Privacy notice

Who is responsible

Social Universe is the name of this platform. Zebedee Korie Nig LTD, a company registered in Nigeria under registration number RC1729997, operates Social Universe. Social Universe is operated by Zebedee Ejike Korie, an individual.

Data controller: Zebedee Korie Nig LTD is the data controller: the company that operates Social Universe and decides why and how your personal data is processed.

Contact for privacy questions: use the contact form and choose “Privacy and my data”.

Under legal review: the company’s registered address. It will be published here once it is confirmed; until then, contact us as shown above.

Under legal review: whether Zebedee Korie Nig LTD must register with the Nigeria Data Protection Commission (NDPC), appoint a Data Protection Officer, or appoint a representative in the EU under Article 27 of the GDPR. We do not claim any registration, appointment or approval here. Until the review is complete, send any privacy question or request to us as shown above.

The contact form

When you send us a message, we receive your name, your email address, your phone number (if you give it), the topic and your message.

Your message is emailed to the team inbox, and a copy is kept on the platform’s server so that the team can reply to you.

The members area

Account details: when you create an account we keep your name, username, email address, your password (stored only as a one-way hash) and the note you write when you sign up. From the month and year of birth you give at sign-up we keep only the date from which you count as an adult (it reveals your birth month and year), not your birth date, to set up the right protections.

Until you confirm your email address, your sign-up is kept as a pending sign-up, with your IP address and the note you wrote. It is removed when you confirm. If you do not confirm, the link is valid for 3 days; after that it stops working and the pending sign-up is deleted the next time anyone signs up.

What you share: your profile, posts, photos, comments and anything else you add, shown to the audience you choose.

Private messages are end-to-end encrypted: only the people in the conversation can read them. The server stores the encrypted text and the information it needs to deliver messages: who is in each conversation, who sent each message and when, the size of messages and attachments, and when members read them. It cannot see what messages say. If you report a message, you choose to send its content to the moderators.

Sign-in and security records: each sign-in and other security events (for example a password change) are recorded with your IP address. They help us keep your account and other members safe from misuse.

System emails: we use your email address to confirm it, to reset your password and to tell you about new sign-ins and other account events. The emails you receive are set in Settings.

Where your data is stored and who processes it

Hosting: the website, the members area, the database, uploaded photos and backups are hosted by Amazon Web Services (AWS) on servers in Stockholm, Sweden, in the EU.

Email: system emails are sent through Zoho ZeptoMail, from its EU service. Email sent to our support and privacy addresses is forwarded by ImprovMX to the operator’s Gmail (Google) mailbox, where it is read and answered.

We do not use advertising, tracking or analytics services.

Under legal review: the legal basis for transferring personal data from Nigeria to these providers and to the EU, and the agreements with each of them. Until the review is complete, send any question about this to us as shown under “Who is responsible”.

How long we keep your data

Your account and what you share: until you delete them or delete your account. Pending sign-ups: until you confirm, or until the confirmation link expires (3 days).

Sign-in and security records: one year. Error records in the database: 90 days.

Server logs: we keep web server access logs, which contain IP addresses, for up to 14 days, and server error logs, which may contain IP addresses, for up to 30 days.

Backups: we keep database backups for up to 35 days, and the first-of-month copy for up to 90 days. We keep daily disk snapshots for 7 days, and a snapshot taken before a release until we delete it. Data you delete stays in backups and snapshots until they expire or are deleted.

After an account is deleted, an anonymous record of it stays, so that moderation and audit records still make sense. The staff audit log is never deleted.

Under legal review: whether each of these periods is right, and how long copies of contact-form messages are kept. Until the review is complete, you can ask us to delete a message you sent us as shown under “Who is responsible”.

Cookies

We use only the cookies the site needs to work: the sign-in cookie that keeps members signed in, and two small safety cookies. We do not use advertising or tracking cookies, and we do not use any analytics or visitor-counting service.

The Cookie Policy (/cookies/) lists every cookie and what the site keeps in your browser, and why.

What you see is your choice

We do not build a hidden behavioural profile of you, and no machine decides on its own what you see or who you meet. Sorting, filtering and search follow rules you can read.

Deleting your posts and your account

Members can delete their own posts at any time: open the post’s menu and choose “Delete post”.

To delete your whole account, sign in, open Settings, then Account, choose “Delete my account…”, type your password and choose “Delete for good”. This removes your posts, photos, friends, bookmarks, chats and personal details for good and signs you out; other members see “Deleted member” where your name was. It cannot be undone.

Your requests and rights

You can see and correct most of your details yourself, in Settings and on your profile, and you can delete your posts and your account at any time.

For any other request about your personal data (for example a copy of it, a correction, deletion, or an objection to a use of it), contact us: use the contact form and choose “Privacy and my data”. We reply by email.

Under legal review: the legal basis for each use of personal data, and the full list of data-protection rights that apply to you under the Nigeria Data Protection Act 2023 and, where it applies, the GDPR. Until the review is complete, send any request to us as shown above.

You can also complain to a data protection authority: in Nigeria, the Nigeria Data Protection Commission (NDPC); in the EU, the authority in your country.

Teens

The minimum age to join is set by the platform: 13 by default. Members under 18 get stronger protections: their posts go to friends by default, only their friends can follow or mention them, they review tags of themselves, and adults they do not know cannot contact them freely.

We do not sell your information

We never sell or rent your information to anyone, and we do not share it with advertisers.

Changes to this notice

When this notice changes, the new version is published on this page with its date. Last updated: 30 October 2026.