Privacy Policy

Last Updated: November 2025

Online Social Club LLC (“Online,” “I,” “my,” or “me”) operates a platform that helps people stay connected and meet new people by proximity, shared interests, mutual friends, and being Online (the “Service”).

This Privacy Policy explains how I collect, use, share, and protect your information when you use my website, mobile app, or any related service (collectively, the “Platform”). By using the Platform, you agree to this Privacy Policy and our Terms of Service.

Privacy Summary

Who I am
Online helps its users stay connected and meet new people through proximity, shared interests, mutual friends, and being Online.

What I collect
Phone number, age, gender, profile photo, and optional traits
GPS location (used to sort profiles by proximity, not shown publicly)
Contacts (if you give permission) to find friends
Photos you upload and messages you send
Device and usage data (for analytics and crash reports)

How I use it
To operate and improve the app
To connect you with nearby or relevant users
To ensure safety and security
To comply with legal requirements

What I don’t do
I don’t sell or share your personal information for ads
I don’t show your exact location
I don’t monitor private messages

Where data is stored
Securely on AWS servers in the United States.
I use trusted processors (AWS, Twilio, Firebase) under strict agreements.

Your rights
You can access, correct, delete, or export your information by looking at your profile or deleting your profile.

Who can use the app
Only users 18 and older.

Full Privacy Policy

1. Information I Collect

a) Information You Provide

Account Data: Phone number, age, gender, profile photo, and optional traits fields you choose to provide.
Contacts (if authorized): If you choose, I securely access your phone’s contact list to help identify friends already using the Platform. This data is hashed and matched solely for discovery; I do not store your full address book.
User Content: Photos uploaded for profiles and messages users send.
Communications: When you contact support or give feedback.

b) Information I Collect Automatically

Usage Data: App activity, features used, timestamps, performance metrics, and crash reports.
Device Data: IP address, device type, OS version, browser type, and device identifiers.
Location Data: With permission, I collect precise GPS coordinates to sort nearby profiles. Exact coordinates are never shown publicly. You may disable location access at any time in your device settings.
Cookies & SDKs: I use cookies and third-party SDKs (such as Firebase Analytics, AWS Pinpoint, and Crashlytics) to analyze usage, prevent fraud, and improve performance.

c) Information from Third Parties

I may receive limited information from authentication providers (e.g., Apple Sign-In or Google) consistent with their privacy settings.

2. How I Use Information

Provide, operate, and improve the Platform
Personalize discovery and connection features
Maintain safety, security, and integrity
Communicate with you about your account and updates
Comply with legal obligations

I do not sell or share Personal Information for advertising or profiling purposes.

3. Lawful Bases for Processing (EU / UK Users)

Contractual necessity: To deliver the Service you request
Legitimate interests: To improve the Platform and prevent misuse
Consent: For optional features (location, contacts, cookies)
Legal obligation: To comply with applicable laws

4. How I Share Information

Recipient	Purpose	Safeguards
Amazon Web Services (AWS)	Cloud hosting, database storage	Encrypted in transit & at rest (U.S. servers)
Twilio Inc.	SMS verification and messaging	Data processed under Twilio DPA
Analytics Providers (Firebase, Crashlytics)	Usage analytics, crash reporting	Aggregated or pseudonymized data
Legal Authorities	As required by law or to protect rights	Disclosure limited to lawful requests
Business Transfers	Merger, sale, or restructuring	Covered by confidentiality and data protection obligations

5. Data Retention

I retain Personal Information only as long as necessary to provide the Service, meet legal obligations, or resolve disputes. Upon account deletion, Personal Information is permanently deleted or anonymized within 30 days, except where longer retention is legally required.

6. User-Generated Content and Moderation

Content you post (photos, messages, interests) remains yours. By posting, you grant Online Social Club a limited, worldwide, royalty-free license to host, display, and distribute that content solely to operate and improve the Platform.

I do not monitor private messages. Public content may be moderated or removed if it violates our Terms of Service or applicable law.

7. Data Security

Encrypted network transmission (TLS 1.2+)
Encrypted data storage (AES-256 on AWS)
Access controls and staff training
Regular vulnerability assessments

In the event of a data breach, I will notify affected users and regulators within required timeframes.

8. Children’s Privacy

Our Platform is intended for individuals 18 years or older. I do not knowingly collect data from anyone under 18.

9. International Data Transfers

Because I operate in the United States, information may be processed there and in other countries where my processors operate. For transfers from the EU / UK / EEA, I rely on Standard Contractual Clauses (SCCs) and additional safeguards (encryption, access limitation).

10. Your Rights

Access or obtain a copy of your Personal Information
Correct inaccurate information
Delete your account (“Right to Erasure”)
Restrict or object to processing
Port your data to another service
Withdraw consent
Opt out of sale or sharing (California)

To exercise any right, contact matt.otto@online-social-club.com. I will respond within 30 days (45 days for California).

11. Cookies and Tracking Technologies

I use essential and performance cookies/SDKs. You can adjust preferences through your device or browser. Disabling cookies may affect functionality.

12. Business Transfers

If I participate in a merger, acquisition, or sale of assets, your information may be transferred under confidentiality and data-protection obligations consistent with this Privacy Policy.

13. Changes to this Policy

I may update this Privacy Policy periodically. If changes are material, I will notify you by email or in-app notice 30 days before they take effect. Continued use of the Platform after that date constitutes acceptance of the updated Policy.

14. Jurisdiction and Dispute Resolution

This Policy and any disputes arising under it are governed by the laws of the State of New York, USA, except where mandatory rights under EU or UK law apply.