Privacy Policy
Last updated: draft — not yet published
This is a generic placeholder drafted to unblock development and app-store submission requirements — it is not legal advice. Have a qualified lawyer review and finalize this document (including GDPR/CCPA-style disclosures relevant to where you actually launch) before Selat is genuinely available to the public.
1. Information we collect
Account info you provide directly: name, gender, email or mobile number, password (stored as a salted hash, never in plain text), and optionally birth date, marital status, and a profile photo. Content you create: posts, photos and videos, messages, comments, events, and other items you add. Relationship data: the family, relative, and friend connections you and others confirm. Device info: a push-notification token if you enable notifications.
2. How we use it
To operate the Service — showing your content to the audience you choose, delivering notifications, and enabling features like the family tree, shared budget, and chat. We do not sell your personal information to third parties or use it for advertising.
3. Who can see your information
Only people you're connected to on Selat — the family circles, relatives, and friends you add or approve — per the audience you choose for each piece of content. Selat staff may access data only as needed to operate, secure, or troubleshoot the Service.
4. Third-party services
We use Resend to deliver verification and notification emails, and Firebase Cloud Messaging to deliver push notifications. These providers process the minimum data needed (your email address, or a device push token) solely to deliver those messages.
5. Data retention
We keep your data while your account is active. If you delete your account, your personal profile information is permanently removed; some shared content you contributed to (like messages in a family group chat) may be retained so it isn't corrupted for other family members, but is no longer linked to your identity. See our Terms of Service for details.
6. Your rights
You can access and edit most of your information directly in the app (Profile, Settings). From Settings, you can download a copy of the content you've created (a data export, satisfying GDPR's right to portability and CCPA's right to know) and delete your account at any time. Depending on where you live, you may have additional rights (correction, or a formal erasure request beyond self-service deletion) — contact us to exercise them.
7. Children's privacy
Selat verifies date of birth at signup and does not allow anyone under 13 to create their own account, consistent with COPPA. A parent or guardian can still represent a younger family member as a managed profile within their own account (e.g. the family tree or baby milestones) without that child ever holding their own account, login, or credentials.
8. Security
We use industry-standard measures (password hashing, encrypted connections, access controls) to protect your data, but no system is perfectly secure. Contact us immediately if you suspect unauthorized access to your account.
9. Changes to this policy
We may update this policy from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
10. Contact
Questions about this policy or your data can be sent to the app's support contact (to be added).