Data Architecture

Privacy Policy

Controller: Sruper Inc. (Delaware, USA) • London, UK

01 / Information We Collect

Capsule is designed as an offline-first, trust-first personal lookbook. We collect only the data explicitly required to synchronize your personal library and discovery maps across your devices.

This includes account identifiers (such as your authenticated user ID and chosen username), device hardware tokens for offline sync, and the structured media items you create (spots, notes, photos, links, music tags, and books).

Age Requirement: Capsule is strictly built for individuals aged 16 and older. We do not knowingly collect or solicit personal data from minors under 16.

02 / Processors & Location

To deliver secure synchronization and enriched metadata, Capsule partners with industry-standard cloud infrastructure and external API providers. Your data is processed via:

• PowerSync: Local-first SQLite database synchronization engine.
• Supabase (eu-west-3 Paris, France): Primary cloud database hosting, real-time backend, and authentication session hosting.
• Apple Sign-In: Native hardware-secured passwordless identity verification.
• Google Places API: Place resolution, mapping search, and geocoding services.
• Apple Music API: Audio track catalog metadata and artwork curation.
• Open Library, Pexels & Unsplash: Book catalog resolution and visual stock artwork retrieval.

Sensitive Location Data: When you save a spot or pin a spatial anchor, we store precise geographic coordinates (latitude and longitude). This location data is processed strictly to render your personal maps and spatial constellations. We do not track background GPS movement or monetize your location history.

03 / Erasure & Retention

We retain your profile and item data for as long as your account remains active. You hold the absolute right to access, export, correct, or permanently delete your account at any time directly through the in-app account deletion setting.

GDPR Erasure & Re-Shared Fork Logic

When you delete your account or request data erasure under UK GDPR, EU GDPR, or applicable US privacy statutes, your personal identifying records (email, username, private capsules) are instantly and permanently purged.

For public items that peer users explicitly **forked** or saved into their independent libraries before your deletion: Capsule purges your author identity and personal notes, leaving only an anonymized, de-identified record of the item metadata (e.g., place coordinates or media catalog ID) so independent users do not suffer data corruption in their personal libraries.

04 / Transfers & Contact

Capsule operates from our headquarters in London, United Kingdom, with parent entity Sruper Inc. registered in Delaware, USA. Our active cloud infrastructure is localized within the European Union (Supabase eu-west-3 data center in Paris, France). Your personal library sits securely within the EU, ensuring uncompromised alignment with UK/EU data residency expectations without routine international data transfers to the US.

Changes to Policy: We will notify you of any material changes to this policy via in-app notifications prior to enforcement.

If you wish to exercise your data privacy rights or contact our designated Art. 27 EU/UK Data Representative, email us directly at [email protected].

05 / Website & Marketing Data

When you interact with our website (`capsule.ad`), submit inquiries via our contact form, or request Early Access onboarding via our waitlist page (`waitlist.html`), we collect personal identification details including your email address, full name, primary city, and optional social handles (Instagram/X).

Lawful Basis & Endpoints: We collect and process this website data under the lawful basis of **legitimate interest and explicit user consent** (GDPR Art. 6(1)(a) & (f)) strictly to administer Early Access onboarding, communicate release timelines, and answer inquiries. Submissions are transmitted securely via encrypted REST API endpoints directly to our European cloud database hosted on **Supabase (`eu-west-3` Paris, France)** and transactional communication tools (such as Resend).

We never sell your marketing data, deploy invasive third-party tracking pixels, or cross-reference your waitlist entries with external advertising networks.