Privacy Policy

1. Who we are

Seloa is a queer dating application currently in development. This privacy policy explains how we handle data collected through our waitlist registration form at this website.

Data controller: Direct Intent Ltd, registered in England and Wales, Company No. 17192725, registered address 66 Paul Street, London, EC2A 4NA. You can contact us at privacy@seloa.app.

We are registered with the UK Information Commissioner's Office (ICO) as a data controller under registration reference ZC148712. You can verify this entry directly on the ICO's public register.

2. What data we collect

• Email address: provided by you when joining the waitlist.
• IP address: captured at the time of submission, used solely as part of our consent audit trail. It is stored in hashed form and never shared.
• Region: optionally provided by you at signup (e.g. Scotland, London). This is used solely to understand geographic demand and plan our city-by-city launch. It is never sold or shared. If you click the location detection button, your browser will request permission to share your precise location. We receive these coordinates solely to map them to a broad region label — the raw coordinates are never stored or transmitted.
• Identity and sexual orientation data: as a queer dating application, we process information that may relate to your sexual orientation. This is special category data under UK GDPR Article 9. We treat it with the additional care and protections the law requires.
• Consent record: the date, time, and privacy policy version you agreed to.

3. Why we collect it

We collect your email address to:

• Send you a confirmation email to verify your address (double opt-in).
• Notify you when Seloa launches or reaches significant milestones.
• Occasionally share product updates directly related to Seloa.

We will never use your email for unrelated marketing or sell it to third parties.

4. Legal basis (GDPR)

Our legal basis for processing your data is your explicit consent (Article 6(1)(a) UK GDPR), given when you checked the consent checkbox and submitted the form. Where data relates to sexual orientation, we additionally rely on explicit consent under Article 9(2)(a) UK GDPR. You may withdraw consent at any time by unsubscribing.

5. How long we keep it

We will retain your data until 12 months after Seloa publicly launches, or until you request deletion, whichever comes first. If Seloadoes not launch, we will delete all waitlist data within 24 months of this privacy policy's effective date.

6. Third parties

We use the following third-party processors:

• Supabase(database hosting, EU — Frankfurt, Germany): data is stored in a Supabase PostgreSQL database. Supabase processes data under a Data Processing Agreement. No international transfer — covered by the UK's adequacy decision for the EEA.
• Resend(transactional email, US): your email address is passed to Resend solely to deliver confirmation and update emails. Transfers to the US are made under the UK–US Data Bridge (Resend is certified under the UK Extension to the EU–US Data Privacy Framework) or, where applicable, under a UK International Data Transfer Agreement (IDTA).
• Vercel(web hosting, UK — London): this website is hosted on Vercel's UK infrastructure. No international transfer.

We do not use advertising networks, data brokers, or analytics services that track individuals across websites.

7. Your rights

Under GDPR (and equivalent laws), you have the right to:

• Access: request a copy of the data we hold about you.
• Correction: request that we correct inaccurate data.
• Deletion: request that we delete your data entirely.
• Withdrawal of consent: you can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

To exercise any of these rights, email us at privacy@seloa.app. We will respond within 30 days.

Right to complain:you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint if you believe we have mishandled your data. We would welcome the opportunity to resolve any concerns directly first.

8. Security

We apply Row Level Security to our database, meaning no client application can read your data directly. All data mutations go through audited server-side functions. Your email address is stored separately from your consent IP address, and the IP is never exposed in any API response.

9. Changes to this policy

If we make material changes to how we process your data, we will email you in advance with a clear explanation and, where required by law, ask for your fresh consent before the change takes effect. You can withdraw from the waitlist at any time by emailing privacy@seloa.app.

10. Cookies

This website sets a small number of technically necessary cookies required for security (CSRF protection) and session management. We do not use analytics, advertising, or tracking cookies, and we do not track individuals across websites. No cookie consent banner is required for strictly necessary cookies under UK PECR, but we disclose their presence here for transparency. For convenience, we also store your waitlist position locally in your browser so it can be shown to you on return visits; this is functional storage only, contains no personal data, and is never used for tracking. If we add any non-essential cookies in future, we will update this section and obtain your consent first.