Simansana

Privacy policy

Last updated 31 July 2026

Simansana is a private vault: a place to hold the things that matter to you, share them with the people you choose, and pass them on. That only works if you can trust us with what you put here, so this page says plainly what we hold, why, and what happens to it. If anything is unclear, write to us at info@simansana.com.

Who we are

Simansana is a product of Goom Coom Ltd, a company registered in England and Wales (company number 09661684) with its registered office at 7c Hanham Hall, Whittucks Road, Hanham, Bristol, BS15 3FR. Goom Coom Ltd is the data controller for everything described on this page, and is registered with the Information Commissioner's Office under registration number ZC209454.

What we hold

• Your account — the identifiers you sign in with (an email address, a telephone or WhatsApp number), your password (stored only as a cryptographic hash — we cannot read it), and your second-factor settings.
• Your profile — the name you give, your date of birth, and a username if you choose one.
• Your vault — the files, photos and documents you upload. They are yours: we store and serve them, and we do not read, mine or analyse them for any purpose of our own.
• Your connections and messages — invitations you send and receive, the people you connect with, and conversations held on the platform.
• Messages you send to our WhatsApp number — if you write to us on WhatsApp we keep the message, the name your WhatsApp profile shares, and delivery records for what we send you.
• A record of account activity — significant actions (signing in, sharing, changes to your account) are kept in an audit trail so that questions like "who shared this, and when?" can be answered honestly.

What we use it for

One thing: providing Simansana. Identifiers let you sign in and let the people who invited you find you; your vault exists to be kept safe and shown only to those you choose; messages we send — sign-in codes, invitations, notices — go to the contact details you verified. We do not sell personal data, we do not share it for advertising, and we do not profile you.

Who processes it for us

These providers handle data on our instructions, and only what their job requires:

• Amazon Web Services — hosting, database and file storage, and email delivery. Our infrastructure runs in London (eu-west-2).
• Meta (WhatsApp) — carries the WhatsApp messages we exchange with you. WhatsApp messages are also subject to WhatsApp's own privacy policy.
• Sentry — error monitoring, so we learn about faults; reports are technical and not built from your vault content.
• Anthropic — provides the AI assistance we use to operate and support the platform. It handles only what the task in hand requires — it does not handle your vault content — and on terms that exclude its use for training Anthropic's models. Also subject to Anthropic's privacy policy.

How long we keep it

For as long as your account is open, because holding things over time is the point of the platform. When you close your account there is a 180-day window in which you can change your mind; after it, your content and profile are removed. A minimal closure record (that an account existed and when it closed) is kept for five years, and entries in the audit trail are kept for one year from the action they record.

Deleting your data

You can close your account yourself, from your account settings, at any time. Closure ends access immediately and starts the removal described above. If you cannot sign in, write to info@simansana.com from a contact address on your account and we will do it for you.

Your rights

Under UK data protection law you can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, and object to how it is handled. Write to info@simansana.com, or by post to Goom Coom Ltd at the registered office above, and we will respond within a month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

Two, both for signing you in: a session cookie, and — only if you tick "remember me" — a persistent sign-in cookie that lasts a week. No advertising or analytics cookies, ours or anyone else's.

Changes

If this policy changes in a way that matters, we will say so on this page and, for significant changes, tell you directly. The date at the top is the date of the last change.