Signlo: Privacy Policy

Effective date: 3 September 2026
Data controller: Signlo, Inc., a Delaware corporation, 8 The Green #25812, Dover, DE 19901, United States
Data Protection Officer (DPO): the founder, appointed DPO: contact privacy@signlo.com
Representative in the EU (GDPR Art. 27): Emmanuel Jacq, 16 rue de Marignan, 75008 Paris, France, privacy@signlo.com

1. Our promise, in plain language

Signlo is built for the Deaf community. We collect the least data we need to run a video-first social network, we treat your sign-language video as sensitive data, and we never sell your data. You can download your data and delete your account from inside the app at any time.

2. The short version


What we collect	Account (email), profile (name, handle, bio, name-sign), your videos/photos/captions, who you follow, messages, RSVPs, device push token, basic app/diagnostic data, and (only if you opt in) a coarse (~5 km) approximate location.
Sensitive data	Your sign-language video (face + hands) is treated as special-category data (GDPR Art. 9). We never use it to identify or track you, and we do not run face recognition.
Why	To run the service, keep it safe, and improve it.
Who sees it	You and the people you choose; our infrastructure providers; our trust-and-safety partners for moderation/CSAM handling.
Where it's stored	United States (Supabase, US region; Cloudflare global CDN).
Your controls	In-app data export and account deletion; block/report; opt-in (not default) for location and sound.
Selling data	Never.

3. Who is responsible (controller + DPO)

The data controller is Signlo, Inc., a Delaware corporation, 8 The Green #25812, Dover, DE 19901, United States. The founder is the appointed Data Protection Officer. For any privacy request or question, contact privacy@signlo.com.

Signlo is not established in the European Union, so under GDPR Article 27 we have designated a representative in the Union: Emmanuel Jacq, 16 rue de Marignan, 75008 Paris, France, reachable at privacy@signlo.com. If you are in the EU or EEA you may address the Representative instead of, or as well as, Signlo on any data-protection matter, and so may your supervisory authority.

4. What we collect and why

You give us: - Email address: to sign you in (one-time code) and send essential account messages. - Profile: display name, handle, bio, sign languages, Deaf-identity tag, optional interpreter/ relay tags, avatar photo, and your name-sign and intro videos. - Your Content: sign-language videos, photos, captions, comments. - Social graph: who you follow, your group memberships, event RSVPs, and the messages you send (including sign-language video messages). - Reports and blocks you make.

We collect automatically: - Device push token: only if you enable notifications, so we can send visual message alerts. - Basic technical/diagnostic data: app version, device type, crash reports, and aggregate product analytics, used to keep the app stable and improve it. Our analytics and diagnostics providers are PostHog (product analytics) and Sentry (crash and error reporting).

Only if you opt in: - Approximate location: to help you find signers and events near you. We compute a coarse (~5 km) geohash on your device; your precise GPS is never sent to our servers. Sharing is off by default, you choose the precision (nearby / city / country / continent), and you can turn it off any time. Turning it off removes your stored location.

We do not ask for more than we need, and we do not require sound; audio is opt-in and off by default.

Sign-language video shows your face and hands and is central to Signlo. Because it can reveal who you are and information about you, we treat it as special-category (sensitive) personal data under GDPR Article 9. Our safeguards:

Never for identification. We do not run face recognition, and we never use your video (or anything derived from it) to identify or track you (consistent with GDPR Art. 9 and US biometric laws such as BIPA).
Model training only if you choose it. Your video is used to train sign-language technology only if you separately and explicitly opt in to sharing it for that, never through this policy or the Terms alone. If you opt in to sharing motion landmarks (a skeletal trace of your signing), landmark data can in principle still be re-identifying, so we protect it with the same biometric-grade safeguards as the video itself and use it only to train sign-language technology, never to identify anyone. You can stop future use at any time and we delete your source contribution; what an already-trained model has learned cannot be extracted from it, and we say that here rather than promise an un-training we cannot perform.
Lawful basis. We process your sign-language video on the basis of your explicit consent, which you give by choosing to record and post it, and to operate the service you asked for. Safety/CSAM processing also rests on substantial public interest and legal-obligation grounds.
Access is limited to delivering your content to the people you choose, and to our trust-and-safety partners for moderation and CSAM handling.

6. How your content is stored and delivered

Videos and photos are uploaded directly to Cloudflare (Stream for video, Images for photos) and delivered through Cloudflare's global content-delivery network so they play quickly.
Profiles, posts, the social graph, messages, and reports are stored in Supabase (PostgreSQL) in the United States (US region), with row-level security so people only see what they're allowed to.
Private video messages are served with short-lived signed links after a membership check.

Consent: your sign-language video and other content you choose to post; opt-in location; optional notifications; audio.
Performance of a contract: running the account and core features you signed up for.
Legitimate interests: keeping the service secure, preventing abuse, and improving the product (balanced against your rights).
Legal obligation / substantial public interest: child-safety (CSAM) detection and reporting.

Infrastructure providers (processors): Supabase (database, sign-in, storage), Cloudflare (video/photo hosting and CDN), and our analytics, crash-reporting, email and push-notification providers. They process data on our instructions under data-processing agreements. We publish the complete list: every processor, what it does, what data it sees, and where, at signlo.com/legal/subprocessors. It is audited against the running code, not a list of vendors we hold accounts with.
Trust and safety: moderation and CSAM handling are operated by Signlo's own trained trust-and-safety team. Automated CSAM matching uses Microsoft PhotoDNA, and only an irreversible content fingerprint of about a kilobyte leaves Signlo; your video does not. Signlo is itself a registered Electronic Service Provider with the NCMEC CyberTipline (ESP #7701) and reports child-safety material directly, as US federal law requires. See our Child Safety Standards.
Payments: Stripe processes payments for any paid events, groups, or bookings (test mode only during the beta, so no real payments yet). Purchases are made from Signlo, Inc., and Stripe holds the funds until the host or provider is paid; Signlo never sees or stores full card details. Stripe also screens transactions for fraud (Stripe Radar) as part of processing, a payment-integrity purpose, never used for advertising.
Legal: the standard we apply before disclosing anything to a government agency, and our policy of telling you when your data is requested, are published at signlo.com/legal/law-enforcement. We may disclose data where required by law or to protect people from harm.

We do not sell your personal data and do not use your content to train advertising profiles.

9. International transfers

Signlo stores data in the United States. If you are in the EU/EEA, UK, or elsewhere, your data is transferred to the US. We rely on appropriate safeguards for these transfers (such as the EU Standard Contractual Clauses with our US providers).

10. How long we keep data

We keep your data only as long as needed to run the service and meet legal obligations. See the companion Data Retention & Breach document for the full schedule. In short:

While your account is active: your profile, content, and graph stay available to you.
When you delete your account: we delete your personal data from the live system, and it ages out of backups within the backup window. Safety/legal records (e.g. CSAM reports) are kept only as long as the law requires.

11. Your rights

Depending on where you live (GDPR/UK GDPR, and US state laws such as the CCPA/CPRA), you can:

Access / download your data, in-app: Profile → Account & privacy → Download my data.
Delete your account and data, in-app: Profile → Account & privacy → Delete account.
Correct your profile data, in-app: Edit profile.
Object to / restrict certain processing, and withdraw consent (e.g. turn off location, notifications, or sound) at any time without affecting prior lawful processing.
Portability: your export is provided in a machine-readable JSON format.
Complain to your data-protection authority. [FOUNDER TO CONFIRM: lead supervisory authority, if applicable.]

To exercise a right we can't fully serve in-app, contact the DPO at privacy@signlo.com. We do not discriminate against you for exercising your rights.

12. Children

Signlo is for adults (18+) only. We do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor, we remove it. Any suspected child-safety content is handled through our trust-and-safety/CSAM process.

13. Security

We use row-level security, encrypted connections (TLS), signed links for private video, least- privilege server functions, and rate limiting. No system is perfectly secure; see the Data Retention & Breach document for how we respond to incidents.

13b. Cookies and tracking

This website sets no cookies and runs no third-party trackers. There is no consent banner because there is nothing to consent to. If that ever changes, we will ask you before it does, not afterwards.

In the app, we store a small amount of data on your device so it can work: your sign-in session, your language and accessibility settings, and cached video so your feed is not re-downloaded every time. Product analytics can be turned off in Settings; sign-in and settings storage cannot, because the app cannot function without them.

We do not use advertising identifiers, we do not build advertising profiles, and we do not run third-party ad or social tracking pixels.

14. Changes to this policy

If we make material changes, we will notify you in the app or by email before they take effect.

15. Contact

Privacy questions and data requests: privacy@signlo.com. The founder is the appointed Data Protection Officer.
EU/EEA users may instead contact our Article 27 Representative, Emmanuel Jacq, 16 rue de Marignan, 75008 Paris, France.
You also have the right to lodge a complaint with your local data protection authority.
Postal address: Signlo, Inc., a Delaware corporation, 8 The Green #25812, Dover, DE 19901, United States.