Seatt Privacy Policy
Last updated: 2 August 2026
Seatt is a dating app built on one mechanic: you post a plan with one seat open, and somebody asks for it. This policy describes every category of personal information the app actually handles. It was written against the source code rather than from a template, so where it says we do not collect something, that is a statement about the software.
Seatt is operated from Ontario, Canada. If you are in Illinois, Texas or Washington, see also the separate Biometric Data Policy.
1. What we collect
You give us
| Category | Details | Required? |
|---|---|---|
| Account | Email address (via Apple, Google, or email sign-in) | Yes |
| Profile | Display name, age, bio, photos | Yes |
| Profile details | Gender, who you are open to, pronouns, height, ethnicity, intent, drinking, smoking, languages, prompt answers | Optional, except gender and who you are open to |
| Neighbourhood | A coarse home area, rounded to roughly 1 km | Optional |
| City | Which city's feed you are in | Yes |
| Plans and requests | The plan, the venue, the note you write, the question a host asks | As you use it |
| Messages | The thread on a confirmed plan | As you use it |
| Reports | What you tell us when you report someone | As you use it |
| Face scan | A short video selfie, if you choose to verify | Optional. See §6 |
Your device gives us
- A push notification token, if you allow notifications.
- Approximate location, only when you ask the app to find your neighbourhood. Seatt does not track your location in the background and does not run any location service while the app is closed.
We create
- Your reliability statistics: confirmed dates, no-shows, late cancels.
- Whether you have earned the Reliable badge.
- Weekly quota counters.
We do not collect
No contacts, no photo library beyond the images you pick, no microphone, no advertising identifier, no browsing history, no third-party trackers, no analytics SDK, and no background location.
2. Why
- To run the product. Show you a feed, let you post and ask, put two people in a thread once a seat is taken.
- To sort by distance. Your coarse home area orders the feed. It is never shown to anyone; other people see a distance, not a place.
- Safety. Photo moderation, reports, blocks, the no-show record.
- Billing. Seatt Plus, via the app stores.
- Legal obligation, where one applies.
We do not use your information to train models, and we do not sell it. Seatt has no advertising business.
3. Who we share it with
Processors only, each under a written agreement, each limited to what they need:
| Processor | What they get | Why | Where |
|---|---|---|---|
| Amazon Web Services | Everything above | Hosting, database, storage, push delivery, photo moderation, face liveness | United States (us-east-1) |
| Google Places | The venue you search for | Confirming a venue is a real public place | United States |
| RevenueCat | A pseudonymous account id and purchase state | Subscription entitlement | United States |
| Apple / Google | Purchase and sign-in | Billing and authentication | Global |
Other Seatt users see your profile: name, age, photos, bio, prompts, your stated details, your city, your badges, and (only if you verified) the checkmark. They never see your email, your neighbourhood coordinates, your statistics, your reports, or anything about your other plans.
We do not sell, rent or trade personal information to anyone, for any purpose.
4. Where your data lives, and what that means
Seatt runs in AWS us-east-1, in the United States. If you are in Canada, your personal information is stored and processed outside Canada and is subject to lawful access by US authorities.
This is a real trade-off and we chose it deliberately: the product launches in forty US cities against sixteen Canadian ones, and moving regions after launch would break every account identifier. Under PIPEDA this is permitted with disclosure, which is what this section is. Quebec residents: Law 25 requires a privacy impact assessment before personal information leaves the province, and Montreal and Quebec City are live cities. See LAUNCH.md.
5. How long we keep it
| What | Retained |
|---|---|
| Your account and profile | Until you delete it |
| Photos | Until you remove them or delete the account |
| Completed plans | 2 years |
| Cancelled or expired plans | 90 days |
| Open-to listings | 14 days |
| Messages | With the plan they belong to |
| Face scan | Seconds. See the Biometric Data Policy |
| Reports | Retained after your deletion, so a pattern of harm does not vanish with the account that caused it |
Deleting your account removes your profile, photos, details and statistics. Plans you shared with someone else survive in anonymised form. The other person keeps their own history, and you appear as a deleted user. This is deliberate: your deletion should not erase someone else's record of an evening.
6. Face verification
Optional, and covered in full by the separate Biometric Data Policy. In short: a short video selfie confirms a live person is present and matches your profile photos, and every image is destroyed within seconds. We keep one word: verified, or not. We do not operate a face collection and there is no stored face template.
7. Your rights
Wherever you are, you can:
- See your information. Most of it is on your profile; email us for the rest.
- Correct it, in the app.
- Delete it: Settings → Delete account, in the app, immediately.
- Withdraw consent to optional processing, including verification.
- Complain, to us first, then to the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or your state Attorney General.
Californians additionally have the CCPA rights to know, delete, correct and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, and we will never discriminate against you for exercising a right.
8. Children
Seatt is for adults aged 18 and over. We do not knowingly collect anything from anyone under 18. If we learn an account belongs to a minor we delete it. If you believe a minor is using Seatt, email safety@seatt.app.
9. Security
TLS in transit, encryption at rest, least-privilege access, and no standing human access to message content. No system is perfect; we will notify you and the relevant regulator of a breach affecting you as the law requires.
10. Changes
We will post the new date at the top and, for anything material, tell you in the app before it takes effect.
11. Contact
privacy@seatt.app. Seatt, Ontario, Canada.