Privacy Policy

Selff (“Selff”, “we”, “us”) is operated by Realgar Pte. Ltd., a company incorporated in Singapore (UEN: 202629986M). We are the data controller responsible for your personal data.

Questions or requests about this policy or your data: hello@selff.co. Registered address: 68 Circular Road, #02-01, Singapore 049422.

Selff is available to users in the European Union and the United Kingdom, so this policy is written to meet the EU General Data Protection Regulation (GDPR) and the UK GDPR, in addition to Singapore’s Personal Data Protection Act (PDPA). This policy is governed by the laws of Singapore.

You upload a selfie and type one sentence about what’s on your mind. We generate a transformed version of your image with a single insight line. That’s the whole service.

We are deliberately minimal. The table below is the complete picture of how long each item is kept.

• Your uploaded photo. Used solely to generate your reading. It is never saved on our own servers. Our image provider (fal.ai) holds it only while the reading is generated and deletes it automatically within 10 minutes.
• Your sentence. Sent to our AI provider (Anthropic) to write your reading. We do not store it. Anthropic may keep API inputs briefly for safety monitoring under its own policy, and does not use them to train its models.
• Your output image. Stored temporarily for a maximum of 24 hours so you can view, download and share it, then permanently deleted.
• Reading details (the insight line, symbol and timestamp, linked to your account or a device cookie). Kept as your reading history while your account is active; for readings without an account, up to 12 months.
• IP address and device identifier. Used to prevent abuse (rate limits and the free-reading limit). Kept for up to 30 days, then deleted.
• Usage events (for example “reading completed” or “checkout started”, with the website or campaign that referred you). Never includes your photo or sentence. Kept for up to 24 months to understand how Selff is used.
• Reports. If you report a reading, we keep the report for up to 12 months to review it and prevent misuse.
• Account data (your email, reading balance, purchase and subscription status). Kept while your account is active; deleted on request or when you close your account, except records we must keep by law (such as payment records for tax purposes).
• Waitlist email. If you join the app waitlist, kept until the app launches or you ask us to remove it.
• Payment data. Handled by Stripe. We never see or store your full card details.

We do not sell your personal data, and we do not use your uploads to train AI models.

• Contract. To deliver the readings, credits and subscriptions you request, and to send the emails that go with them.
• Legitimate interests. To keep the service secure and prevent abuse (IP-based limits, reports), and to understand and improve Selff (usage events).
• Consent. For non-essential analytics cookies and the app waitlist. You can withdraw consent at any time via “Cookie settings” in the footer.

We rely on a small set of trusted providers to run Selff. Each processes data only as needed to provide their service.

• fal.ai · United StatesImage-to-image processing (generates your reading)
• Anthropic (Claude API) · United StatesSymbolic interpretation and insight-line generation
• Resend · United StatesTransactional email (sign-in links, welcome and receipt emails)
• Stripe · United States / globalPayment processing for credit packs and subscriptions
• Supabase · EU / United StatesDatabase: accounts, reading history, abuse-prevention records
• Vercel · United States / globalWebsite hosting and, with your consent, anonymous analytics
• Google Workspace · United States / globalOur email inbox, if you write to us

Image processing runs on US-based infrastructure (fal.ai), and other providers may process data in the United States. This means your data may be transferred outside the EEA, the UK and Singapore. Where required, such transfers are made under appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), which are built into our providers’ data processing agreements, or the EU–US Data Privacy Framework where a provider is certified.

We use essential cookies to keep you signed in and to run the service — these are strictly necessary and do not require consent. With your consent, we also use non-essential analytics cookies to understand how Selff is used. Nothing non-essential loads until you accept, and you can change your choice any time via “Cookie settings” in the footer.

If you are in the EU or UK, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. You may withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority — your local EU data protection authority, the UK Information Commissioner’s Office (ICO), or Singapore’s Personal Data Protection Commission (PDPC).

To exercise any of these rights, email hello@selff.co. We reply within one month. Wherever you are, you can ask us to delete your account and data at any time.

Selff is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use it.

We may update this policy as Selff evolves. Material changes will be reflected by the “last updated” date above.