Privacy Policy

1. Who we are

Skilloops is operated by its founder, based in London, United Kingdom. We are in the process of incorporating as a UK private limited company. Until incorporation is complete, the data controller is the individual founder.

Contact: privacy@skilloops.app

2. What data we collect

When you join the waitlist, we collect:

• First and last name
• Email address
• City
• Skills you can teach and want to learn
• How you heard about us
• Behavioural analytics — which steps you completed, how long you spent on each, which skills you tapped, whether you shared the page, and scroll depth. This is collected via our own first-party analytics engine only. No third-party tracking tools are used on the waitlist page.

We do not collect payment information, government ID, or any sensitive personal data at the waitlist stage.

3. Why we collect it and our lawful basis

• To notify you when Skilloops launches in your city — Legitimate interest.
• To understand which cities and skills have the most demand — Legitimate interest.
• First-party analytics (our own event logging to Supabase) — Legitimate interest. Functional analytics that helps us improve the product. No cookies are set.

4. Cookies and tracking

The Skilloops waitlist page does not use cookies. Our analytics use localStorage only — this stores a small amount of data in your own browser to track your session progress and waitlist position. localStorage data never leaves your device and is never shared with any third party.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking tool on the waitlist page.

5. Who we share your data with

• Supabase — database and backend. Data may be hosted in the EU or US. supabase.com/privacy
• Lovable — application hosting. lovable.dev/privacy

We do not sell your data. We do not share it with advertisers. We never will.

6. How long we keep your data

• Waitlist data — until 12 months after Skilloops launches in your city, or until you ask us to delete it, whichever comes first.
• Analytics events (first-party, localStorage only) — exist only in your browser and are cleared when you clear your browser data.
• If you convert to an app user — your data moves to the main app privacy policy published at launch.

7. Your rights under UK GDPR

Email privacy@skilloops.app to exercise any of these. We will respond within 30 days.

• Access — request a copy of all data we hold.
• Correction — ask us to correct inaccurate data.
• Deletion — ask us to delete everything within 30 days.
• Objection — object to processing based on legitimate interest.
• Portability — request data in machine-readable format.
• Withdraw consent — if any processing is based on consent, withdraw at any time.

You can also lodge a complaint with the ICO at ico.org.uk.

8. Data security

Data is stored in Supabase with row-level security enabled. All data in transit is encrypted via HTTPS. Authentication is handled by Supabase Auth. Database access is restricted to the founding team.

9. Children

Skilloops is not intended for anyone under 18. We do not knowingly collect data from minors. Contact privacy@skilloops.app immediately if you believe we have.

10. Changes to this policy

If we make material changes, we will update the effective date and where appropriate notify waitlist members by email.