Privacy Notice

1. Who we are

Supermedal is operated by One Small App Inc., a Delaware corporation doing business as Supermedal (“Supermedal,” “we,” “us,” or “our”).

Postal address:

Privacy email: privacy@supermedal.com

2. What this notice covers

This notice explains how we handle personal information when you visit our website, join the Supermedal waitlist, or contact us.

Supermedal is not yet open. The website currently provides information about Supermedal and collects waitlist signups. It does not provide a product account, and it does not collect achievements, chat, photos, payment details, or social sign-in data. When we launch a product that collects more, we will provide a notice covering it.

3. Information we collect

Information you give us

When you join the waitlist we collect your email address, the time of your request, and a label identifying which form or campaign you came from.

If you contact us, we collect your message and the contact details and email metadata that come with it. Please don’t send us sensitive information we haven’t asked for.

Information collected automatically

When you visit, our hosting, security and measurement tools process technical information about the request. This can include your IP address; browser, device and operating-system details; approximate location derived from your IP; the pages and assets you request; the time of the request; the site that referred you; interactions such as page views and scrolling; and diagnostic and security-rule results.

We don’t add your IP address to your waitlist record, and we don’t try to identify you by name from this information.

Cookies and device storage

We use cookies and similar device storage — including browser storage and databases — for two purposes: to remember that you completed the waitlist form, and for analytics that tell us how the site is used. Some are set by us and some by our measurement provider. They hold randomly generated identifiers, not your name or email address.

These identifiers typically persist for up to about two years unless you clear them sooner. You can remove them at any time through your browser’s cookie and site-data controls, and you can block them entirely — see Section 6. Names and lifetimes vary as our tools change, so we describe them by purpose rather than listing each one.

We do not use advertising cookies, ad pixels, fingerprinting, or cross-site tracking.

4. How and why we use information

Giving us your email address is voluntary. Without it we can’t put you on the waitlist. You can stop future messages at any time.

We don’t sell your personal information, and we don’t use it for targeted advertising or share it for cross-context behavioral advertising. We don’t make decisions about you by automated means that produce legal or similarly significant effects. Automated controls may reject malformed, malicious or excessive requests.

5. Waitlist emails and your choices

Joining the waitlist asks us to email you about the waitlist and about Supermedal becoming available — a confirmation, status updates, availability news, and an invitation if access opens. It is not consent to unrelated advertising or to another company’s marketing.

We identify ourselves as the sender and include a working unsubscribe link in commercial messages. You can also unsubscribe by emailing privacy@supermedal.com. We may still send you service, security and legally required messages, and we may keep a minimal record of your opt-out so we don’t contact you again by accident.

If we later want to send you materially different messages, such as general product marketing, we will ask for separate consent where the law requires it.

6. Cookies, tracking and browser signals

Section 3 describes what we store on your device and why. You can clear or block it through your browser’s cookie and site-data controls, or with tracking-protection features and privacy extensions. You can opt out of Google Analytics specifically using Google’s browser add-on at https://tools.google.com/dlpage/gaoptout. None of this affects your ability to join the waitlist.

We don’t sell or share personal information for targeted advertising, so Global Privacy Control and Do Not Track signals don’t currently change how the site behaves. If that changes, this notice will say so and we will honor the browser signals the law requires us to honor.

We update this notice as our tools change, and we obtain consent or provide choices where the law requires.

7. Who we share information with

We don’t sell your personal information. We disclose it only to service providers who process it on our behalf, and in the limited situations below.

Our service providers fall into these categories:

• Cloud hosting and infrastructure, including content delivery, application security and database storage — currently Amazon Web Services.
• Analytics and measurement, for understanding how the site is used.
• Email delivery, for sending waitlist messages.
• Business email and productivity, for messages you send to our mailboxes — currently Google Workspace.

These providers may process information in the United States and in other countries where they or their subprocessors operate. We require them to protect it and to use it only to provide their service to us. We may add, change or replace providers within these categories; where a change materially affects how your information is handled, we will update this notice.

We may also disclose information to professional advisers bound by confidentiality; where the law, a court order or a valid government request requires it; where reasonably necessary to protect rights, safety and security or to prevent fraud and abuse; and in connection with a merger, financing, acquisition, reorganization or sale of all or part of our business, subject to appropriate safeguards.

8. Where information is processed

We operate this site from the United States and do not intentionally market the waitlist elsewhere. Our providers may process information in the United States and in other countries where they operate. If you visit from outside the United States, your information will be transferred to and processed in the United States.

9. How long we keep information

We keep personal information only as long as we need it for the purposes described in this notice, and then delete or de-identify it.

How long that is depends on the information and why we hold it. In deciding, we consider how long the waitlist remains open and whether you still want to hear from us; whether we still need the information to answer you or to honor a choice you made, such as an opt-out; the retention settings of the provider holding it, in the case of analytics data; and any period we are legally required to keep records for, or need them to establish or defend a legal claim.

As a general matter: waitlist records are kept while the waitlist is open and for a reasonable period afterwards, or until you ask us to remove you; analytics data is kept for the period configured with our measurement provider; operational and security logs are kept for a short period, typically weeks to months; and correspondence is kept for a reasonable period after the matter is closed. Backups and point-in-time recovery copies can persist for a limited period after deletion from our active systems.

You can ask us to delete your information at any time — see Section 12.

10. Security

We protect information with safeguards appropriate to what we hold: encryption in transit, encryption at rest, access controls, a private site origin and a non-public database, rate limiting, managed security rules, and limited operational access.

No safeguard is perfect, and we can’t guarantee absolute security. If an incident creates a legally reportable risk, we will notify affected people and regulators as required.

11. Children

The waitlist is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has joined, contact privacy@supermedal.com and we will investigate and delete the information where appropriate.

12. Your privacy rights

Depending on where you live, you may have the right to access a copy of your information; correct it; delete it; receive it in a portable format; restrict or object to certain processing; object to direct marketing; withdraw consent; opt out of sale, sharing or targeted advertising if we ever engage in those; and complain to a privacy regulator. We will not discriminate against you for exercising a privacy right.

These rights are not absolute, and we may need to verify your identity or keep limited information where the law permits or requires it.

To exercise a right, email privacy@supermedal.com. Include enough detail for us to understand your request, but please don’t send identity documents we haven’t asked for. An authorized agent may make a request where local law allows; we may verify the authorization.

We aim to acknowledge requests within 10 business days and to respond within 30 days, or within whatever period the law requires. If we need longer, we will tell you why. If we deny your request and applicable law gives you an appeal, reply to our decision or email us with the subject Privacy Appeal. You can also contact the privacy regulator or attorney general where you live.

13. United States disclosures

Where US state privacy law gives you additional rights, you can exercise them through the contact method above.

We do not sell personal information, we do not share it for cross-context behavioral advertising, we do not use it for targeted advertising, we do not knowingly collect sensitive personal information through this site, and we do not offer financial incentives in exchange for personal information. We use analytics for measurement, not advertising. If any of that changes, we will update this notice and provide the opt-out mechanism the law requires.

We review our obligations under applicable state privacy laws periodically and when our data practices materially change.

14. Changes to this notice

We may update this notice as the site, our tools, our providers or the law change. The version and date at the top identify the current text, and the current version governs.

Where a change materially affects information we have already collected, we will provide additional notice and obtain fresh consent where the law requires it. Earlier versions are available on request at privacy@supermedal.com.

15. Contact us

One Small App Inc.

Privacy email: privacy@supermedal.com