Privacy Policy

1. Introduction

Welcome to Wibely ("we," "our," or "us"), operated by WIBELY PTY LIMITED. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Wibely (the "App") and our website www.wibely.com.

By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not use our App.

We reserve the right to change this policy at any given time, of which you will be promptly updated. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information from Third-Party Sign-In Services

When you sign in using Google or Apple:

• Basic profile information (name, email)
• Profile picture
• Authentication tokens
• No passwords are shared with us from these services

2.3 Information Collected Automatically

2.4 Biometric Data

• We support Face ID/Touch ID for convenient login
• Biometric data is stored securely on your device only
• We only receive confirmation of successful authentication

3. How We Use Your Information

We use the information we collect to:

• Provide Services: Create and manage your account, enable social features
• Personalize Experience: Show relevant content and recommendations
• Communication: Send notifications about app features and social interactions
• Security: Detect and prevent fraud, spam, and abuse
• Improvements: Analyze usage patterns to improve our services
• Legal Compliance: Comply with legal obligations and enforce our terms
• Messaging Services: Enable direct communication between users, deliver messages and push notifications

4. Direct Messaging & Chat Services

4.1 How Messaging Works

Our direct messaging feature ("Wibe Messaging") allows you to communicate privately with other Wibely users. When you use this feature:

• Messages are transmitted and stored using Google Firebase services (Firestore for messages, Realtime Database for presence)
• Messages are stored on secure cloud servers and are NOT end-to-end encrypted. While we use encryption in transit (TLS) and at rest, Wibely has technical capability to access message content for safety, moderation, and legal compliance purposes
• Your online status, last seen time, and typing indicators are visible to users you are communicating with (unless you disable visibility in settings)
• Read receipts indicate when your messages have been viewed

4.2 Privacy by Design - No Media Uploads

Wibe Messaging is designed with your privacy in mind. Unlike traditional messaging apps:

• No Photo/Video Uploads: Wibe Messaging does not support uploading images, videos, or files from your device
• No Device Storage Access: We never request or access your photo library, camera roll, or file storage for messaging purposes
• Content Sharing via Wibes: Instead of media uploads, you share content by sending "Wibes" - curated references to movies, music, books, games, and other entertainment that you're passionate about
• Reduced Privacy Risk: This design eliminates the risk of accidentally sharing sensitive personal photos or documents through chat

This approach keeps conversations focused on shared interests while protecting your personal media from unintended exposure.

4.3 Message Data Retention

• Active Conversations: Messages are retained while the conversation remains active for both parties
• Deleted Messages: When you delete a message "for yourself," it is hidden from your view but may still be visible to other participants. When you delete "for everyone" (within allowed timeframe), the message content is removed for all participants
• Deleted Conversations: Deleting a conversation removes it from your chat list but does not delete the messages for the other participant
• Account Deletion: When you delete your account, your profile information is anonymized to "Deleted User" in existing conversations. The other party retains access to the conversation history but will see your messages attributed to "Deleted User" and will not be able to send you new messages
• Reported Messages: Messages that have been reported for violations may be retained longer for investigation purposes

4.4 Push Notifications for Messages

• We send push notifications to inform you of new messages when you are offline
• Notification content may include sender name and a preview of the message
• We use rate limiting (30 seconds between notifications per conversation) to prevent notification spam
• You can disable message notifications in your device settings

4.5 User Controls for Messaging

You have control over your messaging experience:

• Block Users: Prevent specific users from messaging you
• Delete Messages: Remove messages for yourself or for everyone
• Delete Conversations: Remove entire conversations from your chat list
• Online Visibility: Control whether other users can see your online status and last seen time
• Report Messages: Report inappropriate, harassing, or illegal message content

4.6 Content Filtering

• We apply automated content filtering to messages to block or mask profanity and offensive language
• Message length is limited to 2,000 characters for text messages and 500 characters for captions on shared content
• These measures help maintain a safe communication environment but are not foolproof

4.7 Important Disclaimers for Messaging

5. User-Generated Content and Conduct

5.1 Your Responsibility for Content

When you post reviews, comments, or other content, you are responsible for:

• Accuracy: Ensuring your content is truthful and not misleading
• Legality: Not posting illegal, defamatory, or harmful content
• Respect: Not posting hate speech, harassment, or discriminatory content
• Privacy: Not sharing others' personal information without consent
• Intellectual Property: Not posting copyrighted content without permission

5.2 Public Nature of Content

5.3 Content Moderation

We reserve the right to:

• Remove content that violates our Terms of Service
• Suspend or terminate accounts for repeated violations
• Report illegal content to appropriate authorities
• Respond to valid legal requests for user information

5.4 Messaging Conduct

When using direct messaging features, you must NOT:

• Send unsolicited commercial messages (spam)
• Harass, threaten, or bully other users
• Send sexually explicit or pornographic content
• Share malware, phishing links, or malicious content
• Impersonate other users or entities
• Use messaging to circumvent blocks or bans
• Share illegal content or coordinate illegal activities
• Repeatedly contact users who have blocked you (through new accounts)

Violation of these rules may result in message deletion, conversation restrictions, temporary suspension, or permanent account termination.

6. Information Sharing and Disclosure

6.1 We DO NOT Sell Your Personal Information

We never sell, rent, or trade your personal information to third parties.

6.2 Limited Sharing Scenarios

We may share your information only in these situations:

7. Data Security and Storage

We implement industry-standard security measures:

• Encryption: All sensitive data is encrypted in transit and at rest
• Secure Authentication: Password hashing and secure token storage
• Access Controls: Limited access to personal information
• Regular Updates: Security patches and vulnerability assessments
• Rate Limiting: Protection against brute force attacks

7.1 Data Storage Location

Information collected from you will be stored on Amazon Web Services (AWS), which is a broadly adopted cloud platform, for such period as required to complete the transaction entered into with you or such period as mandated under applicable laws.

Messaging Data Storage:

• Direct messages and conversations are stored on Google Firebase (Firestore)
• Real-time presence and typing indicators are stored on Google Firebase Realtime Database
• Message reports are stored in our secure database for review
• Push notification tokens are stored to enable message delivery notifications

7.2 Security Disclaimer

8. Your Rights and Choices

8.1 Access and Control

You have the right to:

• Access: View your personal information in your profile
• Update: Edit your profile and preferences
• Delete: Delete your account and associated data
• Export: Request a copy of your data in a portable format (via email request to info@wibely.com)
• Block: Block other users from interacting with you
• Messaging Controls: Delete messages, block users from messaging you

8.2 Privacy Settings

Control your privacy through:

• Public/Private account settings
• Content visibility preferences
• Notification preferences
• Follow request management
• Online visibility settings (show/hide online status and last seen)

8.3 Communication Preferences

• Manage push notifications in app settings
• Control social notifications (likes, comments, follows)
• Opt-out of promotional communications
• Control message notification sounds and vibration

9. Data Retention

• Active Accounts: We retain your data while your account is active
• Deleted Accounts: Data is permanently deleted within 30 days of account deletion
• Cached Data: Temporary data is automatically cleared
• Legal Obligations: Some data may be retained longer if required by law
• Messages: Messages are retained until deleted by users. Deleted messages may remain in backups for up to 90 days
• Reported Messages: Messages reported for violations are retained until the report is resolved, and may be retained longer for legal purposes
• Presence Data: Online status and typing indicators are temporary and automatically cleared when you go offline

10. International Data Transfers

• Your data may be transferred to and processed in countries other than your own
• We ensure appropriate safeguards are in place for international transfers
• By using our App, you consent to these transfers

11. Children's Privacy

• Our App is not intended for children under 13 (or 16 in the EEA)
• We do not knowingly collect information from children
• If you believe we have collected information from a child, please contact us immediately
• Children under 13 (or 16 in the EEA) are not permitted to use our messaging features
• If we discover that a child has created an account or used messaging features, we will terminate the account and delete all associated data

12. Third-Party Services

Our App uses data from third-party providers:

• Entertainment Data: TMDB, JustWatch, Spotify, Apple Music, Apple Books, Google Books, IGDB, ACRCloud (music recognition)
• Authentication: Google Sign-In, Apple Sign-In
• Analytics: Firebase Analytics
• Cloud Infrastructure: Amazon Web Services (AWS)
• Messaging Infrastructure: Google Firebase (Firestore, Realtime Database, Cloud Messaging)

These services have their own privacy policies. We encourage you to review them.

13. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to equal service and price
• Right to request deletion of personal information

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights:

Legal Basis for Processing:

• Consent: For optional features and marketing
• Contract: To provide our services
• Legitimate Interests: For security and improvements
• Legal Obligations: To comply with laws

Your Rights:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

15. Data Protection

For privacy concerns or to exercise your rights, contact us at:

EU residents may also contact their local data protection authority.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will indicate changes by:

• Posting the new Privacy Policy in the App and on our website
• Updating the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have questions about this Privacy Policy, please contact us:

Disclaimers and Limitations

Disclaimer of Liability

• Third-Party Content: We are not responsible for user-generated content. Users are solely responsible for their posts and reviews
• External Links: We are not responsible for content on external websites linked from our app
• Data Accuracy: Entertainment data is provided by third parties. We do not guarantee its accuracy
• Service Availability: We do not guarantee uninterrupted service availability

Limitation of Liability

To the maximum extent permitted by law:

• We are not liable for any indirect, incidental, or consequential damages
• We are not liable for loss of data, profits, or reputation
• Our total liability is limited to the amount you've paid us (if any)

Indemnification

You agree to indemnify and hold us harmless from any claims arising from:

• Your use of the app
• Your violation of this policy or our Terms of Service
• Your user-generated content
• Your violation of any rights of another party