Privacy Policy

1. Introduction

VIZLAI LTD. ("we", "us", "our") operates the website thesaltyapp.com and associated subdomains ("the Website"). This Privacy Policy explains what data we collect when you visit the Website, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Bulgarian law.

2. Data Controller

Company: VIZLAI LTD.
Address: Sofia, Strahil Voyvoda 2, Bulgaria
Company number: 205014237
Email: hello@thesaltyapp.com

3. Data We Collect on the Website

3.1 Via the Early Access and Quiz Sign-Up Form

When you complete the early access sign-up form or the Salty web quiz, we collect:

• First name
• Age
• City
• Email address
• Your quiz answers and result type (for the web quiz)

This data is collected with your consent (you tick a box confirming you wish to join the early access list). We use it to:

• Add you to our early access mailing list via Mailchimp
• Notify you when Salty launches in your city
• Generate your personalised quiz result card and match results
• Send you match notifications when a friend completes the quiz via your shared link

3.2 Via Mailchimp

We use Mailchimp (The Rocket Science Group LLC) to manage our mailing list. When you submit the form, your name, email, city, and age are transmitted to and stored by Mailchimp on our behalf. Mailchimp acts as a data processor under a data processing agreement. You may unsubscribe at any time using the link in any email we send. Mailchimp's privacy policy is available at mailchimp.com/legal/privacy.

3.3 Via Google Analytics

We use Google Analytics 4 (Google LLC) to understand how visitors use the Website. Google Analytics uses cookies and collects data including:

• Pages visited and time spent
• Device type, browser, and operating system
• Approximate geographic location (country/region level)
• Referral source (how you found the Website)
• Quiz funnel behaviour (which questions were answered, where users dropped off)

This data is aggregated and anonymised. We have enabled IP anonymisation in Google Analytics. We do not use Google Analytics to identify individual users. Google Analytics data is processed by Google LLC and may be transferred to the United States under Standard Contractual Clauses. Google's privacy policy is available at policies.google.com/privacy.

3.4 Cookies

The Website uses the following cookies:

• Essential cookies — necessary for the Website to function (session management, form state)
• Analytics cookies — Google Analytics 4 (_ga, _gid, _gat) — set only with your consent

When you first visit the Website, you will be presented with a cookie consent banner. Analytics cookies are only placed if you consent. You may change your cookie preferences at any time by clicking Cookie settings here, or by clearing your browser cookies and revisiting the site.

3.5 Web Quiz — Firebase Storage

When you complete the web quiz, your quiz result, unique user ID, and match data are stored in Firebase Firestore (Google LLC). This enables the My Matches hub and allows both you and your quiz matches to access your shared results. This data is associated with a random user ID stored in your browser's localStorage. It is not linked to any other platform account.

4. Legal Basis for Processing

• Consent — mailing list sign-up, analytics cookies, quiz data
• Legitimate interests — basic server logs necessary for Website security

5. Data Sharing

We share your data with the following processors only:

• Mailchimp (The Rocket Science Group LLC) — mailing list management
• Google LLC — Google Analytics 4 and Firebase

We do not sell your data to any third party. We do not use your email address for advertising purposes outside of Salty-related communications.

6. International Transfers

Mailchimp and Google LLC are based in the United States. Transfers to these providers are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.

7. Data Retention

• Mailing list data — retained until you unsubscribe, at which point it is removed from active lists. You may request full deletion by emailing hello@thesaltyapp.com
• Google Analytics data — retained for 14 months per our GA4 configuration
• Quiz and Firebase data — retained for 12 months from last activity, then deleted

8. Your Rights

Under GDPR you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time (including unsubscribing from emails)
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg)

To exercise any right, contact us at hello@thesaltyapp.com.

9. Changes to This Policy

We may update this policy from time to time. The date at the top indicates the last update. Continued use of the Website after changes constitutes acceptance.

10. Contact

Email: hello@thesaltyapp.com
Company: VIZLAI LTD.
Address: Sofia, Strahil Voyvoda 2, Bulgaria
Company number: 205014237