Privacy Policy

1. Who we are

Seloa is a queer dating application currently in development. This privacy policy explains how we handle data collected through our waitlist registration form at this website.

Data controller: Direct Intent Ltd, registered in England and Wales, Company No. 17192725, registered address 66 Paul Street, London, EC2A 4NA. You can contact us at privacy@seloa.app.

We are registered with the UK Information Commissioner's Office (ICO) under registration reference ZC148712.

2. What data we collect

• Email address: provided by you when joining the waitlist.
• IP address: captured at the time of submission, used solely as part of our consent audit trail. It is stored in hashed form and never shared.
• Identity and sexual orientation data: as a queer dating application, we process information that may relate to your sexual orientation. This is special category data under UK GDPR Article 9. We treat it with the additional care and protections the law requires.
• Consent record: the date, time, and privacy policy version you agreed to.

3. Why we collect it

We collect your email address to:

• Send you a confirmation email to verify your address (double opt-in).
• Notify you when Seloa launches or reaches significant milestones.
• Occasionally share product updates directly related to Seloa.

We will never use your email for unrelated marketing or sell it to third parties.

4. Legal basis (GDPR)

Our legal basis for processing your data is your explicit consent (Article 6(1)(a) UK GDPR), given when you checked the consent checkbox and submitted the form. Where data relates to sexual orientation, we additionally rely on explicit consent under Article 9(2)(a) UK GDPR. You may withdraw consent at any time by unsubscribing.

5. How long we keep it

We will retain your data until 12 months after Seloa publicly launches, or until you request deletion, whichever comes first. If Seloa does not launch, we will delete all waitlist data within 24 months of this privacy policy's effective date.

6. Third parties

We use the following third-party processors:

• Supabase (database hosting, EU — Frankfurt, Germany): data is stored in a Supabase PostgreSQL database. Supabase processes data under a Data Processing Agreement. No international transfer — covered by the UK's adequacy decision for the EEA.
• Resend (transactional email, US): your email address is passed to Resend solely to deliver confirmation and update emails. Transfers to the US are made under the UK–US Data Bridge or, where applicable, under a UK International Data Transfer Agreement (IDTA).
• Vercel (web hosting, UK — London): this website is hosted on Vercel's UK infrastructure. No international transfer.
• Plausible Analytics (privacy-friendly analytics, EU — Germany): we use Plausible to understand page traffic in aggregate. Plausible does not use cookies, does not collect personal data, and does not track individuals across websites.

We do not use advertising networks, data brokers, or analytics services that track individuals across websites.

7. Your rights

Under GDPR (and equivalent laws), you have the right to:

• Access: request a copy of the data we hold about you.
• Correction: request that we correct inaccurate data.
• Deletion: request that we delete your data entirely.
• Withdrawal of consent: you can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

To exercise any of these rights, email us at privacy@seloa.app. We will respond within 30 days.

Right to complain: you also have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.

8. Security

We apply Row Level Security to our database, meaning no client application can read your data directly. All data mutations go through audited server-side functions. Your email address is stored separately from your consent IP address, and the IP is never exposed in any API response.

9. Changes to this policy

If we make material changes to how we process your data, we will email you in advance with a clear explanation and, where required by law, ask for your fresh consent before the change takes effect. You can withdraw from the waitlist at any time by emailing privacy@seloa.app.

10. Cookies

This website sets a small number of technically necessary cookies required for security (CSRF protection) and session management. We do not use analytics, advertising, or tracking cookies. No cookie consent banner is required for strictly necessary cookies under UK PECR. For convenience, we also store your waitlist position locally in your browser so it can be shown to you on return visits; this is functional storage only, contains no personal data, and is never used for tracking.