Version 1.0.0 — in force from 15 September 2026. Reviewed and approved by counsel on 9 September 2026. The Thai version is the authoritative text. This English version is a translation; if the two differ, the Thai version governs.
This document is deliberately short. You accept it together with the Terms of Service and the Privacy Policy in a single tick at sign-up, and each acceptance is recorded separately, with its own timestamp, as evidence.
1. Where your data is stored and processed
- The UWU ID database is in Singapore (provider: PlanetScale). All of your account data lives there and nowhere else.
- Request processing happens on Cloudflare's network, which has points of presence in many countries. Each request runs at the location closest to you at that moment and then talks back to the database in Singapore.
- Cloudflare also delivers the service's email (one-time codes, security notices) and checks that a visitor is a human rather than a bot.
2. Why the data leaves Thailand
The UWU ID account service is built entirely on this infrastructure — both where the data is stored and where requests are processed. Without it the service cannot be provided at all.
3. What you should know before you consent
These destination countries and providers may not offer data protection standards equal to Thai law. Your rights under Thai law remain, and you can always exercise them with us, but enforcing them abroad can be harder than at home.
This consent is a condition of using the service, because there is no way to run this account service without sending data outside Thailand. If you do not consent, you cannot register or use a UWU ID account.
Both providers are bound to us by the standard data processing agreements incorporated into their terms of service, which require them to process data only on our instructions, prohibit use for their own purposes, and oblige them to notify us of a breach.
4. Withdrawing consent
You can withdraw this consent at any time from the "accepted documents" page in your account. Because this consent is the basis for the transfer, withdrawing it means we can no longer provide the service: we will stop serving your account and delete it through the normal deletion process, which you can reverse within 30 days. After that we destroy your decryption key, making your date of birth and any data deposited by UWU services permanently unreadable.
Withdrawal does not affect the lawfulness of transfers made before it.
5. Contact
Personal data matters: dpo@uwu.co.th · General enquiries: helpdesk@uwu.co.th