Privacy Policy
Last updated: May 25, 2026
dabbly ("we," "us," or "our") operates the dabbly mobile application and the website at dabbly.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service.
We are committed to protecting your privacy in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA") and other applicable data protection laws.
1. Who We Are
dabbly is operated by Jax Masato, based in Singapore. For any questions about this Privacy Policy or your personal data, contact us at:
Email: privacy@dabbly.app
Website: dabbly.app
2. Data We Collect
2.1 Information You Provide
Account information. When you create an account, we collect your name, email address, date of birth, and gender. This information is required to use the Service.
Profile information. You may upload photos to your profile. Photos are stored securely and are only visible to other event attendees as described in Section 3.
Event participation. When you join an event, we record your registration and attendance. After each event, we collect your private ratings of other attendees (Skip, Friends, or Spark).
Messages. If you and another user are connected through a mutual match, we store the messages you exchange through our in app chat feature.
Payment information. If you purchase premium features, we collect payment details through our third party payment processor. We do not store your full credit card number on our servers.
2.2 Information Collected Automatically
Location data. With your permission, we collect your approximate location to show you events happening near you. You can disable location access in your device settings at any time. The Service will still work, but event recommendations may be less relevant.
Device information. We collect your device type, operating system, app version, and a unique device identifier for troubleshooting and analytics purposes.
Usage data. We collect information about how you use the Service, including pages viewed, features used, events browsed, and interaction patterns. This helps us improve the product.
2.3 Information from Third Parties
If you sign in using a third party service (such as Google or Apple), we receive your name and email address from that provider. We do not access your contacts, social media profiles, or other data from these services.
3. How We Use Your Data
We use your personal data for the following purposes:
To provide the Service. Creating your account, showing you events, processing event signups, facilitating the matching process (Skip, Friends, Spark), and enabling chat between mutual connections.
To protect user safety. The matching mechanic is designed so that your interest in another person is never revealed unless it is mutual. Skip and Friends selections are never shared with the other person. Only mutual Spark selections result in a connection.
To process payments. Charging for premium features when applicable.
To improve the Service. Analyzing usage patterns, testing new features, fixing bugs, and understanding which activities are most popular.
To communicate with you. Sending event reminders, match notifications, product updates, and responding to your inquiries. You can opt out of non essential communications at any time.
To comply with legal obligations. Meeting our obligations under Singapore law, including the PDPA.
4. How We Share Your Data
With other users. Your first name and profile photo are visible to other attendees of events you join. Your post event ratings (Skip, Friends, Spark) are never shared unless mutual. If you and another user both select Spark, both of you will be notified and connected.
With service providers. We use the following third party services to operate dabbly:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage, real time messaging | Account data, profile photos, messages, event data |
| Mixpanel | Product analytics and funnel analysis | Anonymized usage events, device info |
| PostHog | Session replay and feature flags | Anonymized usage events, device info |
| Mapbox | Event location maps | Approximate location (when maps are viewed) |
| Expo | Push notifications and app distribution | Device tokens, app version |
With payment processors. If you make a purchase, your payment information is handled directly by our payment processor. We receive confirmation of payment but do not have access to your full payment details.
With law enforcement. We may disclose your data if required by law, court order, or government request, or if we believe disclosure is necessary to protect the safety of our users or the public.
We do not sell your personal data. We will never sell, rent, or trade your personal information to advertisers or data brokers.
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account:
- Immediately deleted: Your profile, photos, and preferences.
- Deleted within 30 days: Your messages, event history, and match records.
- Retained for up to 12 months: Anonymized analytics data and any records we are required to keep for legal or safety purposes (such as reports of misconduct).
- Retained indefinitely: Fully anonymized, aggregated data that cannot be linked back to you (such as total event attendance counts).
6. Your Rights Under the PDPA
Under the Singapore Personal Data Protection Act, you have the right to:
Access. Request a copy of the personal data we hold about you.
Correction. Request that we correct any inaccurate or incomplete data.
Withdrawal of consent. Withdraw your consent for us to collect, use, or disclose your data. Note that withdrawing consent for essential data processing may mean you can no longer use the Service.
To exercise any of these rights, email us at privacy@dabbly.app. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
Encryption of data in transit (TLS/SSL) and at rest. Secure authentication with password hashing. Row level security policies on our database to ensure users can only access their own data. Regular security reviews of our infrastructure.
No system is completely secure. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities as required by law.
8. International Data Transfers
Our primary database is hosted by Supabase. Your data may be stored and processed in data centers outside of Singapore. Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with the PDPA.
9. Children's Privacy
dabbly is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a person under 18, we will delete that data promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.
Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: privacy@dabbly.app
Website: dabbly.app
For complaints related to data protection, you may also contact the Personal Data Protection Commission (PDPC) of Singapore at pdpc.gov.sg.