Seapull Privacy Policy
Effective date: October 19, 2026 · Last updated: October 22, 2026
Seapull is operated by Tosemum Holdings LLC, based in Arizona, USA ("Seapull," "we," "us"). This policy explains what personal information we collect through the Seapull mobile app and the seapull.com website, how we use it, who we share it with, and the choices you have.
Seapull is for adults 18 and older.
Questions or requests: privacy@seapull.com.
Plain-language summary up front: we don't sell your data, we don't run ads, and other users can never see your exact location, only a coarse distance range. The details below say exactly what we store and why.
1. What we collect
Information you provide
- Name: the display name you choose (up to 40 characters).
- Email address: used to create and sign in to your account, and for service email such as password-reset codes. Passwords are handled by our authentication provider and stored only as a cryptographic hash. We cannot see them.
- Date of birth: used to verify you are 18 or older and to show your age. Your birthday itself is never shown to other users, only your age.
- Gender: woman, man, nonbinary, or other.
- Pronouns and display term (optional): if you add them, they are shown next to your name. You can remove either at any time.
- Who you're interested in meeting: the genders you want to see in Discover. Because this can indicate sexual orientation, it is used solely to decide who appears in whose Discover feed and is shown to nobody.
- Photos: up to 6 profile photos, stored in a private storage bucket and shown only to signed-in Seapull users who can view your profile under our matching rules. Each photo is automatically screened for explicit or violent content when uploaded (see section 5).
- Approximate location: your city or area and a geographic point for it, plus your chosen discovery radius (1 to 50 miles, or 2 to 80 km, in the app). When you set your location, the app asks for the operating system's foreground location permission and, if you allow it, reads your device position once to suggest a nearby city. You can decline and pick a city by hand. What we save is the point for the city or area you confirm, not your live device position. We never track location in the background. See section 3 for how location is protected.
- Activities and preferences: your activities (chosen from our catalog of 24), your intensity level, your typical availability, and a short bio (up to 500 characters).
- Messages: the messages you send in Seapull conversations (up to 2,000 characters each), with timestamps and whether each message was sent before or after a match.
Your gender, who you are interested in, and any pronouns or display term you add may reveal your sexual orientation or gender identity. We use them only to show and match profiles, and we never sell them. You can change your gender and who you are interested in at any time, remove your pronouns or display term whenever you like, and deleting your account erases all of them.
Information generated as you use Seapull
- Activity signals: who you like (including super-likes), who you pass on, your matches and unmatches, your conversations (including a preview of the last message used to render your chat list), your per-conversation "read up to here" markers, and a "last active" timestamp updated when you open the app.
- Safety records: blocks you create, and reports you file or that are filed about you. A report holds the reason and any details the reporting member gives, and we may review the messages in the conversation between the two members.
- Verification status: whether your profile is unverified, pending, verified, or rejected. Profile verification is not yet offered; every account is currently unverified.
- Account tier: free or premium. Payments are not live; see section 5.
- Device or other IDs: a random install identifier generated by the app on your device. It is not your advertising ID, phone number, or hardware serial; it only lets us replace an old notification token from the same device instead of accumulating stale ones.
- Push notification tokens: if you allow notifications, the push token issued for your device, the platform (iOS or Android), and whether notifications are switched on. We use it to notify you about new matches, messages, and intros. You can turn notifications off in the app or in your OS settings at any time.
- Technical logs: our infrastructure providers keep standard server logs (such as IP address and request metadata) needed to operate and secure the service. A login session token is stored on your device so you stay signed in.
Information from other members
We may also receive information about you from other members, for example when someone reports you or sends you a message. We use it only for the purposes in section 2.
What we do NOT collect
No advertising SDKs, no third-party analytics SDKs, no contact-list access, no background location tracking, no precise location stored, and no data brokers. If any of that ever changes, this policy changes first.
2. How we use your information
- Matching and discovery: your activities, intensity, availability, age, gender, who you're interested in, and coarse distance feed the compatibility score and determine who you see and who sees you. Matching filters run on our servers; other users receive only the limited profile fields listed in section 4.
- Chat: delivering your messages to your match, in real time, and notifying you when you receive one.
- Safety and moderation: operating block and report tools, screening photos, reviewing reported content, enforcing the 18+ rule, and preventing abuse (for example, daily like limits).
- Service email: account emails such as password-reset codes. No marketing email without separate consent.
- Legal: complying with law and responding to valid legal process.
We do not sell your personal data. We do not share it with advertisers. Seapull shows no ads.
3. Location: exactly how it works
Location privacy is engineered into Seapull's database, not just promised:
- Your stored coordinates never leave our servers and are never sent to another user in any form.
- Every distance another user sees is computed between grid-snapped points (a fixed grid of roughly 1.4-mile (2.3 km) cells), and then shown only as a coarse band: "within 2 mi" (under 3 km), "2 to 5 mi" (3 to 8 km), "5 to 10 mi" (8 to 16 km), "10 to 25 mi" (16 to 40 km), or "25+ mi" (40+ km).
- Because distances are computed from snapped cells and shown as bands, another user cannot narrow down your location by repeatedly querying from different positions.
- Direction indicators on the map screen are decorative, not your real bearing.
- Only people within a mutually compatible discovery radius can see you at all.
You control your discovery radius in the app. Deleting your account removes your stored location entirely (section 7).
4. What other users can see
Other signed-in users who pass the mutual matching rules can see: your display name, age (not birthday), gender, any pronouns or display term you add, bio, activities, intensity, availability, city, verification status, whether you were recently active, your photos, and a coarse distance band. They can never see: your email, birthday, who you're interested in, exact location or coordinates, who else you've liked, passed, or matched, your reports or blocks, or your settings.
5. Service providers (processors)
We share data only with the services that run Seapull, and only what each needs:
| Provider | What it does | What it handles |
|---|---|---|
| Supabase (hosted on AWS in the US West, Oregon, region) | Database, authentication, file storage, realtime message delivery, and the server functions that run deletion, photo screening, and notification sending | All app data described above; passwords as hashes; standard server logs |
| Firebase Cloud Messaging (Google) and Apple Push Notification service, reached through the Expo push service | Delivering push notifications to Android and iOS devices | Your push token and the notification text (for example, "It's a match!" or "New message from" a first name) |
| Expo (EAS) | Delivering app updates to your device (EAS Update) and relaying push notifications to Apple and Google | Standard request data when the app checks for an update (such as IP address, platform, and app version, plus a random identifier the update system creates on your device); your push token and the notification text |
| Resend | Transactional email delivery (password-reset codes and other service email) | Your email address and the content of those service emails |
| Cloudflare | Hosting and network protection for the seapull.com website | Standard visitor logs (such as IP address and request metadata) when you visit the website |
| Google Cloud Vision | Automated screening of uploaded profile photos for explicit or violent content | The photo image, sent once at upload; Google returns likelihood scores and we store only those scores |
| Apple (App Store) and Google (Google Play) | Distributing the app and its store updates, and showing the optional in-app rating prompt | Your store account, downloads, and any rating you leave, under Apple's and Google's own privacy policies; we receive only aggregate statistics and diagnostic reports from them |
Not yet in use: payment processing (Stripe) is planned for a future premium tier. It will be added here before any payment feature ships.
We may also disclose information if required by valid legal process, or where necessary to investigate safety threats, fraud, or violations of our Terms.
6. Data retention
We keep your information while your account is open, so the service works. When you delete your account, almost all of it is deleted at once (section 7). This table lists what we keep, for how long, and why.
| What we keep | For how long | Why |
|---|---|---|
| Your profile, photos, messages, activity signals, and notification tokens | While your account is open. Deleted when you delete your account, except the items below. | To run the service. Notification tokens are kept so you can switch notifications off and on without a new system prompt. |
| Report evidence: the messages you sent in a chat with someone who has reported you, any message a report points to, and any photo that a report still open or under review points to | Until 2 years after you delete your account, longer only while a report by or about you is still open | So that deleting an account cannot be used to escape a report |
| Reports about you, and blocks other members made against you | Until 2 years after you delete your account, longer only while a report by or about you is still open | So that deleting an account can never erase an abuse case |
| The other member's own messages in chats you were in | Until 2 years after you delete your account, longer only while a report by or about you is still open | So the other member keeps their own conversation history |
| A closed account record: an empty profile with the date you deleted your account, the record of which consent you gave and when, and a sign-in record whose email address has been replaced with a one-way scrambled value | Until 2 years after you delete your account, longer only while a report by or about you is still open | It links the items above until they are deleted, and records that you consented |
| Reports you filed | Until 2 years after the member you reported deletes their account, longer only while a report by or about them is still open. From 2 years after you delete yours, they are no longer linked to you. | So a case you reported can still be reviewed |
| Only if we removed your account for breaking our Terms: a one-way hash of your email address, never the address itself | 2 years after the account was closed | So the same email address cannot be used to sign up again |
| Server logs kept by our infrastructure providers | Per our providers' default schedules | To operate and secure the service |
Anything kept until 2 years after a deletion is erased at our monthly clean-up after that date, so within a month of it.
We may keep an account's data, photos included, past its normal deletion only while a valid legal request or investigation requires it, and delete it when that ends.
7. Deleting your account: what actually happens
You can delete your account in the app (Profile tab, then Account, then Delete account), where it runs immediately, or by email (below). Deletion cannot be undone and happens in three steps, in this order:
- Your account data, in one step: your profile is wiped: display name, bio, date of birth, gender, pronouns, display term, who you're interested in, activities, availability, intensity, city, and location. You disappear from Discover, the map, and Matches at once. Your likes and passes, given and received, are deleted, and so are your "read up to here" markers, your notification tokens, and the blocks you made. Your matches are closed for good. The messages you sent are deleted from every chat, except report evidence (section 6), and no chat preview shows your words any more. All of this happens together or not at all.
- Photos: your photo records and files are deleted from storage, except a photo that a report still open or under review points to.
- Sign-in: the details saved when you signed up (such as your app language) are cleared, your email address is replaced in our sign-in records with a one-way scrambled value, your sign-in methods are removed, and you are signed out on every device. Your email address is free again at once: you can use it to create a brand-new account.
What is kept, and why: only what the table in section 6 lists. In short: report evidence, reports about you, blocks against you, the other member's own messages in your chats, and a closed account record, each until 2 years after you delete your account (longer only while a report by or about you is still open), then erased for good. If we removed your account for breaking our Terms, we also keep a one-way hash of your email address for 2 years, so it cannot be used to sign up again.
A fuller description is on our Account Deletion page. If you cannot sign in, email privacy@seapull.com from the address on the account and we will run the same deletion. If you want a specific erasure beyond this, email us too: we will handle it individually unless a safety or legal hold applies.
8. Your rights and choices
- Access and correction: view and edit your profile data directly in the app.
- Deletion: in-app (above) or by emailing privacy@seapull.com.
- Location: control your radius in-app; control the device-level location permission in your OS settings. Declining the permission does not stop you using Seapull; you pick a city by hand instead.
- Notifications: switch them off in the app's Notifications settings or in your OS settings.
- Email: transactional email is required to operate your account.
- We honor these rights for everyone regardless of state. California residents: we do not sell or "share" (for cross-context ads) personal information; the rights above cover CCPA-style access and deletion requests.
9. Age policy: 18+
Seapull is for adults 18 and older. The date-of-birth check is enforced both in the app and in the database itself (a profile with an under-18 birthday cannot exist). "Underage" is a first-class report reason; verified underage accounts are removed along with their data. We do not knowingly collect any data from anyone under 18.
10. Security
All traffic is encrypted in transit (TLS). Every database table is protected by row-level security. Messages are shown in the app only to the two people in the conversation. Authorized staff may read a conversation only to review a report about it or when the law requires it. Unauthenticated access to user data is fully revoked. Passwords are hashed. Location protections are described in section 3. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.
11. Changes
We'll update this policy as Seapull grows (for example, when payments, verification, or venue suggestions ship). We will update the date at the top and, where the law requires, email you before a change takes effect.
12. International users
Seapull is operated from the United States by Tosemum Holdings LLC. Your information is stored in the United States. Some of the service providers in section 5, such as Cloudflare and Google, may also process it in other countries to deliver the service. Providers that act on our behalf are bound by contracts that require them to protect your information to a standard comparable to this policy and the law where you live. Apple and Google handle app store and push notification data under their own privacy policies. Authorities in the United States may be able to access information held there under US law.
New Zealand
- Privacy Officer: privacy@seapull.com
- You can ask to access or correct your information. We respond within 20 working days.
- If a privacy breach is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected as soon as practicable.
- If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Singapore
- Data Protection Officer: privacy@seapull.com
- By creating an account you consent to the collection, use and disclosure described in this policy. You can withdraw consent at any time by deleting your account in the app, turning off location access, or emailing our Data Protection Officer. Withdrawing consent may mean we can no longer provide the service.
- You can request access to or correction of your information by emailing our Data Protection Officer. We respond within 30 days.
- When we transfer your information outside Singapore, we make sure the recipient is bound by legally enforceable obligations to protect it to a standard comparable to the Personal Data Protection Act.
- If a data breach is notifiable, we will notify the Personal Data Protection Commission within 3 days of assessing that it is notifiable, and notify the people affected as required.
- Singapore users can notify us of harmful content at safety@seapull.com.
Hong Kong
- We handle personal data consistently with the Personal Data (Privacy) Ordinance (Cap. 486).
- We do not use or provide your personal data for direct marketing.
- You can request access to or correction of your information by emailing our Privacy Officer at privacy@seapull.com. We respond within 30 days.
Australia
- Privacy Officer: privacy@seapull.com
- We follow the Australian Privacy Principles.
- Your information is held in the United States (see above).
- You can ask to access or correct your information. We respond within 30 days.
- If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC).
- You can complain to the OAIC (oaic.gov.au).
- You can also report harmful content to the eSafety Commissioner (esafety.gov.au).
South Africa
- Information Officer: privacy@seapull.com
- We process your personal information in line with the Protection of Personal Information Act (POPIA). We process information that may reveal your sex life or sexual orientation only with your consent, which you can withdraw at any time by deleting your account.
- We transfer your information to the United States under contracts that require comparable protection. The United States has no law equivalent to POPIA; we rely on your consent and our provider contracts.
- You can ask to access, correct or delete your information, or object to how we process it. We respond within 30 days.
- You can complain to the Information Regulator (inforegulator.org.za) by email at POPIAComplaints@inforegulator.org.za or by phone on 010 023 5200 (toll free 0800 017 160).
Philippines
- Data Protection Officer: privacy@seapull.com
- We process your personal information in line with the Data Privacy Act of 2012. Your date of birth, gender and who you are interested in are sensitive personal information, and we process them only with your consent.
- You have the right to be informed, to access, object, correct, erase or block, to data portability and to complain. Email our Data Protection Officer to use them. We respond within 30 days, or sooner where the law requires.
- If a breach is likely to cause you serious harm, we will notify the National Privacy Commission and you within 72 hours of learning of it.
- You can complain to the National Privacy Commission (privacy.gov.ph).
Taiwan
- Contact: privacy@seapull.com
- We collect, process and use your personal information under Taiwan's Personal Data Protection Act, for the purposes in section 2, with the providers in section 5, and for as long as sections 6 and 7 describe.
- You can ask to review or get a copy of your information (we respond within 15 days), or to correct it, stop its collection, processing or use, or delete it (we respond within 30 days).
- If you don't provide required information, such as your date of birth, you can't create an account.
Botswana
- Data Protection Officer: privacy@seapull.com
- We process information that may reveal your sex life or sexual orientation only with your written consent, given on the consent screen, which you can withdraw by deleting your account.
- We transfer your information to the United States with your consent.
- You can ask to access, correct or delete your information. We respond within 30 days. You can complain to the Information and Data Protection Commission.
Seychelles
- Data Protection Officer: privacy@seapull.com
- We process sensitive information, such as information that may reveal your sexual orientation, only with your explicit consent, and we transfer information to the United States under contracts that require comparable protection.
- You can ask to access, correct or delete your information. We respond within 30 days. You can complain to the Information Commission.
Bermuda
- Privacy Officer: privacy@seapull.com
- We use sensitive personal information, such as information that may reveal your sexual orientation, only with your consent.
- Transfers of your information to the United States rely on your consent and our provider contracts.
- You can complain to the Privacy Commissioner for Bermuda (privacy.bm).
Canada
- Our person in charge of the protection of personal information (Privacy Officer): privacy@seapull.com
- How we govern your information: our Privacy Officer is accountable for how we protect your information. Access is limited: other members see only what section 4 lists and cannot read conversations they are not part of (section 10), and each service provider receives only what it needs (section 5). Within Seapull, only authorized staff can access personal information, and only to run the service, review reports and answer requests. We keep information only as long as sections 6 and 7 describe, and we assess its protection before any transfer outside Quebec. We keep a register of confidentiality incidents.
- Your information is stored in the United States and may be accessible to authorities there. Before transferring information outside Quebec, we assess whether it will be adequately protected.
- You can ask to access or correct your information, get a copy of it in a commonly used format, ask us to stop disseminating it, or withdraw your consent. We respond within 30 days.
- If a confidentiality incident presents a risk of serious injury, we will notify the Commission d'accès à l'information and the Office of the Privacy Commissioner of Canada, and the people affected.
- You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.
Everywhere else
- Wherever you live, you can ask our Privacy Officer at privacy@seapull.com to access, correct or delete your information, or to get a copy of it in a commonly used format. We respond within 30 days.
13. Contact
Tosemum Holdings LLC · P.O. Box 232, Waddell, AZ 85355-8000
- Privacy requests, including our Privacy Officer, our Information Officer (South Africa) and our Data Protection Officer (Singapore, the Philippines, Botswana and Seychelles): privacy@seapull.com
- General support: support@seapull.com
- Legal notices: legal@seapull.com