Updated October 31, 2026
Privacy notice
This notice covers the Sumylo waitlist at sumylo.com. We collect as little as we can, use it only for the waitlist, and delete it when you ask.
Who we are
Sumylo operates sumylo.com and this waitlist. Sumylo is independently operated from Ontario, Canada, and is not affiliated with, endorsed by or sponsored by McMaster University or any other university.
- Privacy questions and requests: privacy@sumylo.com
- Everything else: hello@sumylo.com
What we collect
- Your email address.
- For the list for other universities, the name of your university.
- How you found us, if the link you used says so (for example a poster QR code, Instagram or a friend's link). If a friend's link brought you, we note whose link it was.
- That you agreed to receive emails from us, and when.
- Only if you choose to answer the optional questions after joining: your gender and who you'd like to meet. Because these can reveal your sexual orientation, they're sensitive: we ask only after you've joined, you can skip either or both, and saving them is your consent to this use. They're stored separately from the rest of your signup, used only in totals to plan a balanced launch, never shown to anyone or used to contact you, and deleted with your signup. To delete just these answers, email us.
We don't collect your name, phone number or location. To stop abuse, our server keeps a scrambled, one-way code made from your internet connection's address for up to 24 hours, then deletes it. Our hosting provider also keeps short-lived technical logs to run and secure the site.
Why we use it
- To email you when Sumylo opens at McMaster (or at your university), and to send the occasional update about Sumylo.
- To understand how people hear about us and to plan a balanced launch, using totals only.
- To keep one signup per person and to protect the waitlist from spam and abuse.
We never sell your information, share it with advertisers, or use it to build an advertising profile. We don't use advertising or tracking cookies on this site. Joining the waitlist doesn't create a Sumylo account and doesn't verify that you're a student.
Consent and emails
We only email you because you ticked the box agreeing to it. Every email will include a way to unsubscribe, and you can withdraw your consent at any time by leaving the waitlist or writing to us.
Where it's stored and who helps us
The waitlist is stored in a database run by Supabase, in its Canada (Central) region, separate from everything else we run. The website is hosted by Vercel, whose servers may process requests outside Canada, including in the United States, where the law may allow authorities to access information. When we send launch emails we'll use an email service that processes addresses on our behalf. These providers may only use your information to provide their service to us.
How long we keep it
Only as long as the waitlist needs it. Our database deletes your details automatically at the earliest of these:
- When you leave the waitlist: straight away.
- 12 months after Sumylo opens at McMaster, or at your university for the separate list.
- 24 months after you joined, if Sumylo hasn't opened by then. Launches can take longer than planned, so before that point we may email you once to ask whether you'd like to stay on the list. If you say yes, we keep your details for up to another 24 months; if you don't reply, they're deleted.
- If our emails to you bounce permanently, we remove you.
The scrambled connection codes we use to stop abuse are deleted within a day. If you create a Sumylo account later, the app has its own privacy policy.
Your choices
- Leave the waitlist anytime with the link on your confirmation screen (sumylo.com/leave), or by emailing privacy@sumylo.com. We delete your email and any answers you gave.
- Ask what we hold about you, or ask us to correct it, by emailing the same address. We'll reply within 30 days.
- If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Age
The waitlist is for people aged 18 and over. If you're under 18, please don't join; if you have, email us and we'll delete your details.
Changes
If we change this notice in a way that matters, we'll update the date above and, for significant changes, tell people on the waitlist by email.