Mwah.
Privacy notice
This page covers one thing: the Instagram handle you can type into the form on mwah.io. Mwah is not a working product yet — it is being built, and this notice describes only what happens today.
Who is responsible for your data
Mwah is being built by Sean Hegarty, an individual based in Ireland. There is no registered company behind it yet, so the data controller is Sean Hegarty personally.
You can reach him about anything on this page at hey@mwah.io. There is no Data Protection Officer; one is not required at this scale.
What we collect
Only the Instagram handle you type in, and the date you submitted it. That is the whole record.
We do not collect your name, email address, phone number, date of birth or payment details. We do not store your IP address, and the landing page sets no advertising or analytics cookies of our own.
Why we collect it, and our lawful basis
To message you on Instagram about Mwah while it is being built with its first artists — to ask what you need from a booking app, and to tell you when there is something to try.
Our lawful basis is your consent (Article 6(1)(a) GDPR). You give it by choosing to submit your handle. Nothing is pre-ticked and nothing is collected unless you type it in yourself. We do not use your handle for anything else, we do not sell it, and we do not add it to any advertising audience.
You can withdraw your consent at any time by emailing hey@mwah.io. Withdrawing is as easy as giving it: we delete the handle and stop contacting you.
Do you have to give it?
No. It is entirely optional. If you do not submit a handle, nothing happens — you simply will not hear from us. There is no other consequence.
Who else can see it
- Supabase (Supabase Pte. Ltd., Singapore) hosts the database the handle is stored in. It runs on Amazon Web Services infrastructure in the EU.
- Lovable (Lovable Labs Incorporated, United States; EU representative Lovable Labs AB, Stockholm) hosts the mwah.io website itself.
Both act only on our instructions under a data processing agreement. Nobody else receives your handle.
Separately: when we message you, that message goes through Instagram, which is run by Meta under its own privacy terms. We do not send Meta your handle — you gave it to Instagram already — but the conversation itself lives on Instagram.
Transfers outside the EEA
Supabase and Lovable are based outside the European Economic Area and may process data outside it. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses in each provider’s data processing agreement.
How long we keep it
12 months from the day you submit it, unless you ask us to delete it sooner or you become an artist on Mwah and we agree a longer relationship with you. After 12 months the record is deleted automatically by a scheduled job — not by somebody remembering to do it.
Your rights
Under the GDPR you can ask us to:
- tell you whether we hold your handle, and give you a copy of the record;
- correct it if it is wrong;
- delete it;
- restrict or stop what we do with it, including objecting to it;
- send you the record in a portable format;
- withdraw the consent you gave, at any time.
Email hey@mwah.io and say which. We will respond within one month. Because the only thing we hold is a public Instagram handle, we may ask you to confirm the request from that account so we do not delete or disclose somebody else’s record on their behalf.
There is no automated decision-making and no profiling. Nothing is decided about you by a machine.
Complaints
If you are unhappy with how we handled your data you can complain to the Irish supervisory authority:
Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963, Ireland
dataprotection.ie
Changes
If this changes we will update this page and the date at the top. Mwah is early; if the product grows into something that handles more than a handle, this notice will be rewritten before that happens, not after.