Privacy Policy

1. Information We Collect

Information You Provide:

• Account Registration Data: Username, email address, date of birth, profile photo.
• Profile Information: Bio, links, preferences, self-selected interests.
• Content You Broadcast or Post: Live video streams, comments, profile media.
• Communications: Support emails, reported user tickets.
• Payment Identifiers: Transaction IDs (note: payment processing is done exclusively by Apple and Google; we do not store credit card info).

Information Collected Automatically:

• Device Identifiers: Device type, OS version, app version, unique device ID.
• Network Information: IP address, approximate city-level location, ISP.
• Usage Data: Features accessed, time spent, streams watched, scroll depth.
• Diagnostics: Crash reports and performance metrics via Firebase Crashlytics.
• Interaction Data: Gifts sent/received, follows, likes, comment history.

2. Camera & Microphone Data

We access your device camera and microphone ONLY during active live broadcast or video call sessions that you explicitly initiate.

• We do NOT access camera or microphone when the App is in the background.
• We do NOT store raw video or audio streams on our servers after a session ends.
• We do NOT use camera or microphone for facial recognition or biometric analysis.
• Video stream data is transmitted via Agora RTC (real-time communications provider) to viewers and is not stored unless you choose to record.

3. Live Chat & Ephemeral Messaging

• Live Room Chat: Messages sent during a live stream are ephemeral, displayed in real-time via Firestore, and are automatically purged from our systems after 7 days.
• Private Direct Messages: Stored in encrypted Firestore documents accessible only to the conversation participants. You can delete your side of the thread at any time.
• Moderation Access: Our Trust & Safety team may access message content solely to investigate reports of Community Guidelines violations. We do not sell or exploit chat content.

4. How We Use Your Information

We process your data to operate the service, process transactions, suggest creators, prevent fraud/abuse, and comply with law enforcement. We do NOT sell data to brokers, profile you for politics, or perform profiling without consent.

5. How We Share Your Information

We share data with trust vendors under strict confidentiality agreements:

• Agora Technologies: Real-time streaming infrastructure.
• Google Firebase: Database hosting, auth, and analytics.
• Apple Inc. / Google Play: In-app payment processing.
• Legal & Safety: We disclose data where required by law, or to report child exploitation (CSAM) to NCMEC.

6. Data Retention & Deletion

Upon account deletion:

• Profile data and PII are anonymized or deleted within 30 days.
• Live chat messages and ephemeral content are deleted immediately.
• Uploaded media is deleted within 30 days.
• Transaction records are retained for up to 7 years.
• Safety/moderation records are retained for up to 5 years.

You can request early deletion by emailing support@wepopin.app.

7. Your Privacy Rights (CCPA & GDPR)

You have the right to access, correct, delete, or restrict your data. California residents have specific rights under CCPA, and European users have rights under GDPR. To exercise these rights, contact support@wepopin.app. We respond within 30 days.

8. Contact Us