Privacy policy

Last reviewed: November 1, 2026

Plain-language summary of what we collect on this waitlist page and why.

Who is responsible for your data

The data controller is Efraim Safaniev, sole proprietor, operating Hey Sababa. Contact: hello@heysababa.com.

Your email address.
The language of the page you used.
A country guess based on your device's time zone (not your precise location).
Your optional answers: preferred chat app and what annoys you most.
Referral data: your invite code, who invited you and how many people joined through your link.
Whether you agreed to receive early-access news.
A scrambled (hashed) version of your IP address, kept for one day to stop abuse.
We do not collect your name, phone number, precise location or payment details on this page.

To run the waitlist and invite you when access opens.
To send early-access news, only if you agreed.
To count invites and move you up the line.
To prevent spam and abuse.
With your consent only: to measure how the page is used.
Providing information is not required by law. Without an email address, we cannot add you to the list.
Files you send to the assistant are processed only to carry out your request and are not used to train AI models.

Consent, for news emails and analytics and marketing cookies. You can withdraw it at any time.
Legitimate interest, for running the waitlist you asked to join and keeping it secure.
This covers EU and UK GDPR, Brazil's LGPD and US state privacy laws.
Israel's Protection of Privacy Law, 5741-1981, also applies.

Waitlist data: until launch and up to 12 months after, or until you ask us to delete it.
Abuse-prevention data: deleted after one day.

Hosting: Lovable, on Cloudflare's network.
Database: Supabase. Your data is stored in Europe.
They may process data outside your country under standard contractual safeguards. We never sell your data and never train AI models on your messages.
Data is shared only with these providers to operate the service. We will not sell your data or share it with third parties for advertising.

Google Analytics (Google LLC) loads only if you accept analytics, and Meta Pixel (Meta Platforms Ireland Ltd.) loads only if you accept marketing.
They receive technical browsing data: pages viewed, device and browser type, IP address and a cookie ID, plus general events such as sign-up or sharing. We never send them your email, phone, name or anything you typed.
Legal basis: consent only. You can withdraw it at any time through "Cookie settings", effective immediately.
Transfers: data may be transferred to Google LLC in the USA and to Meta Platforms Ireland and Meta Platforms, Inc. in the USA, under the EU-US Data Privacy Framework or Standard Contractual Clauses (SCC).
Other ways to opt out: Google's Analytics opt-out browser add-on, and the ad settings in your Facebook or Instagram account.

Inspect your data, obtain a copy, correct or delete it (under sections 13 and 14 of the Protection of Privacy Law and the GDPR).
Object to processing or withdraw consent.
Complain to Israel's Privacy Protection Authority, an EU data protection authority, the UK ICO or Brazil's ANPD.

Email hello@heysababa.com from the address you signed up with and write "Delete my data".
We reply within 30 days.

Data is encrypted in transit, database access is restricted to the server, and IP addresses are stored only as one-way hashes for one day.

The service is intended for people aged 18 and over. If we learn that a minor has signed up, we will delete their details.

If we materially change this policy, we will update this page and notify waitlist members by email.

Details about cookies and managing your choices are in our Cookie policy.