Privacy Policy

1. Who We Are

MYSOVA Ltd ("MYSOVA", "we", "us") is a company registered in England and Wales. We operate the MYSOVA mobile application (for consumers) and MYSOVA Business dashboard (for venue owners). We are the data controller for personal data processed through our services.

ICO Registration Number: [Pending]

2. What Data We Collect

We collect the following categories of personal data:

• Account information: name, email address, date of birth, phone number
• Venue owner information: business name, role, venue details, proof of ownership documents
• Location data: precise location (with consent) for venue check-ins and discovery
• Usage data: check-in history, app interactions, feature usage, XP and level data
• Device data: device type, operating system, app version, crash reports
• Payment data: processed securely by Stripe — we do not store card details
• User content: photos, messages, reviews (where applicable)

3. How We Use Your Data

• Providing and improving our services (contract)
• Processing venue check-ins and gamification features (contract)
• Venue analytics and insights for MYSOVA Business users (contract)
• Sending service-related notifications (contract)
• Marketing communications (consent — you can opt out at any time)
• Fraud prevention and security (legitimate interest)
• Analytics and service improvement (legitimate interest)

4. Who We Share Data With

• Supabase: database and authentication infrastructure
• Stripe: payment processing
• Mapbox: mapping and location services
• Sentry: error tracking and crash reporting
• Vercel: web hosting

We do not sell your personal data. We only share data with third parties as necessary to provide our services.

5. International Transfers

Some of our service providers process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@mysova.com

8. Cookies

Our web dashboard uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Terms of Service for more details.

9. Age Restrictions

MYSOVA is designed for users aged 18 and over. We do not knowingly collect data from individuals under 18. If you believe we have collected data from someone under 18, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes via email or in-app notification.

11. Contact & Complaints

If you have questions about this policy or wish to make a complaint, contact us at privacy@mysova.com

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk