Privacy Policy

When you use SurfingUp, we collect the following types of information: **Personal Information:** Name, email address, phone number, and profile photo when you create an account. **Location Data:** Your approximate location to help connect you with nearby hosts and community events. We use location fuzzing technology to protect your exact coordinates. **Usage Data:** Information about how you interact with our platform, including pages visited, features used, and time spent on the app. **Payment Information:** When you purchase coins, we collect payment details processed securely through third-party payment providers. We do not store your credit card information on our servers. **Communications:** Messages sent through our chat feature, and any support requests you submit.

We use the information we collect to: • Provide, maintain, and improve the SurfingUp platform • Connect travelers with hosts and facilitate community interactions • Process transactions and manage your wallet balance • Send you important updates about your account, bookings, and community events • Personalize your experience and show relevant content • Ensure the safety and security of our community • Comply with legal obligations and enforce our terms of service • Analyze usage patterns to improve our features and user experience

We take the security of your data seriously and implement industry-standard measures to protect it: • **Encryption:** All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. • **Access Controls:** Only authorized personnel have access to user data, and all access is logged and monitored. • **Secure Storage:** Personal data is stored in encrypted databases with regular security audits. • **Location Privacy:** We employ location fuzzing technology that adds a random offset to your exact coordinates, ensuring your precise location is never exposed publicly. • **Regular Audits:** We conduct regular security assessments and penetration testing to identify and address vulnerabilities.

We do not sell your personal information to third parties. We may share your information in the following circumstances: • **With Other Users:** Your profile information (name, photo, bio) is visible to other SurfingUp users. Your approximate location is shown to help travelers find nearby hosts. • **Service Providers:** We work with trusted third-party services for payment processing, cloud hosting, and analytics. These providers are contractually obligated to protect your data. • **Legal Requirements:** We may disclose information if required by law, legal process, or government request. • **Safety:** We may share information when we believe it is necessary to prevent fraud, protect safety, or enforce our policies.

You have the following rights regarding your personal data: • **Access:** You can request a copy of the personal data we hold about you. • **Correction:** You can update or correct your profile information at any time through your account settings. • **Deletion:** You can request deletion of your account and associated data by contacting our support team. • **Portability:** You can request your data in a portable format. • **Opt-Out:** You can opt out of non-essential communications through your notification settings. • **Withdraw Consent:** You can withdraw consent for data processing at any time, though this may limit your ability to use certain features.

We use cookies and similar technologies to: • Keep you signed in to your account • Remember your preferences and settings • Analyze platform usage and performance • Provide personalized content You can manage cookie preferences through your browser settings. Disabling cookies may affect your ability to use certain features of the platform.

We retain your personal information for as long as your account is active or as needed to provide you with our services. When you delete your account: • Your profile and personal information are removed within 30 days • Chat messages associated with your account are deleted • Anonymized usage data may be retained for analytics purposes • Certain data may be retained as required by law or for legitimate business purposes (e.g., fraud prevention)