Privacy policy

Updated: August 2026

1. Controller

The person responsible for data processing in this app is:

Bastian Schertel
E-Mail: bastian.schertel@proton.me

SoDi is a private, non-commercial project. The app is free, contains no advertising, and has no in-app purchases.

2. Data we process

Account data

A user account is required to use SoDi. During registration we process your email address, display name, and password. Your password is stored securely and cannot be viewed by us.

Alternatively, you can sign in with Google, Facebook, or Apple. We then receive your email address and name from that provider. With Sign in with Apple, you can hide your email address; we receive an anonymous relay address instead.

Legal basis: Art. 6(1)(b) GDPR.

Your event search details

For each search, we process the city, date, optional time, your mood answers, and whether you are planning alone or with friends. You provide this information voluntarily; without it, the app cannot create a recommendation.

Legal basis: Art. 6(1)(b) GDPR.

In-app usage data

We store which events you viewed, opened, or shared, along with planning sessions with friends. This creates your personal in-app history.

Legal basis: Art. 6(1)(b) GDPR.

Location data

SoDi does not access your device’s GPS location. You enter the city yourself or choose it from a list.

3. Where your data goes

SoDi runs on the Base44 platform provided by Wix.com Ltd. Wix is our processor under Art. 28 GDPR. Base44 uses the following subprocessors:

ServiceLocationPurpose
MongoDBUSAStorage of app data
RenderUSAServer operation
SupabaseUSAStorage of media files
SendGridUSAEmail delivery, such as password reset messages
Google CloudUSAUsage analytics
OpenAIUSALanguage model for recommendations
AnthropicUSALanguage model for recommendations
DataDogUSATechnical logging
Wix.com Ltd.IsraelPlatform operation and improvement

The current list is available at https://base44.com/dpa/exhibitc

How SoDi finds events

Event suggestions are created by a language model that performs a general web search for your request. Your city, date, and mood answers are transmitted. We do not use a ticketing interface or weather service.

Preview images

If an event has its own website, SoDi retrieves it from the server and reads the preview image from its Open Graph metadata. No data about you is sent to that website — the request comes from our server, not your device.

Third-party sign-in

When you sign in with Google, Facebook, or Apple, we receive your email address and name from that provider. With Sign in with Apple, you can hide your email address; we receive an anonymous relay address instead.

Transfers to the United States

Your data is stored and processed in the United States. Storage exclusively within the EU is not possible on this platform. Transfers are based on the EU Standard Contractual Clauses (Modules 2 and 3, Implementing Decision (EU) 2021/914) and the EU–US Data Privacy Framework. Israel is covered by a European Commission adequacy decision.

You should know that US authorities may in certain circumstances request access to data stored by US providers, and legal protection may not meet European standards.

Your mood answers and language models

To create a recommendation, SoDi sends your city, date, and mood answers to a language model from OpenAI or Anthropic. Do not enter anything in free-text fields that you do not want to share — especially health data, information about other people, or anything that directly identifies you.

4. No automated decisions with legal effect

Event suggestions are generated automatically. They are recommendations with no legal effect; there is no automated decision-making under Art. 22 GDPR.

5. Retention period

Your data remains stored while your account exists. To delete your account, write to bastian.schertel@proton.me. We will delete your account and related data unless legal retention obligations apply.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). You may withdraw consent at any time without giving a reason.

Contact bastian.schertel@proton.me for this.

You may also lodge a complaint with a data protection authority. The competent authority is the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.

7. No sharing for advertising

We do not sell your data, share it for advertising, or use it to track you across apps or websites.

8. Changes

We update this notice when the app changes. The current version is always available at this address.

What makes SoDi different and why I built it

For every mood and every day, SoDi looks for the experience that fits us best right now.

Wherever we are, SoDi discovers events we might otherwise have missed.

Rate, like, share. Every response helps SoDi make better recommendations over time.

Concerts, exhibitions, markets, and more gradually reveal what truly inspires us.

Over time, SoDi learns your interests while you transparently decide what may be stored and what may not.

One question stays at the heart of it: what will our next great moment be?

Not everything about this project can be captured in words and data; some things belong to just one person.

Letting the moment carry us together and being able to say, “I’m glad we did it this way” — that is what SoDi stands for.