Privacy Policy

Last updated: 14 May 2026

SoHey is operated by So Hey Limited, a company registered in England and Wales under company number 09957307.

This Privacy Policy explains how we collect, use, store and protect your personal data when you use the SoHey mobile application, website and related services.

SoHey is currently in beta and is available only to users aged 18 or over.

1. Who we are

SoHey is operated by:

So Hey Limited
Company number: 09957307
Registered office: Underhill, Keys Lane, Priors Marston, Southam, England CV47 7SA
Email: info@sohey.app

For the purposes of UK and EU data protection law, So Hey Limited is the controller of your personal data.

This means we decide how and why your personal data is used.

2. About SoHey

SoHey is a proximity-based social app designed to support real-world, in-person social connection.

The app allows users to create a profile, check in, discover nearby users, send and receive SoHey requests, verify real-world meets using QR codes or manual fallback codes, build a SoHey identity based on verified meets, view meet history, report or block users, and delete their account.

SoHey is designed around real-world trust and verified interactions.

3. Personal data we collect

We may collect and use the following categories of personal data.

Account information

This may include:

  • Email address
  • Password/authentication data
  • Account ID
  • Signup and login information
  • Authentication status
  • Password reset information

Your password is handled through Supabase Auth and is not stored by us in plain text.

Profile information

This may include:

  • Full name
  • First name and last name
  • Age or date of birth
  • Age confirmation
  • Profile photo or selfie
  • Additional profile photos or selfies
  • Interests
  • Discoverability setting
  • Profile creation and update timestamps

SoHey identity information

This may include:

  • SoHey identity seed
  • Identity version
  • Avatar renderer version
  • Points
  • Identity creation timestamp
  • SoHey identity appearance and progression

SoHey identity and points are used as part of the app’s trust and verification experience. They are not a legal identity document, government identity, financial asset, token, credit score or guarantee of trustworthiness.

Check-in and location information

This may include:

  • Check-in venue or place
  • GPS latitude and longitude
  • GPS accuracy
  • Check-in time
  • Nearby visibility status
  • Derived distance from other nearby users
  • Location information used for meet verification

SoHey does not use background location tracking.

Location is used only while you are actively using relevant app features, such as check-in, nearby discovery or meet verification.

Nearby visibility is time-limited.

Nearby discovery information

This may include:

  • Nearby user discovery results
  • Approximate distance between users
  • Recent check-in status
  • Discoverability state
  • Nearby visibility eligibility

SoHey request information

This may include:

  • Meet requests sent
  • Meet requests received
  • Request status, such as pending, accepted or declined
  • Request distance
  • Request timestamps
  • Seen/opened status
  • Accepted request status

Verified meet information

This may include:

  • Meet ID
  • Meet code
  • QR/manual verification status
  • Verification timestamp
  • Meet place
  • Meet location data
  • Meet direction
  • Points at time of meet
  • Identity snapshot at time of meet
  • Whether another user involved in a meet has deleted their account

SoHey uses server-side verification for meet records.

Device and notification information

This may include:

  • FCM push notification token
  • Platform, such as iOS or Android
  • App build
  • Device label, if available
  • Notification delivery status
  • Notification interaction information

Safety, report and block information

This may include:

  • Reports you submit
  • Reports made about you
  • Report reasons
  • Report details
  • Reported user display name snapshot
  • Block records
  • Safety and moderation information
  • Actions taken in response to reports or safety concerns

Account deletion information

This may include:

  • Deletion request
  • Deletion timestamp
  • Deletion status
  • Deleted account audit/tombstone record
  • Anonymisation status for verified meets

Technical and analytics information

This may include:

  • App events
  • App usage analytics
  • Onboarding events
  • Meet verification events
  • Notification-related events
  • Crash/error logs where available
  • Device and technical logs

Diagnostic information

SoHey uses analytics to understand how the app is used, improve the app, identify issues and support beta testing. SoHey does not use advertising tracking during beta.

Website information

When you use the SoHey website, we may collect limited technical information through WordPress, hosting, security or analytics tools, such as:

  • IP address
  • Browser type
  • Device type
  • Pages visited
  • Date and time of visit
  • Technical logs
  • Cookie or similar information where used

4. Data we do not collect or use

SoHey does not currently:

  • Use background location tracking
  • Sell your personal data
  • Use advertising or marketing tracking
  • Process payments
  • Offer subscriptions or in-app purchases
  • Operate a public social feed
  • Offer in-app messaging
  • Use your Face ID, Touch ID or fingerprint data

SoHey may use your device’s biometric confirmation feature, where available, to support the app experience. This is handled by your device operating system. SoHey does not receive or store your Face ID, Touch ID, fingerprint or device biometric template.

5. How we use your personal data

We use your personal data to operate, provide, secure, test and improve SoHey.

We use account information to:

  • Create and manage your account
  • Authenticate you
  • Allow login and logout
  • Support password reset
  • Protect account security
  • Communicate with you about your account

We use profile information to:

  • Create and display your profile
  • Show relevant profile information to other users where the app allows this
  • Support nearby discovery
  • Support SoHey requests and verified meet flows
  • Allow you to update your profile
  • Apply age eligibility rules

We use location and check-in information to:

  • Enable check-ins
  • Show nearby users
  • Calculate approximate distance
  • Support SoHey requests
  • Verify real-world meets
  • Apply proximity and anti-abuse safeguards
  • Reduce fake or remote verification

We use meet request and verified meet information to:

  • Send, receive, accept and decline SoHey requests
  • Create QR/manual meet sessions
  • Verify real-world meets
  • Record verified meets
  • Update points
  • Display meet history
  • Display meet detail
  • Preserve trust records in anonymised form where appropriate

We use SoHey identity information to:

  • Create and display your SoHey identity
  • Update your points following verified meets
  • Display identity avatars
  • Display identity snapshots from previous verified meets
  • Support the app’s trust and verification experience

We use notification information to:

  • Register your device for push notifications
  • Send meet request notifications
  • Send meet accepted notifications
  • Display in-app notification banners
  • Maintain notification delivery records

We use reports, blocks and safety information to:

  • Allow users to report and block other users
  • Review safety concerns
  • Investigate misuse
  • Enforce our Terms, Beta Terms and Community Guidelines
  • Protect users
  • Prevent unwanted interaction
  • Report serious issues to law enforcement or appropriate authorities where necessary

We use analytics and technical information to:

  • Understand beta usage
  • Improve onboarding
  • Improve app performance
  • Debug errors
  • Identify technical issues
  • Understand whether key app flows are working
  • Maintain security
  • Improve reliability

We use account deletion information to:

  • Process deletion requests
  • Delete or anonymise account data
  • Maintain limited deletion audit records
  • Preserve limited safety, legal or operational records where necessary

6. Our lawful bases for using your personal data

Under UK and EU data protection law, we need a lawful basis to use your personal data.

Depending on the context, we may rely on the following lawful bases.

Contract

We use some personal data because it is necessary to provide SoHey to you under our Terms & Conditions and Beta Terms.

This includes account creation, login, profile operation, check-ins, nearby discovery, SoHey requests, meet verification, meet history, app functionality and account deletion.

Legitimate interests

We use some personal data where it is necessary for our legitimate interests or the legitimate interests of users, provided those interests are not overridden by your rights and freedoms.

This may include safety, security, moderation, fraud prevention, misuse prevention, beta testing, analytics, technical debugging, service improvement, report review, enforcement of terms, and preserving anonymised meet integrity.

Legal obligation

We may use or retain some personal data where necessary to comply with legal obligations.

This may include responding to lawful requests, complying with data protection law, keeping necessary records, or reporting serious safety or legal concerns where required.

Consent

We may rely on consent where required by law or where we ask for your specific permission for a particular purpose.

For example, your device may ask you to grant location, camera, notification or photo access permissions.

You can usually withdraw device permissions through your device settings, although some features may not work without them.

Vital interests

In rare situations, we may use or disclose information where necessary to protect someone’s life or physical safety.

7. Device permissions

SoHey may ask for device permissions to support app features.

Location

Location permission is used for check-ins, nearby discovery and meet verification.

SoHey does not use background location tracking.

Camera

Camera access may be used to scan QR codes for meet verification.

Photos/media

Photo or media access may be used to upload profile photos or selfies.

Notifications

Notification permission may be used to send you relevant app notifications, such as SoHey requests or accepted requests.

Biometric or device authentication

Device biometric or PIN confirmation may be used to support the SoHey verification flow. This is handled locally by your device. SoHey does not receive your biometric template.

You can manage device permissions through your phone settings.

If you disable certain permissions, parts of SoHey may not work properly.

8. Who can see your information in the app

Other users may see certain information depending on how you use SoHey.

This may include:

  • Your name
  • Your age
  • Your profile photo or selfie
  • Your interests
  • Your SoHey identity
  • Your points
  • Your nearby/check-in presence
  • Your approximate distance or nearby status
  • Your SoHey request information where relevant
  • Meet history or meet detail information where you and the other user completed a verified meet
  • Your full account data is not visible to all users

Meet data is visible only to users involved in that verified interaction, subject to deletion and anonymisation rules.

9. Sharing your personal data

We do not sell your personal data.

We do not share your personal data with advertisers.

We may share personal data with service providers who help us operate SoHey.

These may include:

  • Supabase, for authentication, database, storage, backend functions and related infrastructure
  • Firebase/Google FCM, for push notifications
  • PostHog, for app analytics
  • SendGrid, for email alerts and operational email
  • Apple TestFlight and Apple app services, for app testing and distribution
  • Google Play Console and Google app services, for app testing and distribution
  • GoDaddy and WordPress, for website hosting and related website services
  • Google Workspace, for email and business administration
  • Technical, security, legal or professional advisers where necessary

We may also share information where necessary:

  • To comply with law
  • To respond to lawful requests
  • To protect users
  • To protect SoHey
  • To investigate misuse
  • To enforce our terms and policies
  • To report serious safety concerns or illegal activity to law enforcement or appropriate authorities

10. International transfers

SoHey is currently being tested initially in the UK.

Some of our service providers may process personal data outside the UK or European Economic Area.

Where personal data is transferred internationally, we will take steps designed to protect it in accordance with applicable data protection law. This may include using providers with appropriate safeguards, contracts, transfer mechanisms or data protection commitments.

11. How long we keep your personal data

We keep personal data only for as long as we need it for the purposes described in this Privacy Policy, unless we need to keep it longer for legal, safety, security, moderation, audit or dispute purposes.

Account data

We keep your account data while your account is active.

Profile data

We keep your profile data while your account is active, unless you delete or update it sooner.

Profile photos/selfies

We keep your profile photos while your account is active, unless you replace or delete them sooner. When you delete your account, your uploaded selfies are deleted from storage where technically possible.

Check-in and location data

Check-in and location data is used to support nearby discovery and meet verification.

Nearby visibility is time-limited.

Some location information may be stored where needed to support verified meet records, safety, security or app integrity.

Verified meet records

Verified meet records may be retained while the relevant accounts are active.

If you delete your account, your participation in previous verified meets is anonymised. The other user may still see that a verified meet occurred, but your personal details are removed or anonymised.

Safety and report records

Safety reports, block records and moderation information may be retained where necessary for safety, legal, moderation, audit or enforcement purposes.

Deletion records

We may keep limited deletion audit records to show that an account was deleted and to support security, legal or operational integrity.

Analytics and technical logs

Analytics and technical logs may be retained for operational, security, improvement and beta testing purposes. We aim to keep this information only for as long as reasonably necessary.

Backups and logs

Some information may remain temporarily in backups, logs or third-party systems before being deleted, overwritten or anonymised through normal operational processes.

12. Account deletion

You can delete your account from within the SoHey app.

Account deletion is permanent.

When your account is deleted:

  • Your profile information is deleted
  • Your uploaded selfies/photos are deleted from storage where technically possible
  • Your authentication account is deleted
  • Your nearby visibility is removed
  • Your participation in past verified meets is anonymised
  • Your SoHey identity is removed from your active account
  • A limited deletion audit record may be retained
  • Verified meet records may be retained in anonymised form so the other user can retain their own verified meet history
  • Some limited safety, moderation, deletion audit, technical or legal records may be retained where necessary and lawful

For more information, see our Account Deletion page.

13. Your data protection rights

Depending on where you live, you may have rights under UK and/or EU data protection law.

These may include:

  • The right to access your personal data
  • The right to correct inaccurate personal data
  • The right to request deletion of your personal data
  • The right to restrict how we use your personal data
  • The right to object to certain uses of your personal data
  • The right to data portability
  • The right to withdraw consent where we rely on consent
  • The right to complain to a data protection authority
  • These rights may be subject to legal limits or exceptions

To exercise your rights, contact us at:

info@sohey.app

We may need to verify your identity before responding to your request.

14. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to help.

You can contact us at:

info@sohey.app

You also have the right to complain to a data protection authority.

In the UK, this is the Information Commissioner’s Office.

15. Children and age restrictions

SoHey is not intended for users under the age of 18.

Users under 18 are not permitted to use SoHey during beta.

We do not knowingly collect personal data from children.

We may use age confirmation, onboarding checks or other controls to help prevent under-18 access.

If we become aware that a user is under 18, we may suspend or delete the account and take appropriate action.

If you believe that a user is under 18, or if you have any child safety concern, contact us immediately at: info@sohey.app

For more information, see our Child Safety Standards.

16. Security

We use technical and organisational measures designed to protect your personal data.

These include:

  • Authentication controls
  • Backend access controls
  • Row Level Security where appropriate
  • Server-side verification for trust features
  • Secure storage practices
  • Limited access to safety and moderation records
  • Use of trusted service providers
  • Technical safeguards around app and backend functionality

No system is completely secure. You are responsible for keeping your login details safe and telling us if you believe your account has been accessed without permission.

17. Automated decision-making

SoHey does not currently use automated decision-making that produces legal or similarly significant effects about you.

SoHey does use automated app logic to operate features such as nearby discovery, QR verification, request handling, expiry, cooldowns, proximity checks, identity avatar rendering and points updates.

These features are part of the app’s functionality and are designed to support trust, safety and app integrity.

18. Changes to this privacy policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you in the app, by email, on the website, or by asking you to accept updated terms or policies before continuing to use SoHey.

The latest version will be available on our website.

19. Contact us

If you have questions about this Privacy Policy or how we use your personal data, contact:

So Hey Limited
Company number: 09957307
Registered office: Underhill, Keys Lane, Priors Marston, Southam, England CV47 7SA
Email: info@sohey.app

Scroll to Top