Privacy policy
Last updated 6 October 2026
Who we are
caleb is run by Nils Lilja, an individual based in Sweden (“we”, “us”). We are the controller of the personal data described here. For any question or request, email nilsliljan@gmail.com.
The short version
- We collect your phone number to hold your spot on the waitlist and to text you about caleb.
- We never sell your data and never use it for ads.
- Reply STOP to any text, or email us, and the texts stop. Ask, and we delete everything.
What we collect
- Your phone number.
- Your place in line, the referral code we give you, and the code of the person who invited you, if anyone did.
- Where you came from, when the link you used says so (for example “linkedin”).
- When you joined.
- Anything you write back to our texts.
- Your IP address, for a moment, to stop abuse of the signup form. We don't store it. Our hosting providers keep standard server logs for a short time.
This site sets no cookies and shows no ads. We count visits with Vercel Web Analytics, which doesn't use cookies or identify you. It records the page you opened, the site that sent you, your rough location, and your browser, system and device type, and it groups the pages of one visit with a temporary hash that Vercel discards after 24 hours.
The site saves your place in line and your referral link in your browser's local storage so it can show them when you come back. That stays on your device, and you can clear it whenever you like.
Why we use it, and the legal basis
- To hold your spot, rank the waitlist and count referrals, because you asked to join (to carry out our agreement with you, GDPR article 6(1)(b)).
- To text you about your spot, your referrals and the launch, based on your consent (article 6(1)(a)). You can withdraw it at any time by replying STOP.
- To stop fake signups and abuse, based on our legitimate interest in keeping the waitlist fair (article 6(1)(f)).
- To count visits and see which links bring people here, without cookies, based on our legitimate interest in knowing whether the site works (article 6(1)(f)).
- To let the founder know someone joined, with one internal email per signup, based on our legitimate interest in running the waitlist (article 6(1)(f)).
- If you buy caleb later, to take payment and keep the records the law requires (articles 6(1)(b) and 6(1)(c)).
Who we share it with
Only the services that run caleb for us, under contracts that limit them to our instructions:
- Vercel, which hosts this site and counts visits.
- Supabase, which hosts our database.
- Resend, which sends the founder the signup notification email.
- The messaging provider that sends our texts. We'll name it here before the first text goes out.
- Stripe, which handles payments, if you buy.
We don't sell your data or share it with anyone for advertising. We will disclose data if the law requires us to.
Transfers outside the EU
Some of these providers are based in the United States. When your data leaves the EU and EEA, we rely on the European Commission's standard contractual clauses, or on the EU and US Data Privacy Framework where the provider takes part in it.
How long we keep it
We keep your waitlist data until caleb launches and for up to 12 months after that, unless you ask us to delete it sooner. If you become a customer, we keep what we need to run your account, and payment records for as long as Swedish bookkeeping law requires (currently seven years).
Your rights
You can ask us to show you, correct, delete or export your data, and to restrict or stop processing it. You can withdraw consent at any time. Email nilsliljan@gmail.com and we'll answer within one month.
You can also complain to the Swedish Authority for Privacy Protection (IMY) at imy.se, or to the data protection authority where you live.
Children
caleb isn't for anyone under 16. If you're under 16, please don't sign up. If we learn we hold a child's data, we delete it.
Security
Your data is encrypted in transit. Our database can't be reached publicly and is read only by our server. Access is limited to the founder.
Changes
If this policy changes, we update the date at the top. If a change matters, we'll tell you by text or on this site before it applies.