Privacy Policy

Effective Date: August 20, 2025

Last Updated: October 20, 2026

Overview

Viral IQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use the Viral IQ mobile application (the "App").

Key Points:

• We use AI to analyze your videos and predict viral potential

• We collect minimal personal data necessary for app functionality

• Videos are processed in real-time and deleted immediately from our systems after processing

• We do not sell your personal information

• Analytics collection is industry-standard and privacy-focused

1. Information We Collect

1.1 Anonymous Usage

Viral IQ operates without user accounts. We collect:

• Device ID (anonymized identifier for your device)

• RevenueCat user ID (for subscription management)

• Session identifiers for app functionality

Note: We do not require sign-in or account creation to use the app.

1.2 Videos and Content

• Videos you upload for viral analysis

• Analysis results including viral scores, predictions, and feedback

• Temporary video data processed by Google Gemini AI

Important: Videos are processed in real-time and immediately deleted after analysis. Only scoring results and metadata are retained.

1.3 Usage Analytics

We collect analytics to improve the app experience:

• Screen views and navigation patterns

• Feature usage (analysis events, filter applications, sharing)

• App performance metrics (loading times, processing duration)

• Subscription and purchase events

• Onboarding progress and completion

• Session duration and engagement metrics

1.4 Device Information

• Platform (iOS/Android)

• Device model and brand

• Operating system version

• App version

• Device locale (for pricing localization)

1.5 Technical Information

• Error logs and crash reports

• API response times and performance data

• Network connectivity status

• File size of uploaded videos

• Processing retry attempts

1.6 Subscription Information

• Purchase history via RevenueCat

• Subscription status and plan details

• Transaction IDs and payment verification

• Platform-specific pricing information

1.7 Personalization Data

• User persona selection (if provided during onboarding)

• Demo completion status

• Onboarding progress

2. How We Use Your Information

2.1 Core App Functionality

• Video analysis: Process your videos using AI to provide viral predictions

• Session management: Anonymous session tracking for app functionality

• Results delivery: Display scores, metrics, and actionable feedback

• Subscription services: Manage premium features and billing

2.2 App Improvement

• Analytics: Understand usage patterns to improve features

• Performance optimization: Monitor and fix technical issues

• Feature development: Prioritize new features based on user behavior

• Error tracking: Identify and resolve bugs and crashes

2.3 Personalization

• Content optimization: Tailor analysis based on your persona selection

• User experience: Customize app flow based on preferences

• Recommendation accuracy: Improve AI predictions over time

2.4 Legal and Safety

• Compliance: Meet legal obligations and industry standards

• Security: Detect and prevent fraud and unauthorized access

• Terms enforcement: Ensure compliance with our Terms of Service

3. Information Sharing and Third Parties

We share your information with the following trusted service providers:

3.1 Essential Service Providers

Supabase (Database and Authentication)

• Data shared: Device ID, analysis results, analytics events, user preferences

• Purpose: User authentication, data storage, and app functionality

• Privacy policy: https://supabase.com/privacy

Google Gemini (AI Video Analysis)

• Data shared: Videos submitted for analysis (temporarily)

• Purpose: Generate viral scores and performance predictions using Google Gemini models

• Data retention: Videos are not stored by Google after processing

• Privacy policy: https://policies.google.com/privacy

RevenueCat (Subscription Management)

• Data shared: User ID, purchase events, subscription status

• Purpose: Manage subscriptions and in-app purchases

• Privacy policy: https://revenuecat.com/privacy

PostHog (Product Analytics and Session Replay)

• Data shared: Device ID, app events, screen views, app language, device and app version, and session recordings of app screens

• Purpose: Understand how the app is used, improve onboarding and features, and diagnose errors

• Session recordings mask images, videos, thumbnails and text input fields, so your content is not captured

• Privacy policy: https://posthog.com/privacy

Google Firebase Crashlytics (Crash Reporting)

• Data shared: Crash reports, device model, operating system and app version, and an installation identifier

• Purpose: Detect and fix crashes and stability issues

• Privacy policy: https://firebase.google.com/support/privacy

AppsFlyer (Install Attribution)

• Data shared: Installation and app open events, device model and OS version, IP address, app version, purchase events, and the advertising identifier only if you allow tracking in the App Tracking Transparency prompt

• Purpose: Measure which of our marketing campaigns bring new users

• On Android, AppsFlyer may collect the Android advertising ID (AAID) for install attribution. You can reset or delete it in Android Settings > Privacy > Ads.

• Privacy policy: https://www.appsflyer.com/legal/services-privacy-policy/

3.2 Subscription Provider

Apple App Store and Google Play (via RevenueCat)

• Subscriptions are processed by the Apple App Store (iOS) or Google Play (Android) through RevenueCat

• Data shared: Device ID for subscription verification

• Purpose: Manage in-app purchases and subscriptions

• Data we receive: Subscription status and purchase history only. We never receive your card or other payment details.

• Data retention: Only subscription status, no personal Apple ID or Google account information

• Apple privacy policy: https://apple.com/privacy

• Google Play privacy policy: https://policies.google.com/privacy

3.3 API Services

Fly.io and Google Cloud (API Hosting and Temporary Video Storage)

• Data shared: Video files during upload and processing

• Purpose: Run our analysis service and hold an uploaded video until its analysis is finished

• Data retention: Videos are deleted after processing. Uploads that are never processed are deleted automatically within a day.

3.4 Our Website (viraliqapp.com)

• Google Analytics: pages viewed, approximate location (country and city), device and browser type, and the link that brought you to the site, such as a search engine or an AI assistant

• Visitors in the EEA, the UK and Switzerland: analytics cookies are set only if you accept them in the cookie banner. You can change your choice at any time with the Cookie settings link at the bottom of every page.

• The website shows no ads, and website data is not used for advertising

• Privacy policy: https://policies.google.com/privacy

3.5 We Do NOT Share With:

• Advertisers, for showing you ads based on your videos or activity (AppsFlyer, listed above, only measures which of our own campaigns bring new users)

• Data brokers or third-party purchasers

• Social media platforms (unless you explicitly share)

• Government agencies (except as legally required)

4. Data Storage and Security

4.1 Data Storage

• Primary storage: Supabase (SOC 2 Type II certified)

• Location: United States (with global CDN distribution)

• Encryption: All data encrypted in transit (TLS 1.3) and at rest

• Backup: Automated backups with encryption

4.2 Security Measures

• Anonymous sessions: Device-based identification only

• API security: HTTPS/TLS encryption for all communications

• Access controls: Role-based permissions and audit logging

• Session management: Automatic cleanup on logout

4.3 Data Retention

• Device data: Retained until deletion request

• Analytics data: Aggregated and anonymized after 90 days

• Videos: Processed in real-time, never permanently stored

• Analysis results: Retained with your account

• Error logs: Retained for 90 days for debugging

• Subscription data: Retained per legal requirements

5. Your Privacy Rights

5.1 Data Access and Control

• View: Access your account information in app settings

• Export: Request a copy of your data (contact support@viraliqapp.com)

• Correction: Update your profile and preferences

• Deletion: Permanently delete your account and all associated data

5.2 Data Deletion

To delete all data associated with your device, email support@viraliqapp.com or use our support page. Include the email address used for your App Store or Google Play purchase and, if you have it, the order number from your purchase receipt, so we can find your data. We will delete all associated data from our systems.

Deleting your data does not cancel a subscription. Cancel it in your App Store settings (iOS) or in Google Play > Payments & subscriptions (Android).

5.3 Communication Preferences

• Notifications: Control push notifications in device settings

• Support: Manage customer service communications

• Updates: Essential service notifications only (no marketing)

6. Children's Privacy

Viral IQ is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Parents: If you believe your child has provided personal information to us, please contact us at support@viraliqapp.com

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

7.1 Right to Know

• Categories of information we collect

• Sources of that information

• Business purposes for collecting

• Third parties with whom we share

7.2 Right to Delete

• Request deletion of personal information

• Note: Some data retained for legal compliance

7.3 Right to Opt-Out

• We do not sell personal information

• Control analytics through app settings

7.4 Right to Non-Discrimination

• Equal access regardless of privacy choices

• Premium features remain available

To exercise these rights: Contact support@viraliqapp.com

8. European Privacy Rights (GDPR)

8.1 Legal Basis for Processing

We process your data under:

• Contract Performance: Account services, video analysis, subscriptions

• Legitimate Interests: App improvement, security, performance

• Legal Obligation: Financial records, regulatory compliance

8.2 Data Portability

• Export your data in machine-readable format

• Transfer to another service provider

8.3 Right to Object

• Object to specific processing activities

• Opt-out of analytics collection

9. International Data Transfers

Your information may be transferred to and processed in the United States where our service providers are located. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

10.1 Updates

• We may update this policy to reflect changes in our practices

• Material changes: Notification via in-app alert

• Minor changes: Updated policy posted with new date

10.2 Notification

• In-app notification for significant changes

• Continued use constitutes acceptance

11. Contact Information

Privacy Questions

Email: support@viraliqapp.com

Subject Line: Viral IQ Privacy Inquiry

General Support

Email: support@viraliqapp.com

Subject Line: Viral IQ Support

Data Protection

For GDPR-related inquiries, contact our Data Protection Officer at the email above.

12. Platform-Specific Information

12.1 iOS Privacy

• Complies with Apple's privacy requirements

• Supports Apple's Hide My Email feature

• App Tracking Transparency: We access your device's advertising identifier only if you allow it in the App Tracking Transparency prompt, and only to measure the performance of our own ads. You can change this anytime in iOS Settings > Privacy & Security > Tracking.

12.2 Android Privacy

• Complies with Google Play privacy requirements

• Respects Android privacy settings

• Advertising ID: On Android, AppsFlyer may collect the Android advertising ID (AAID) to measure the performance of our own ads (install attribution). You can reset or delete it anytime in Android Settings > Privacy > Ads.

By using Viral IQ, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein.

This privacy policy was last updated on October 20, 2026 and is effective as of October 20, 2026. For questions about this policy, please contact support@viraliqapp.com