Seloo — Privacy Policy

Version: 2026-02  |  Effective date: 2026-09-07  |  Last updated: 2026-09-07


1. Introduction

This Privacy Policy explains how Seloo ("we", "our", or "us") collects, uses, stores, and protects your personal information when you use the Seloo mobile application ("App").

Seloo is a real-time GPS location sharing app that allows small groups ("Circles") of up to five people to see each other's live location on a map.

Our data principles:


2. Data Controller

The controller of your personal data is Remote Security Co., Ltd., a company registered in Taiwan (Republic of China), which operates the Seloo App. The backend servers are operated on our behalf by Hetzner Online GmbH and are located in Finland, European Union.

Contact: contact@seloo.app


3. Data We Collect

3.1 Account Data

When you sign in with Google or Apple, we receive and store:

DataSourcePurpose
Email address, or a private relay addressGoogle / AppleAccount identification, abuse prevention
Display nameGoogle / AppleShown to Circle members
OAuth provider identifierGoogle / AppleInternal use only, never shown to users; removed 90 days after you delete your account
Language preferenceYou (in-app setting)Applying your chosen interface language across your devices
IP address at the moment you accept these documentsYour device, recorded by our serversEvidence of when, and from where, you agreed to the Terms of Service and this Privacy Policy

The IP address above is recorded once for each version of the documents you accept, alongside the version number and the time. It is not used to track you, is not linked to your location data, and is not updated as you use the App.

If you sign in with Apple and choose Hide My Email, what we receive and store is Apple's private relay address (for example abc123@privaterelay.appleid.com), not your real email address. We never see the address behind it.

We do not collect passwords. We do not support email/password registration.

3.2 Location Data (GPS)

This is the most privacy-sensitive data we handle.

DataStorageRetention
GPS coordinates (latitude, longitude)Redis (in-memory store, periodically written to disk as a snapshot)12 hours maximum
Timestamp of last GPS updateRedis12 hours maximum

How location data works:

3.3 Circle and Membership Data

DataRetention
Circle name, type (permanent or time-limited), invite code, creation dateWhile account is active; see Section 6 for deletion
Member list (name, join date, admin status)While account is active
Map tags (name, GPS coordinates placed manually by members)While account is active

3.4 Device and Usage Data (via AdMob)

The free tier displays banner advertisements served by Google AdMob. Depending on the features in use and on your device settings, the Google Mobile Ads SDK may collect:

Google may use this for advertising, analytics, security and fraud prevention. This collection is performed by Google's SDK inside the App, not by our servers; see Google's privacy policy below for what Google does with it.

GPS coordinates are never passed to AdMob.

On iOS, you will be shown Apple's App Tracking Transparency (ATT) prompt before the SDK accesses your IDFA. If you decline, AdMob serves non-personalised ads. Declining does not stop all collection — the SDK may still process the other data listed above, which ATT does not govern.

3.5 Data We Do Not Collect


4. How We Use Your Data

Granting the App location permission on your device and the legal basis we rely on are two separate things. The device permission is what lets the App read your position at all; the legal basis below is why we may then process it. Withdrawing the permission stops the processing either way.

PurposeData usedLegal basis
Live location sharing with the Circles you joinGPS coordinatesPerformance of contract — sharing your location with your Circle is the service itself
Account management and authenticationEmail or relay address, name, OAuth identifierPerformance of contract
Displaying your name to Circle membersDisplay namePerformance of contract
Recording your agreement to these documentsVersion, timestamp, IP addressLegal obligation / legitimate interest in evidencing consent
Preventing abuse and ensuring securityEmail or relay address, name (retained after deletion)Legitimate interest
Showing advertisements (free tier)AdMob data (see Section 3.4)Consent or legitimate interest, depending on your jurisdiction and device settings

5. Third-Party Services

Google Sign-In

Sign in with Apple

Google AdMob

Map tiles — CARTO and OpenStreetMap

The map is drawn from tile images served by one of two providers, depending on the map style you choose in the App:

Photon (Komoot) — place search


6. Data Retention

DataRetention period
GPS coordinatesRemoved immediately when you turn location sharing off; otherwise expire automatically within 12 hours of the last update
Active account data (profile, circles, tags)Retained while your account is active
Account data after deletionEmail (or relay address), display name and the identifier your sign-in provider gave us are kept for up to 90 days after deletion, solely for abuse prevention, and are then permanently overwritten. None of them is accessible to you or any other user during that period. What remains afterwards is an anonymous record that cannot be linked back to you, kept so that Circles you created do not lose their history
Archived CirclesReadable by former members for 30 days after archiving, then permanently deleted — the circle, its member list and its map tags
Deleted map tagsRemoved permanently 30 days after deletion; not visible in the App during that period
Consent record (document version, time of acceptance, IP address)Retained with your account record as evidence that consent was given. If you delete your account, the IP address is permanently removed after 90 days, together with the other identifiers listed above; the document version and the time of acceptance are kept, as they identify nobody on their own
Place search results (cached)Maximum 24 hours; keyed on the search text and approximate area only, never linked to your account

7. Account Deletion

You can delete your account at any time from Settings → Delete Account in the App.

Account deletion requires re-authentication with Google or Apple to verify your identity.

When you delete your account:

If you have uninstalled the App and wish to request deletion of your account data, you can do so at:

Email: contact@seloo.app
Web: https://www.seloo.app/legal/delete-account.html


8. Data Security

We take the following measures to protect your data:


9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

All users:

European Union / EEA users (GDPR):

California users (CCPA):

Elsewhere: depending on where you live, you may have further rights under your local data protection law. We will honour any right that applies to you, whether or not it is listed above.

To exercise any of these rights, contact us at: contact@seloo.app


10. Children's Privacy

Seloo is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from an underage user, we will delete their account promptly.


11. Data Transfers

Our servers are located in Finland, European Union. If you are located outside the EU, your data will be transferred to and processed in the EU. By using the App, you consent to this transfer.

Data transfers from the EU to other regions (e.g. to Google or Apple for authentication purposes) are made under appropriate safeguards as required by applicable law.

Map tiles are a separate case, and you choose who receives them. The two paragraphs above describe transfers made by our servers. Map tile images are not among them: your device fetches them directly from whichever tile provider is selected — CARTO by default, or OpenStreetMap (see Section 5) — so that provider receives your device's IP address and the map areas it requests. We do not initiate, route, or observe that connection, and we could not restrict it without serving every tile through our own servers. Both providers deliver these images through content delivery networks, so the server that answers is normally the one nearest to you rather than one in a fixed country. You can change which provider receives your requests at any time from the layers button on the map screen.


12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the version number and effective date at the top of this document. You will be required to review and accept the updated policy before continuing to use the App.


13. Contact

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us at:

Email: contact@seloo.app
Website: www.seloo.app