Privacy Policy

Last updated: March 11, 2026

ViralWatch Inc. ("we", "us", or "our") operates the ViralWatch mobile application (the "App") and the website ViralWatch website home page (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Website.

By using the App or Website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Information Collected Automatically

Anonymous User ID: When you first open the App, we generate an anonymous identifier using Firebase Authentication. This ID does not contain your name, email, or any personally identifiable information.
Device Information: Device model, operating system version, app version, language settings, and time zone.
Usage Analytics: We collect anonymized data about how you interact with the App, including screens visited, features used, and session duration. This data is processed by Firebase Analytics and cannot be used to identify you personally.
Crash Reports: If the App crashes, we may collect diagnostic information to help us fix issues and improve stability.

1.2 Information You Provide

Uploaded Videos and Project Inputs: When you choose to analyze a clip, we collect the video file, project name, optional tags, and any transcript override or context you submit with the analysis.
Support Requests: If you contact us via email, we collect your email address and the content of your message to respond to your inquiry.
Push Notification Token: If you opt in to push notifications, we receive your device's push notification token to send you updates.

1.3 Subscription Information

When you subscribe to premium features, your payment is processed entirely by Apple through the App Store. We do not receive or store your credit card number, billing address, or Apple ID credentials. We only receive your subscription status (active, expired, or cancelled) and the plan type through our subscription management partner.

1.4 Information We Do NOT Collect

We do not collect your name, email address, phone number, or physical address (unless you provide it voluntarily via support email).
We do not collect or scan your full photo library, contacts, or messages. We only process the specific media you choose to upload for analysis.
We do not sell, rent, or share your personal data with third parties for advertising purposes.

2. How We Use Your Information

We use collected information exclusively to:

Provide, operate, and maintain the App and its features
Validate uploaded clips, extract signals, generate transcripts, and produce analysis reports
Process and manage your subscription status
Send push notifications (only with your explicit consent)
Analyze aggregated, anonymized usage patterns on the App and Website to improve the product
Diagnose technical issues and fix bugs
Respond to your support requests
Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may collect data on our behalf:

Service	Purpose	Data Collected	Privacy Policy
Apple App Store	App distribution, in-app purchases	Purchase transactions	Apple Privacy
Firebase (Google)	Anonymous authentication, app analytics, push notifications	Anonymous ID, usage events, device info	Firebase Privacy
Google Analytics	Website analytics	Website engagement and conversion events	Google Privacy
Adapty	Subscription management	Anonymous ID, subscription status	Adapty Privacy
OpenAI	Transcript extraction and AI processing for uploaded media	Audio derived from uploaded clips, prompt inputs, generated analysis artifacts	OpenAI Privacy

4. Data Storage and Security

Uploaded clips, project metadata, and generated report artifacts may be stored on our servers when needed to complete analysis, power report history, or support secure share and export features.

Media access is restricted to authorized internal support operators using internal authentication. Support tooling is metadata-only by default (no raw clip download endpoint), and support-side inspection events are logged.

We use encrypted transport (such as TLS) for data sent between the App, Website, and our service providers. Analytics and infrastructure data may be stored on provider servers located in the United States or other regions where our processors operate.

While we implement commercially reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

Analytics data: Retained for 14 months, then automatically deleted by Firebase.
Subscription data: Retained as long as your subscription is active, plus 90 days after expiration.
Uploaded video binaries: Retained for up to 30 days from upload, then automatically deleted from media storage.
Analysis reports and report-linked artifacts: Retained for up to 365 days from report completion, then automatically deleted. This includes report structure, evidence mappings, transcript excerpts used in evidence, notes, and collaboration state.
Derived embeddings: We do not store raw embedding vectors. We retain only report-level retrieval metadata (for traceability) inside report artifacts and delete it with the same 365-day report retention window or earlier on project deletion.
Share links: Expire automatically and can be created for up to 30 days.
Export links: Expire automatically and can be created for up to 14 days.
Support access logs and moderation records: Retained for up to 180 days for abuse prevention, reliability, and auditability.
Support emails: Retained for up to 2 years after the last interaction.
Push notification tokens: Deleted when you uninstall the App or revoke notification permission.

You can request project deletion at any time through support. A deletion request removes project-linked uploaded media, reports, exports, share links, notes, and moderation records tied to that project.

6. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have the following rights:

Right of Access: Request a copy of the data we hold about you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your data ("right to be forgotten").
Right to Restriction: Request that we limit processing of your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing of your data for certain purposes.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Legal Basis for Processing (GDPR Article 6): We process data based on (a) your consent, (b) performance of a contract (providing the App service), and (c) our legitimate interests (improving the App).

7. Your Rights Under CCPA (California Users)

If you are a California resident, you have additional rights under the CCPA:

Right to Know: You can request what personal information we collect, use, and disclose.
Right to Delete: You can request deletion of your personal information.
Right to Opt-Out: You can opt out of the sale of personal information. Note: we do not sell personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

8. Children's Privacy

Our App is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete the information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

10. Push Notifications

We may send push notifications to provide reminders, tips, and updates. You can opt out at any time through your device's Settings > Notifications > ViralWatch.

11. Analytics Opt-Out

You can limit analytics data collection by enabling "Limit Ad Tracking" in your device settings (Settings > Privacy > Tracking on iOS). For Website analytics questions or objections, contact us at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you through the App. Your continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, contact us:

Privacy: [email protected]
Support: [email protected]
Website: ViralWatch support page