Seapull Privacy Policy

Effective date: October 19, 2026 · Last updated: October 22, 2026

Seapull is operated by Tosemum Holdings LLC, based in Arizona, USA ("Seapull," "we," "us"). This policy explains what personal information we collect through the Seapull mobile app and the seapull.com website, how we use it, who we share it with, and the choices you have.

Seapull is for adults 18 and older.

Questions or requests: privacy@seapull.com.

Plain-language summary up front: we don't sell your data, we don't run ads, and other users can never see your exact location, only a coarse distance range. The details below say exactly what we store and why.


1. What we collect

Information you provide

Your gender, who you are interested in, and any pronouns or display term you add may reveal your sexual orientation or gender identity. We use them only to show and match profiles, and we never sell them. You can change your gender and who you are interested in at any time, remove your pronouns or display term whenever you like, and deleting your account erases all of them.

Information generated as you use Seapull

Information from other members

We may also receive information about you from other members, for example when someone reports you or sends you a message. We use it only for the purposes in section 2.

What we do NOT collect

No advertising SDKs, no third-party analytics SDKs, no contact-list access, no background location tracking, no precise location stored, and no data brokers. If any of that ever changes, this policy changes first.

2. How we use your information

We do not sell your personal data. We do not share it with advertisers. Seapull shows no ads.

3. Location: exactly how it works

Location privacy is engineered into Seapull's database, not just promised:

You control your discovery radius in the app. Deleting your account removes your stored location entirely (section 7).

4. What other users can see

Other signed-in users who pass the mutual matching rules can see: your display name, age (not birthday), gender, any pronouns or display term you add, bio, activities, intensity, availability, city, verification status, whether you were recently active, your photos, and a coarse distance band. They can never see: your email, birthday, who you're interested in, exact location or coordinates, who else you've liked, passed, or matched, your reports or blocks, or your settings.

5. Service providers (processors)

We share data only with the services that run Seapull, and only what each needs:

Provider What it does What it handles
Supabase (hosted on AWS in the US West, Oregon, region) Database, authentication, file storage, realtime message delivery, and the server functions that run deletion, photo screening, and notification sending All app data described above; passwords as hashes; standard server logs
Firebase Cloud Messaging (Google) and Apple Push Notification service, reached through the Expo push service Delivering push notifications to Android and iOS devices Your push token and the notification text (for example, "It's a match!" or "New message from" a first name)
Expo (EAS) Delivering app updates to your device (EAS Update) and relaying push notifications to Apple and Google Standard request data when the app checks for an update (such as IP address, platform, and app version, plus a random identifier the update system creates on your device); your push token and the notification text
Resend Transactional email delivery (password-reset codes and other service email) Your email address and the content of those service emails
Cloudflare Hosting and network protection for the seapull.com website Standard visitor logs (such as IP address and request metadata) when you visit the website
Google Cloud Vision Automated screening of uploaded profile photos for explicit or violent content The photo image, sent once at upload; Google returns likelihood scores and we store only those scores
Apple (App Store) and Google (Google Play) Distributing the app and its store updates, and showing the optional in-app rating prompt Your store account, downloads, and any rating you leave, under Apple's and Google's own privacy policies; we receive only aggregate statistics and diagnostic reports from them

Not yet in use: payment processing (Stripe) is planned for a future premium tier. It will be added here before any payment feature ships.

We may also disclose information if required by valid legal process, or where necessary to investigate safety threats, fraud, or violations of our Terms.

6. Data retention

We keep your information while your account is open, so the service works. When you delete your account, almost all of it is deleted at once (section 7). This table lists what we keep, for how long, and why.

What we keep For how long Why
Your profile, photos, messages, activity signals, and notification tokens While your account is open. Deleted when you delete your account, except the items below. To run the service. Notification tokens are kept so you can switch notifications off and on without a new system prompt.
Report evidence: the messages you sent in a chat with someone who has reported you, any message a report points to, and any photo that a report still open or under review points to Until 2 years after you delete your account, longer only while a report by or about you is still open So that deleting an account cannot be used to escape a report
Reports about you, and blocks other members made against you Until 2 years after you delete your account, longer only while a report by or about you is still open So that deleting an account can never erase an abuse case
The other member's own messages in chats you were in Until 2 years after you delete your account, longer only while a report by or about you is still open So the other member keeps their own conversation history
A closed account record: an empty profile with the date you deleted your account, the record of which consent you gave and when, and a sign-in record whose email address has been replaced with a one-way scrambled value Until 2 years after you delete your account, longer only while a report by or about you is still open It links the items above until they are deleted, and records that you consented
Reports you filed Until 2 years after the member you reported deletes their account, longer only while a report by or about them is still open. From 2 years after you delete yours, they are no longer linked to you. So a case you reported can still be reviewed
Only if we removed your account for breaking our Terms: a one-way hash of your email address, never the address itself 2 years after the account was closed So the same email address cannot be used to sign up again
Server logs kept by our infrastructure providers Per our providers' default schedules To operate and secure the service

Anything kept until 2 years after a deletion is erased at our monthly clean-up after that date, so within a month of it.

We may keep an account's data, photos included, past its normal deletion only while a valid legal request or investigation requires it, and delete it when that ends.

7. Deleting your account: what actually happens

You can delete your account in the app (Profile tab, then Account, then Delete account), where it runs immediately, or by email (below). Deletion cannot be undone and happens in three steps, in this order:

  1. Your account data, in one step: your profile is wiped: display name, bio, date of birth, gender, pronouns, display term, who you're interested in, activities, availability, intensity, city, and location. You disappear from Discover, the map, and Matches at once. Your likes and passes, given and received, are deleted, and so are your "read up to here" markers, your notification tokens, and the blocks you made. Your matches are closed for good. The messages you sent are deleted from every chat, except report evidence (section 6), and no chat preview shows your words any more. All of this happens together or not at all.
  2. Photos: your photo records and files are deleted from storage, except a photo that a report still open or under review points to.
  3. Sign-in: the details saved when you signed up (such as your app language) are cleared, your email address is replaced in our sign-in records with a one-way scrambled value, your sign-in methods are removed, and you are signed out on every device. Your email address is free again at once: you can use it to create a brand-new account.

What is kept, and why: only what the table in section 6 lists. In short: report evidence, reports about you, blocks against you, the other member's own messages in your chats, and a closed account record, each until 2 years after you delete your account (longer only while a report by or about you is still open), then erased for good. If we removed your account for breaking our Terms, we also keep a one-way hash of your email address for 2 years, so it cannot be used to sign up again.

A fuller description is on our Account Deletion page. If you cannot sign in, email privacy@seapull.com from the address on the account and we will run the same deletion. If you want a specific erasure beyond this, email us too: we will handle it individually unless a safety or legal hold applies.

8. Your rights and choices

9. Age policy: 18+

Seapull is for adults 18 and older. The date-of-birth check is enforced both in the app and in the database itself (a profile with an under-18 birthday cannot exist). "Underage" is a first-class report reason; verified underage accounts are removed along with their data. We do not knowingly collect any data from anyone under 18.

10. Security

All traffic is encrypted in transit (TLS). Every database table is protected by row-level security. Messages are shown in the app only to the two people in the conversation. Authorized staff may read a conversation only to review a report about it or when the law requires it. Unauthenticated access to user data is fully revoked. Passwords are hashed. Location protections are described in section 3. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

11. Changes

We'll update this policy as Seapull grows (for example, when payments, verification, or venue suggestions ship). We will update the date at the top and, where the law requires, email you before a change takes effect.

12. International users

Seapull is operated from the United States by Tosemum Holdings LLC. Your information is stored in the United States. Some of the service providers in section 5, such as Cloudflare and Google, may also process it in other countries to deliver the service. Providers that act on our behalf are bound by contracts that require them to protect your information to a standard comparable to this policy and the law where you live. Apple and Google handle app store and push notification data under their own privacy policies. Authorities in the United States may be able to access information held there under US law.

New Zealand

Singapore

Hong Kong

Australia

South Africa

Philippines

Taiwan

Botswana

Seychelles

Bermuda

Canada

Everywhere else

13. Contact

Tosemum Holdings LLC · P.O. Box 232, Waddell, AZ 85355-8000