Privacy

Last Ummah is operated from the United Kingdom. For any privacy question, contact hello@lastummah.co.uk. We act as the data controller for the information described below.

We only collect data you actively submit through our forms.

• Waitlist signups. Email address and city. Stored in our waitlist_signups table along with the date you signed up.
• Applications. When you apply through /apply or any tier on /network, we store the tier you applied for, your name, and, depending on the form, your email, role, city, and the free-text answers you provide. Free-text answers are kept in a structured payload field in our applications table.
• Email correspondence. If you email us directly, we keep the message for as long as needed to reply and follow up.

We do not use third-party advertising trackers, analytics fingerprinting, or behavioural profiling. We do not buy or enrich data from outside sources.

• To let you know when the waitlist opens, when products launch, and when something relevant happens in your city.
• To review applications for the founding tiers, advisory council, builder roles, and city-lead referrals.
• To respond to questions, introductions, and direct correspondence.

The legal basis is your consent (when you submit a form) and our legitimate interest in operating and building the project.

Data is stored in a managed Postgres database hosted on Lovable Cloud (powered by Supabase) in the EU region. Access to the underlying tables is restricted: the public website can only insert new rows, never read them. Reading rows requires a service-role credential held only by the project owner and used from a token-protected admin view.

Transfers happen over HTTPS. We never store payment information, there are no products on sale yet.

We do not sell your data. We do not share it with marketing partners. The only third parties involved are the infrastructure providers strictly necessary to run the site (Lovable Cloud / Supabase for storage, our domain and email provider for correspondence). They process data on our instructions.

Waitlist entries are kept until launch and for a reasonable period after, so we can let you know the project has opened. Application records are kept for the lifetime of the review process and our ongoing relationship with the people involved. You can ask us to delete your record at any time.

Under UK GDPR you have the right to access, correct, export, or delete the data we hold about you, and to withdraw consent at any time.

To exercise any of these rights, email hello@lastummah.co.uk from the address you signed up with, or include enough detail for us to identify your record. We will respond within 30 days. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk.

The site does not set marketing or analytics cookies. The only browser storage we use is a small session token on the admin page, which only the project owner sees.

We will update this page as the project evolves and will revise the "last updated" date above. Material changes will be flagged to people on the waitlist by email.