THE SMALL PRINT

Privacy, in plain words

This policy covers the waitlist and nothing more. When there is a product to sign into, it grows — and everybody on the list hears about it in the same email that lets them in.

Last updated 1 September 2026

  • What we hold

    Your email address, the date you joined, and your place in the queue. That is the whole record — there is no account, no profile and no payment detail to hold.

  • What we do with it

    We keep it in a database of our own and send you one email, when it is your turn. No newsletter, no launch countdown, no “five productivity tips”.

  • What you can do

    Ask, and the address is deleted — not archived. The one email we send will carry a link that does the same. If you never hear from us, it is because there is nothing to say yet.

THE DETAIL

What happens to your email address

The honest version is short, because we hold almost nothing. A product built on the promise that nobody can read your notes should not start by being careless with your address.

  1. What we collect

    Your email address, the date and time you joined, and the language the page was in when you did. Your queue number is worked out from the date each time, not stored. No name, no phone number, no tracking pixel, and no analytics on this page.

  2. Why we may hold it

    Consent — you typed your address into a box that said what it was for. That is our lawful basis under UK GDPR, and you can withdraw it at any moment by leaving the list.

  3. Where it lives

    In a database of our own, run for us by Neon on Amazon's servers in the United States (Ohio), encrypted in transit and at rest by the host. The waitlist is a single table in a single system, not a spreadsheet passed around — and if it moves, this policy says where first.

  4. Who sees it

    The people who run SITUKIT, and Neon, which hosts the database as our processor. Nobody else. We do not sell, rent, swap or “share with trusted partners” — not now, not at launch.

  5. Cookies and tracking

    This page sets one cookie, and only if you change the language: NEXT_LOCALE, which remembers the language you chose so the app can use it too. That is the only one — no analytics, no advertising, no fingerprinting, and no tracking pixel in the one email that follows. If that ever has to change, this policy changes first and the date at the top moves.

  6. How we keep it safe

    Encrypted in transit and at rest, reachable only with credentials held by the people who run SITUKIT, and with no admin screen in front of it. The strongest protection is the first one, though: we barely hold anything worth stealing.

  7. How long we keep it

    Until we let you in, or until you leave — whichever comes first. When you leave, the row is deleted from the database, not moved to an archive. If the product never launches, the whole list is deleted.

  8. Your rights

    You can ask what we hold about you, ask for a copy, correct it or have it deleted. For a record this small the answer will usually arrive the same week. If you are unhappy with how we handle it, you can complain to the ICO, the UK regulator.

  9. Automated decisions

    None. Your queue number is arithmetic — a count of the people ahead of you — not a score. Nothing about you is profiled, ranked or fed to a model.

  10. Children

    The waitlist is not aimed at children and we do not knowingly hold an address belonging to anyone under 13. If one has ended up on the list, tell us and it goes the same day.

  11. If something goes wrong

    If the list is ever breached, we tell the ICO within 72 hours and we tell you in plain words — what leaked, when, and what we are doing about it. You will not get a “we take your privacy seriously” paragraph in place of facts.

  12. Who to talk to

    hello@situkit.com reaches a person, not a queue. Questions about this page, requests under clause 08, and anything that reads as unclear all go to the same address.

Wondering what joining actually commits you to?Read the terms

Privacy — SITUKIT