes of applicable data protection law, including India’s Digital Personal Data Protection Act, 2023 and the EU/UK GDPR where it applies, Exaflair Technologies Private Limited is the data controller (or “Data Fiduciary”).

2. What we collect

We only collect what the app needs to work. Specifically:

Information you give us

Information collected automatically

3. How we use it

• To create your account and sign you in
• To show you events, trips and travelers near you
• To let you create events and trips and manage who joins them
• To deliver group chat messages to the people in that event or trip
• To send push notifications you have opted into
• To review reports, enforce our Terms, and keep the community safe
• To diagnose crashes and fix problems in the app
• To comply with legal obligations

We do not use your personal information for advertising, and we do not sell or rent it to anyone.

Where the GDPR applies, our legal bases are: performance of a contract (running the app you signed up for), consent (location and push notifications, which you can withdraw in your device settings), and legitimate interests (safety, moderation and fraud prevention).

4. What other users can see

SoloYolo is a social app, so some information is visible to others by design. Please assume anything in this list is public to other signed-in users:

• Your name, username, profile photo, bio, age, gender and home country
• Your travel styles and interests
• Events and trips you create, including the location and time you set
• That you have joined or requested to join an event
• Messages and images you send in an event or trip chat, visible to the members of that chat

Your email address, your push notification token and your device’s live position are never shown to other users.

5. Who we share it with

We share data only with the service providers needed to run the app. Each acts as a processor on our instructions:

We may also disclose information if we are legally required to, or where it is necessary to investigate a safety issue or enforce our Terms.

6. Location data

Location is central to SoloYolo, so we want to be precise about it:

• We request location permission only when you use a feature that needs it — the map, finding travelers nearby, or setting the location of an event.
• We use foreground location only. The app does not request or receive background location, and does not track your movements when it is closed.
• Other users see the location you choose for an event or trip. They do not see your live device position.
• You can revoke location permission at any time in your device settings. The app will still work, but the map will not be able to centre on you.

7. How long we keep it

• Your profile: until you delete your account.
• Events: automatically deleted 24 hours after they expire.
• Trips: deleted after their end date passes.
• Chat messages: deleted when the event or trip they belong to is deleted.
• Reports: kept up to 24 months so we can identify repeat behaviour.
• Backups: residual copies may persist in encrypted backups for up to 30 days after deletion.

8. Your rights and choices

Depending on where you live, you have the right to:

• Access the personal information we hold about you
• Correct anything inaccurate — most fields are editable in the app under Profile → Edit
• Delete your account and associated data (see section 9)
• Withdraw consent for location or notifications, via device settings
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Complain to your local data protection authority

To exercise any of these, email support@exaflair.com. We respond within 30 days.

9. Deleting your account

You can delete your account at any time from inside the app: Profile → Settings → Delete Account.

This permanently removes:

• Your profile, photo, bio and all onboarding details
• Events and trips you created, and their chats
• Your messages, memberships and join requests
• Your push notification token

Deletion is immediate and irreversible. Reports you submitted may be retained in anonymised form for safety purposes. If you cannot access the app, see our account deletion page for the alternative process.

10. Security

All traffic between the app and our servers is encrypted with HTTPS/TLS. Data is stored in an access-controlled database with row-level security policies, so a user can only read and write the records they are entitled to. Access to production systems is restricted to authorised personnel.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authority as required by law.

11. Children

SoloYolo is intended for adults aged 18 and over. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact support@exaflair.com and we will remove it promptly.

12. International transfers

Our primary database is hosted in Mumbai, India. Some providers listed in section 5 process data in other countries, including the United States. Where personal information is transferred outside your region, we rely on the provider’s contractual safeguards, such as standard contractual clauses, to protect it.

13. Changes to this policy

We may update this policy as the app evolves. The “last updated” date at the top always reflects the current version. If a change materially affects how we handle your information, we will notify you in the app or by email before it takes effect.

14. Contact us

Questions, requests or complaints about privacy:
Email: support@exaflair.com
Company: Exaflair Technologies Private Limited, India