Skip to content

Privacy Policy

Effective: May 22, 2026 · Last updated: August 5, 2026

1. Introduction

Welcome to Sviva Social — a hyper-local social network and circular economy platform built to turn neighbourhoods into verified, trusted communities. Sviva Social is owned and operated by Vicinify Ltd (trading as "Sviva Social"); see our Terms of Service for details.

We believe trust starts with transparency and a minimal data footprint. This policy outlines how we collect, process and safeguard personal data when you use the Sviva Social mobile app, web app and related services (the "Platform").

2. Information we collect

To maintain a verified, high-trust environment without compromising individual privacy, we collect the following:

Account & identity

  • Contact vectors (phone numbers, emails) are converted into one-way cryptographic hashes at ingestion. Raw contact vectors are not stored.
  • Building and unit identifiers are stored encrypted to prevent public association with personal profiles.
  • Optional anonymous handles for privacy-conscious residents.

Location & verification

  • Verified physical building association, used strictly to scope local feeds.
  • Geofence validation logs during initial account verification.
  • Location tagging for civic reports or safety dispatches.

User-generated content

  • Community Shelf items (lending, giveaways).
  • Skill Exchange listings and peer-to-peer bookings.
  • Forum posts, polls, comments and direct messages.
  • User-uploaded media, e.g. lost & found photos.

Technical logs

  • We do not track or monetise IP addresses or persistent device advertising IDs.
  • Standard infrastructure logs transiently process network IP addresses solely for rate limiting, diagnostics and DDoS prevention.

3. Cryptographic protection

Zero raw data exposure. Critical personal identifiers — phone numbers, email addresses and specific unit details — are encrypted or transformed into cryptographic hashes.

This lets Sviva Social confirm building membership and contact discovery without keeping unencrypted personal information in our active database tables.

Verification documents. Files or images submitted to verify residency or identity are used solely for verification and are automatically deleted within 7 days of submission.

Informed Consent: By creating an account, undergoing our neighborhood verification process, or otherwise interacting with the Platform, you provide your explicit, voluntary, and informed consent for the Company to collect, process, manage, and retain your personal data as outlined in this Privacy Policy.

Cross-Border Data Transfers & Adequacy: Data may be processed between the European Union, the United Kingdom, and Israel. The UK and Israel are both recognized by the European Commission as providing an adequate level of data protection under statutory adequacy decisions. Where data involves US-based infrastructure providers, transfers are protected under the EU-U.S. Data Privacy Framework (and UK Extension) and/or Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA).

5. How we use information

  • Residency verification. Restricting building feeds, amenity reservations and local sharing strictly to confirmed residents.
  • Core platform utilities. Facilitating peer skill requests, secure item exchanges via randomised verification codes, and facility bookings.
  • Hyper-local merchants. Nearby shops can post targeted promotions to community feeds. Merchants receive aggregated campaign metrics only; individual resident identities, unit numbers and raw personal information are never shared with or sold to merchants.
  • Platform improvement & analytics. Aggregated, de-identified metrics may be used to study platform performance, reliability, and community engagement. Raw personal data is never shared with third parties for research.

6. Data sharing and third parties

We do not sell, rent or trade your personal information. Limited data is processed under strict boundaries:

  • Building authorities & HOAs. Authorised property management teams receive verified resident rosters and amenity booking calendars required for building safety. Unit details and contact vectors remain encrypted.
  • Cloud Infrastructure & Processors. We host and process Platform data using industry-leading infrastructure providers acting strictly under Data Processing Agreements (DPAs):
    • Supabase Inc.: Primary database hosting, authentication, and core application data.
    • Cloudflare, Inc.: DNS routing, network security/DDoS prevention, edge computing, Cloudflare D1 database, and Cloudflare R2 object storage.
  • Form processing. Enquiries submitted through forms on this website are delivered to us by a third-party form provider acting as a processor.
  • Legal obligations. Information may be disclosed where required by law, legal process or emergency safety dispatch.

7. Your rights and account deletion

In line with applicable app store developer policies, GDPR, CCPA, and Israeli Privacy Protection Regulations, you retain authority over your personal data:

  • Access, update or export your profile information directly in the app.
  • Toggle an Anonymous Persona to hide your identity from neighbour directories while continuing to use community features.
  • Permanent deletion. Delete your account at any time via Settings → Account → Delete Account, or use our account deletion page.

Upon verified deletion, all personal profile records, residency bindings, cryptographic vectors and private messages are permanently erased from active production databases within 30 days. Residual copies may persist in encrypted backups until those backups cycle out in the normal course of business.

8. Hosting, Infrastructure & Security

Sviva Social implements strict access controls so that queries can only read or write records permitted by your verified building or neighbourhood scope. All transmission is secured via HTTPS/TLS and storage is protected with industry-standard encryption at rest.

Storage Locations: All persistent databases, object storage (Cloudflare R2), and localized database partitions (Cloudflare D1) are located in data centers within the European Union (Western Europe).

Edge Routing & Transient Processing: Network traffic and media delivery may be transiently routed and cached through Cloudflare’s global network of edge locations to ensure low latency and security.

9. Child safety and abuse reporting

Sviva Social is an adults-only platform (18+) and has zero tolerance for child sexual abuse and exploitation. Read our full Child Safety Standards & Reporting Policy for details on how to report a concern and how we respond.

10. Contact us & Data Protection Officer

Database Owner & Data Protection Officer: For the purposes of data compliance under both UK/EU frameworks and the Israeli Privacy Protection Regulations, the designated operator of the data processing platform is Vicinify Ltd. If you wish to exercise your legal right to review, amend, or completely delete your information from our database, please contact our designated Data Protection Officer / Database Manager directly at privacy@svivasocial.com.

  • Vicinify Ltd (trading as Sviva Social)
  • Registered in England and Wales · Company Number: 17506342
  • Registered Office: 60, Tottenham Court Road, London, United Kingdom, W1T 2EW
  • Data Protection Officer / Privacy Inquiries: privacy@svivasocial.com