Seren — Privacy Policy
Effective date: 1 July 2026 · Controller: Yamu Ltd, 61c Rivington St, London EC2A 3QQ, United Kingdom · Contact: privacy@seren.social
1. Who we are
Seren ("Seren", "we", "us") is a private introduction service that helps people meet the right people at real-world events. Yamu Ltd is the data controller for personal data processed through Seren. If we have appointed a Data Protection Officer or privacy contact, you can reach them at privacy@seren.social.
2. Scope
This policy covers the Seren website, web app, and mobile apps. By using Seren you confirm you are 18 or older and agree to this policy.
3. The data we process
- Account data — name, email, login identifiers, and (via your chosen provider) Apple/Google/LinkedIn sign-in identifiers.
- Profile & matching signals — what you do, what you're open to, interests, and the free-text you give your agent. We derive embeddings (mathematical representations of meaning) from this to match you. We treat the signals you provide as the basis of matching; we do not ask for special-category data and ask that you don't volunteer it.
- Connection & messaging data — introductions made, your consent choices, and messages you send through Seren once two people are connected.
- Event data — events you join or host, attendance/check-in, and (hosts only) attendee and outcome data for events you run.
- Payment data — for organiser subscriptions and ticketing, payments are processed by Stripe. We receive confirmation and limited billing metadata; we do not store full card numbers.
- Usage & device data — app/website interactions, device and log data, and (mobile, with permission) push tokens and, at live events, proximity/presence signals used to surface who is nearby.
4. How and why we use it (lawful bases under UK GDPR)
| Purpose | Lawful basis |
|---|---|
| Provide the service (accounts, events, introductions, messaging) | Performance of a contract |
| Match you with people via the agent / embeddings | Consent (you can pause your agent at any time) |
| Keep people safe (moderation, reports, blocking, fraud prevention) | Legitimate interests |
| Payments, billing, and ticketing | Performance of a contract / legal obligation |
| Service emails and push (transactional) | Performance of a contract |
| Marketing emails | Consent (opt-in; unsubscribe any time) |
| Analytics to improve Seren | Legitimate interests / consent where required |
5. The blind broker — privacy by design
Identity is released in stages, and only by mutual consent. Before a mutual "yes", the other person sees only an abstract, reasoned match — never your surname, photos, or contact details. First name, full profile + photos, and contact details are three separate consents; withdrawing consent halts further disclosure. This is core to how Seren works.
6. Who we share data with
We share personal data only with processors acting on our instructions, including: MongoDB Atlas (database hosting), OpenAI (embeddings/matching), Stripe (payments), Expo (push notifications), and our email delivery, cloud hosting, and error-monitoring providers. We have data-processing agreements with each, and a current list of sub-processors is available on request from privacy@seren.social. We do not sell your personal data. We may disclose data where required by law or to protect users' safety.
7. International transfers
Some processors are outside the UK/EEA. Where that happens we rely on appropriate safeguards (UK IDTA / EU Standard Contractual Clauses or adequacy). Details on request at privacy@seren.social.
8. Retention
We keep personal data only as long as needed for the purposes above. When you delete your account we erase or anonymise your personal data — including profile, embeddings, introductions, and messages — except where we must retain limited records for legal, accounting, or safety reasons. Our retention schedule is available on request.
9. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent at any time. You can export your data and delete your account from within Seren (see seren.social/data / the Data & deletion page), or contact privacy@seren.social. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
10. Security
We use encryption in transit, access controls, server-assigned roles, signed payment webhooks, and rate limiting, among other measures. No system is perfectly secure, but we work to protect your data and will notify you and the ICO of a qualifying breach within the required timeframes.
11. Cookies & similar technologies
See our Cookie Policy. On the web we ask for consent where required.
12. Children
Seren is for adults. It is not directed at anyone under 18, and we do not knowingly process their data. If you believe a minor is using Seren, contact privacy@seren.social.
13. Changes
We may update this policy; we'll post the new version with a new effective date and, for material changes, notify you in-app or by email.
14. Contact
Yamu Ltd, 61c Rivington St, London EC2A 3QQ · privacy@seren.social.