Last updated: May 2026

1. Introduction

Welcome to SEBA. We respect your privacy and are committed to protecting your personal data. This Privacy Policy informs you about how we look after your personal data when you use our mobile application (the "App") and tells you about your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Data Controller responsible for this App is Ignacio Granell, operating as a Sole Trader in Oxford, United Kingdom. If you have any questions or wish to exercise your legal rights, you can contact us at [email protected].

2. The Data we collect about you

We only collect the minimum personal data necessary to provide you with the services inside SEBA:

• Account Data: Your email address and password when you register or log in (securely managed via Supabase Auth).
• Device and Usage Data: Your device type, operating system version, and unique identifiers required to validate your purchases and app stability.
• Location Data (GPS): The App uses your device’s native GPS to display your real-time position on our interactive archaeological maps. This data is processed purely locally on your device. We do not store, track, or share your location history on external servers.
• Chat Interactions: The text messages you send to our AI Chatbot (the virtual guides) are processed strictly to generate responses and are not used for external marketing purposes.
• Support and Feedback Data: If you contact us directly via email to report a bug, request support, or provide feedback, we collect your email address and any information you voluntarily choose to include in your message. We use this data strictly to resolve your issue and improve the App.
• Local Storage and Cache: The App may store audio lessons, map layers, and text data locally on your device ("Cache") to enable offline functionality at historical sites. This data remains on your device and is not collected or transmitted to our servers.

3. Data Sharing and Third-Party Providers

We do not sell, rent, or trade your personal data to third parties. To operate SEBA and process your requests, we share your minimum necessary information with the following trusted third-party sub-processors:

• Supabase Inc.: Provides our backend, database hosting, and user authentication infrastructure. Your account details and chat logs are stored securely on their servers.
• RevenueCat Inc.: Helps us manage in-app purchases and subscriptions. They process device identifiers and purchase tokens to verify whether you have unlocked premium archaeological guides.
• Apple Inc. (App Store): Handles all financial transactions and payment processing. We do not collect or store your bank accounts or credit card details; all payments are handled entirely by Apple under their own privacy policy.
• Google LLC: Provides the Artificial Intelligence API (Gemini) used to generate responses for our interactive chat feature. The text messages you send in the chat are shared with Google strictly to process and generate the historical and cultural responses.

4. International Data Transfers

The third-party services we use (such as Supabase or RevenueCat) may store or process information outside the United Kingdom or the European Economic Area (EEA). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring that appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the UK government, are implemented by our providers.