This Privacy Policy explains how Dabble ("we", "us", "our") collects, uses, and protects your personal information when you use the Dabble mobile application and related services (collectively, the "Service"). Dabble is a marketplace that connects users with creative class studios across Klang Valley, Malaysia.
1. Information we collect
We collect the following categories of information:
- Account information: your name, email address, password (stored encrypted), and optionally your phone number and profile photo.
- Preferences: the categories of classes you're interested in and preferred neighbourhoods, which you provide during onboarding.
- Location: if you grant permission, we use your approximate location to show travel times and nearby studios. Location is not stored on our servers — it's used only while the app is open.
- Booking and transaction history: classes you book, subscriptions you purchase, credits spent or refunded, and reviews you leave.
- Payment information: handled entirely by our payment processor, Stripe. We never see or store your full card number, CVV, or expiry date. We retain only a Stripe customer ID linked to your account.
- Device information: device model, OS version, app version, and a push notification token (if you grant permission).
- Usage data: anonymised events such as screens viewed, classes browsed, and features used, to help us improve the app.
2. How we use your information
- To create and maintain your account
- To process bookings, payments, refunds, and payouts to studios
- To show you classes and studios relevant to your preferences and location
- To send you booking reminders, class cancellation notices, and marketing notifications (which you can turn off)
- To prevent fraud, investigate abuse, and enforce our Terms of Service
- To improve the app through aggregated, anonymised analytics
3. Who we share your information with
We do not sell your personal information. We share limited data with the following service providers, who are contractually bound to handle it securely:
- Supabase — our backend infrastructure provider (database, authentication, storage)
- Stripe — payment processing
- Expo — push notification delivery
- Studios listed in Dabble — we share your name and booking details with the studio you've booked with, so they can welcome you to class
- Law enforcement — only if legally compelled
4. Your rights
You have the right to:
- Access a copy of the personal data we hold about you
- Correct any inaccuracies in your profile
- Request deletion of your account and associated data (subject to financial record-keeping obligations for completed transactions)
- Withdraw consent for marketing communications at any time
- Lodge a complaint with the Personal Data Protection Department of Malaysia (PDPD)
To exercise any of these rights, email hello@dabble.my and we'll respond within 14 days.
5. Data retention
We keep your account information for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except for:
- Transaction records (retained for 7 years for tax and financial reporting)
- Anonymised analytics (retained indefinitely, no longer linked to you)
6. Security
We use industry-standard practices to protect your data: TLS encryption in transit, encryption at rest, row-level security policies on our database, and least-privilege access controls for our team. No system is 100% secure, but we take reasonable precautions to prevent unauthorised access.
7. Children
Dabble is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we'll delete it.
8. International transfers
Some of our service providers (Supabase, Stripe, Expo) may process your data outside Malaysia, including in the United States and the European Union. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top and, for significant changes, notify you in-app. Continued use of Dabble after changes means you accept the updated policy.
10. Contact us
Questions, requests, or concerns? Email hello@dabble.my.