Privacy Policy

This Privacy Policy explains how Social Spot collects, uses, stores, shares, transfers, and deletes personal data when you use the application, website, or related services, including login through Telegram and optional AI-powered features.

1. Who We Are

Social Spot is operated by Tsifrovye Servisy, TOO, Republic of Kazakhstan.

Address: ul. Kairbaeva 34, Pavlodar, Pavlodar region, Kazakhstan
E-mail: support@social-spot.kz
Website: https://social-spot.kz

2. Data We Collect

Depending on how you use the Service, we may collect the following categories of data:

• account and profile data, such as name, age, date of birth, gender, photos, biography, interests, language, and profile preferences;
• Telegram authentication data, such as Telegram user ID, username, profile photo (if available), and other basic account identifiers required to sign in or link your account;
• contact and technical authentication data, such as device identifiers, login data, session information, and communication details you provide to us;
• user-generated content, such as messages, profile descriptions, media, reactions, reports, blocks, verification submissions, and support requests;
• approximate or precise location data, only if you grant permission and use geolocation-based features;
• usage and diagnostic data, such as app events, crash logs, IP address, browser type, device model, operating system, interaction data, viewed profiles, likes, matches, and session timestamps;
• purchase and subscription metadata necessary for in-app purchases, such as product identifiers, transaction status, receipt or transaction references, subscription status, and billing support information received from Apple, Google, or other authorized payment platforms. We do not store full payment card details ourselves;
• safety and moderation data, such as complaints, reports, internal review notes, verification signals, and information reasonably necessary to detect fraud, scams, spam, policy violations, or harmful behavior.

3. Why We Use Data

We use personal data to:

• create and manage user accounts;
• provide matching, messaging, profile display, and social networking functions;
• show nearby users or location-based functionality when enabled by the user;
• provide subscriptions, paid features, billing support, and purchase restoration where applicable;
• moderate content, process reports and blocks, prevent abuse, detect fraud, and enforce community rules;
• provide customer support and respond to legal, trust and safety, or technical requests;
• improve app performance, security, reliability, and user experience;
• develop, test, and improve recommendation systems, compatibility logic, AI-assisted tools, and product features;
• comply with legal obligations, protect rights and safety, and resolve disputes.

4. Use of Artificial Intelligence

We may use artificial intelligence and machine learning technologies to improve the Service, including:

• providing personalized recommendations;
• improving matching algorithms between users;
• analyzing user interactions to enhance user experience;
• supporting moderation, fraud prevention, spam detection, and quality assurance processes.

These technologies may process user data such as profile information, preferences, interactions, reports, and in-app behavior.

The Service may also provide AI-generated suggestions or responses to users. Such content is provided for informational purposes only and should not be considered legal, medical, psychological, financial, or other professional advice.

Where we use third-party AI or analytics providers, we do so only where reasonably necessary for the functionality described in this Policy, under appropriate contractual, confidentiality, and data protection safeguards.

Artificial intelligence is used as a supportive tool and does not make legally significant decisions about users without appropriate human review. We do not rely exclusively on automated decision-making where such processing would produce legal or similarly significant effects on users under applicable law.

5. Legal Basis and Consent

Where required by applicable law, we process personal data on one or more of the following legal bases: your consent, performance of a contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and protection of vital interests, rights, or safety of users and third parties.

Where processing is based on consent, you may withdraw consent at any time, although this will not affect processing already carried out before withdrawal. Some Service features may not function properly if certain permissions or consents are withdrawn.

6. Geolocation and Device Permissions

If you allow location access on your device and choose to use location-based functionality, we may collect approximate or precise geolocation data to provide features such as showing nearby users or improving local relevance. You can disable location permissions in your device settings at any time, but some features may stop working properly.

We may also request access to your camera, photo library, microphone, contacts, or notifications only when needed for app functionality and subject to your device permissions.

7. How We Share Data

We do not sell personal data. We may share data only in the following cases:

• with service providers and infrastructure partners that help us host, secure, analyze, moderate, verify, or support the Service;
• with payment platforms and app stores, such as Apple App Store, Google Play, or other authorized payment providers, to process subscriptions and purchases;
• with Telegram, solely to the extent necessary to authenticate users or support Telegram-based login or account linking features;
• with analytics, moderation, anti-fraud, or AI service providers only where reasonably necessary for the functionality described in this Policy and only under appropriate data protection obligations;
• with affiliated entities, successors, or transaction counterparties in connection with a merger, acquisition, reorganization, financing, or sale of assets, subject to appropriate confidentiality protections;
• with law enforcement, regulators, courts, or other authorities where required by law or where reasonably necessary to protect rights, safety, property, or the integrity of the Service.

8. International Transfers

Your data may be processed in countries other than your country of residence where our service providers or infrastructure are located. Where required, we take reasonable contractual, organizational, and technical measures to ensure an adequate level of protection for transferred data in accordance with applicable law.

9. Data Retention

We retain personal data only for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce agreements, maintain security, and comply with legal obligations.

In most cases, account data is retained for the lifetime of your account. After a valid deletion request, we delete or anonymize personal data within up to 10 business days where operationally feasible, except where retention for a longer period is necessary for legal compliance, fraud prevention, moderation, security, dispute resolution, defense of claims, or technical backup processes.

Some technical logs, backups, moderation evidence, and safety-related records may remain for a limited period after account deletion where required for security, fraud prevention, legal compliance, defense of claims, or technical recovery processes.

10. Account Deletion and Data Deletion

You may request deletion of your account and associated personal data by using available in-app functionality or by contacting us at support@social-spot.kz.

After receiving a valid deletion request, we will delete or anonymize your personal data within the period described above, except where retention is necessary for legal, security, fraud-prevention, dispute-resolution, moderation, or technical backup purposes.

11. Children

The Service is intended only for adults aged 18 and older. We do not knowingly collect or process personal data from minors. If we learn that a minor has provided personal data, we will take steps to suspend or delete the account and remove the data as required by applicable law.

12. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Your Rights

Depending on applicable law, you may have the right to access, correct, update, delete, restrict, or object to certain processing of your personal data, to withdraw consent where consent is the legal basis for processing, and to request portability of certain data where such a right exists.

You may also have the right, under applicable law, to request human review of certain important decisions if you believe they were made solely by automated means. To exercise your rights, contact us at support@social-spot.kz.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or our data practices. The latest version will be published on our website, and where required we will provide additional notice through the Service or by other appropriate means.

15. Contact

If you have questions about this Privacy Policy or your personal data, contact us at support@social-spot.kz.