Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how Solobase Ltd ("Solobase", "we", "us", "our") collects, uses, and protects your information when you use the Solobase mobile application and website (together, the "Service"). This policy is governed by the law of England and Wales and UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who we are

Solobase Ltd operates Solobase. If you have questions about this policy or your data, contact us at connect@solobaseapp.com.

2. Information we collect

We collect the following categories of information:

• Account information: your email address, and authentication details if you sign in with Apple or Google.
• Profile information: first name, date of birth, gender, home country, languages spoken, hobbies and interests, bio, travel style, bucket list destinations, icebreaker prompts, and profile/travel photos you choose to upload. Your first name and age (calculated from your date of birth) are shown on your public profile; your surname and exact date of birth are not.
• Personality assessment data: your responses to our compatibility/personality assessment — including specific questions about your favourite activities and interests — used to calculate compatibility scores with other users.
• Location information: your approximate location (city-level, not precise/GPS-exact coordinates) so we can show you nearby public groups ("Basecamp") and relevant travellers. On iOS, you'll be asked to grant this via the system prompt "Solobase uses your location to keep your current city up to date so other travellers can find you nearby"; on Android, you'll see the system's standard location permission dialog. On both platforms, we request approximate location only, and only while you're using the app — we do not request the "Precise Location" toggle on iOS, and we do not request or use background/"Always" location access. You can control location visibility in your settings at any time, and you can change or revoke location permission at any time via your device settings.
• Trip and travel information: planned trips, destinations, and dates you choose to add to your profile.
• Content you create: messages sent in direct chats and group chats, and any content you post to public or private groups.
• Safety and moderation data: a list of users you've blocked, and any reports you submit about other users or content.
• Activity status: whether you're currently online, when you were last active in chats, and message read receipts — visible to other users by default, but each of these can be turned off individually in Privacy settings.
• Meetup verification count: a count of verified meetups with other users, shown on your public profile.
• Subscription status: whether you have premium access, which determines which features (such as filters) are available to you. Premium is not yet purchasable — currently, all users are on the free tier. Once premium purchasing launches, payment will be handled entirely by Apple's App Store or Google's Play Store — Solobase will not receive or store your card details, only confirmation of your subscription status.
• Usage and analytics information: how you interact with the Service, such as groups joined, filters applied, screens viewed, and general app activity, collected via Firebase Analytics on an opt-in basis (see Section 6).
• Crash data: technical logs generated if the app crashes, collected via Firebase Crashlytics, used to diagnose and fix issues.
• Device information: basic technical data such as device type and operating system, used for app functionality and troubleshooting.
• Age declaration: you confirm you are 18 or older at signup. See Section 11 regarding our plans for stronger age verification in future.

3. How we use your information, and our legal basis

UK GDPR requires us to have a valid legal basis for each way we use your data. Here's how that breaks down:

We use your information to...	Legal basis
Create and manage your account and profile	Performance of a contract (our Terms of Service)
Calculate compatibility scores and match you with other travellers	Performance of a contract, and legitimate interests (delivering the core matching feature you signed up for)
Show you relevant nearby groups and travellers (Basecamp, Smart Discovery)	Consent (for location access) / Legitimate interests (for general/city-level location)
Enable messaging and group chat functionality	Performance of a contract
Maintain safety and security, detect abuse, enforce our Terms	Legitimate interests (protecting users and the Service)
Understand app usage and improve the product (Firebase Analytics)	Consent (opt-in; you choose this the first time you open the app, and can change your mind anytime in Settings)
Diagnose and fix crashes (Firebase Crashlytics)	Legitimate interests (keeping the Service working reliably)
Communicate with you about your account and updates	Performance of a contract
Send you product news and marketing	Consent (opt-in only; you can withdraw at any time)
Comply with legal obligations	Legal obligation

Automated decision-making

Our compatibility score is generated automatically based on your profile, interests, and personality assessment responses. It influences who you're shown and matched with, but it does not make any final decision on your behalf — you choose who to message or connect with. You will not be subject to a decision based solely on automated processing that produces legal or similarly significant effects without the opportunity for human review. If you have questions about how a compatibility score was generated, contact us at connect@solobaseapp.com.

4. Who can see your information

Most of the profile information described in Section 2 is visible to other users, as intended for a platform designed to connect travellers — including your first name, age, home country, bio, photos, languages, hobbies and interests, travel style, bucket list destinations, icebreaker prompts, planned trips (unless marked private, see below), your compatibility score and shared personality alignments with other users, meetup verification count, and general location. When you view another traveller's profile, we also show which favourite activities and interests you have in common with them (from your personality assessment responses) — this is calculated by comparing your two profiles and is not separately stored. This shared-interest display, along with visibility of more than one trip overlap, is currently limited for free-tier users (see our Terms of Service, Section 8) until premium access becomes purchasable. You control aspects of this through your privacy settings, including location visibility, online status, last seen, read receipts, and a "hidden mode" that reduces your visibility to others.

Private information such as your email address, surname, exact date of birth, precise account settings, and your list of blocked users is never shown to other users.

You can mark individual planned trips as private, which hides them from your public profile. However, marking a trip private does not hide your presence in any public group tied to that same destination — if you join a public "Basecamp" group for a location, other members of that group can see you're a member, which may indirectly reveal that you're travelling there even if the trip itself is marked private on your profile.

In private 1:1 chats, photo sharing is disabled by default and only becomes available once both participants explicitly agree to enable it. This is a deliberate safety measure to reduce the risk of unwanted or unsolicited images being sent.

5. Third parties we work with

We use the following categories of third-party service providers to operate Solobase:

• Supabase — our backend database and authentication provider, which stores account and profile data on our behalf. Data is processed on servers located in Ireland, within the European Economic Area.
• Apple and Google — if you choose to sign in using "Sign in with Apple" or "Sign in with Google," and to process payment if you subscribe to premium features (via the App Store or Play Store) — Solobase never receives or stores your card details directly.
• Supabase's built-in email service — used to deliver account-related emails such as sign-in codes and password resets.
• Firebase Cloud Messaging (Google/Firebase) — used to deliver push notifications to your device.
• Firebase Analytics (Google/Firebase) — an in-app analytics tool that helps us understand how the app is used, so we can improve it. Only active if you've given consent (see Section 6).
• Firebase Crashlytics (Google/Firebase) — used to diagnose app crashes and keep the Service running reliably.
• Anthropic — some profiles on Solobase are currently AI-operated, for the duration of our beta testing period only (see our Terms of Service for more detail). When you message one of these profiles, your message content is sent to Anthropic's API to generate a reply. Anthropic processes this content on our behalf to power the conversation, does not use it to train their models, and automatically deletes it from their systems within 7 days. AI-operated profiles, and this processing, will end prior to public launch.

We do not sell your personal information to third parties.

Each of these providers acts as our data processor under their own standard data processing terms, which require them to protect your data to at least the standard required by UK/EU GDPR.

6. Cookies & Analytics

We use Google Analytics on our website (solobaseapp.com) to understand how visitors use it, so we can improve it. Google Analytics uses cookies to collect information such as pages visited, time spent on the site, and general location (based on IP address).

We only set these cookies with your consent. When you first visit our website, you'll be asked to accept or reject analytics cookies — you can change your choice at any time via the "Cookie Settings" link in the footer. If you reject, no analytics cookies are set and no data is sent to Google.

Google may process this data in accordance with its own privacy policy, available at policies.google.com/privacy.

The above applies to our website. The Solobase mobile app does not use cookies, as this is a browser-specific technology. However, the app does use Firebase Analytics and Firebase Crashlytics to understand how the app is used and to diagnose issues, as described in Section 2 and Section 5. See our separate Cookie Policy for full detail on these and how they differ from website cookies.

• The first time you open the app, you're asked for explicit consent before any analytics tracking begins. You can change your choice anytime via Settings → Analytics tracking.
• Where required (for example, if you are an iOS user and any tracking crosses to third-party apps or websites for advertising purposes), we will also request your permission via Apple's App Tracking Transparency prompt before that tracking begins. As of today, Solobase does not use any cross-app or advertising tracking.
• If we introduce advertising or cross-app tracking SDKs in future, we will update this policy and request the relevant permissions before doing so.

(See separate Cookie Policy for the full list of website cookies used and their individual purposes/durations.)

7. International data transfers

Your information is stored on servers located in Ireland, within the European Economic Area. If you're using Solobase from the UK, transfers of your data to our EU-based servers are covered by the UK's data adequacy arrangements with the EU, so no additional safeguards are required.

Some of our third-party providers (see Section 5) may process data outside the UK/EEA — for example, Google/Firebase and our planned identity verification provider (see Section 11) operate globally. Where this happens, we rely on an appropriate safeguard being in place, such as an adequacy decision by the UK or EU government, or Standard Contractual Clauses (SCCs)/the UK's International Data Transfer Addendum incorporated into our contract with that provider.

If you're using Solobase from outside the UK or EU, your information will still be processed on our EU-based servers in order to provide the Service to you.

8. Data retention

We retain different categories of data for different periods, based on how long we need them:

• Account and profile data: retained for as long as your account is active, plus 90 days after deletion (see below).
• Messages: retained until you delete your account. If you delete your account, your data is retained for 90 days before being permanently deleted, but the conversation remains available to the other participant until they delete their own account. If Solobase deletes a group (for example, in response to a report), its messages are retained for 90 days before permanent deletion. Where a message has been reported, we may retain it for as long as necessary to investigate the report, resolve it, or comply with a legal obligation, even if this is longer than the periods above.
• Personality assessment responses: retained for as long as your account is active, and deleted with your account.
• Age declaration: retained for as long as your account is active. Once identity verification (Section 11) is introduced, this section will be updated with a specific retention period for verification results.

If you delete your account, we retain your data for 90 days in case you change your mind and wish to reactivate — logging back in during this window automatically restores your account. After 90 days, your data is permanently deleted from our systems.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (see Section 8 above regarding our 90-day grace period).
• Object to or restrict certain processing of your data.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects concerning you (see Section 3).

To exercise any of these rights, contact us at connect@solobaseapp.com.

10. How to complain

If you have a complaint about how we've handled your personal data, contact us at connect@solobaseapp.com with details of your concern. We'll acknowledge your complaint within 5 business days, and aim to provide a full response within 30 days.

If you're not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Age requirement & identity verification

You must be at least 18 years old to use Solobase. The Service is not intended for anyone under 18, and we do not knowingly collect data from anyone below that age.

Currently, age is self-declared at signup — you confirm you are 18 or older, but we do not yet independently verify this.

Because Solobase connects people who may meet in person, we take age verification seriously and plan to introduce mandatory identity/age verification through a third-party verification provider, which will check a government-issued ID or passport. Where this involves biometric data (such as matching a selfie to an ID photo), that processing will be carried out entirely by that provider under their own privacy policy; Solobase will not receive or store the biometric data itself, only a simple confirmation of whether verification succeeded. We will rely on your explicit consent as the legal basis for this processing, given at the point you choose to complete verification. This section will be updated once this provider is confirmed and live, to name them and reflect that verification is mandatory rather than planned.

12. Security

We use reasonable technical and organisational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Safety when meeting other users

Solobase helps you find and connect with other travellers, but we are not responsible for the conduct of any user, on or off the platform. Always meet in public places, tell someone your plans, and trust your instincts. Your safety is your responsibility when meeting anyone you connect with through the Service.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email where appropriate.

15. Contact us

If you have any questions about this Privacy Policy, contact us at connect@solobaseapp.com.