Privacy Policy

Effective Date: May 23, 2025

1. Introduction

Viraloom (“we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use the Viraloom mobile application (“App”).
This policy complies with applicable data protection regulations, including the General Data Protection Regulation (GDPR) for users in the European Union (EU) and the California Consumer Privacy Act (CCPA) for users in the United States.

2. Information We Collect

We may collect the following information only when you provide it or when required for specific features:

a. Personal Information

• Full name

• Email address (e.g., for subscription or support)

• Language preference

• Topic interests

• Voice recordings (if using voice customization features)

b. Automatically Collected Data

We may automatically collect:

• Device information (e.g., model, OS version, device ID)

• IP address

• User ID and email address (when logged in)

• App interaction data (e.g., screens viewed, buttons clicked, session duration)

• Crash logs and technical diagnostics

This data is collected using tools like PostHog, which help us understand user behavior and improve the App experience.

3. How We Use Your Information

We use your data to:

• Operate and maintain the App

• Customize content and user experience

• Deliver AI-generated suggestions based on user interests

• Communicate updates or support messages

• Improve product features and prevent abuse

• Analyze usage patterns and technical performance via third-party analytics tools (e.g., PostHog)

4. Legal Basis for Processing (GDPR Article 6)

We process personal data on one or more of the following legal bases:

• Consent – for features like voice recording or analytics

• Performance of a contract – providing app functionality

• Legitimate interests – improving our services and securing the App

• Legal obligations – compliance with legal and regulatory requirements

5. Data Sharing and Disclosure

We do not sell your personal data. We may share limited data with:

• Service Providers such as PostHog (analytics), who act as data processors under strict agreements

• Authorities, if legally required

• Business transfers, in case of a merger or acquisition

6. Data Storage and Security

• All data is stored on secure servers, primarily hosted via DigitalOcean in the United States

• We implement encryption, access control, and secure development practices

• Although we follow industry standards, no method of data transmission is 100% secure

7. International Data Transfers

Your personal data may be transferred outside the European Economic Area (EEA), including to the United States.We host our services with DigitalOcean, a U.S.-based provider.To ensure GDPR-compliant data protection, we rely on Standard Contractual Clauses (SCCs) incorporated into DigitalOcean’s Data Processing Agreement (DPA).

8. Your Rights Under GDPR (EU/EEA Users)

If you are located in the EU or EEA, you have the following rights:

• Access – Request a copy of your personal data

• Rectification – Correct inaccurate or incomplete data

• Erasure – Request deletion of your data (“right to be forgotten”)

• Restriction – Request limits on how we use your data

• Portability – Request a copy of your data in a portable format

• Objection – Object to data processing in certain circumstances

• Withdraw consent – Where applicable, you can withdraw consent at any time

To exercise these rights, contact us at: contact@viraloom.app

9. Rights for U.S. and UAE Residents

a. U.S. Residents (CCPA/CPRA). You have the right to:

• Know what data we collect and why

• Request deletion of personal data

• Opt out of sale or sharing (we do not sell data)

• Non-discrimination for exercising your rights

b. UAE Residents. You have the right to:

• Access and correct your personal data

• Withdraw consent at any time

• Request deletion, or object to certain processing

Contact: contact@viraloom.app

10. Children’s Privacy

Viraloom is not intended for individuals under the age of 17. We do not knowingly collect or solicit personal data from anyone under 17. If we become aware that a user under 17 has provided personal information, we will delete such data immediately. If you believe we might have any information from or about a child under 17, please contact us at contact@viraloom.app.

11. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Data Deletion Instructions

a. Request via Email:

Send an email to contact@viraloom.app with the subject line: Data Deletion Request. Please include:

• Your full name

• The email address associated with your Viraloom account

• A statement confirming you wish to delete all associated data

b. What Happens Next? We will:

• Confirm receipt of your request within 7 days

• Verify your identity

• Delete your personal data within 30 days (unless legally required to retain it)

Note: Deleting your data will remove your access to the app and personalized features.

13. Updates to This Policy

We may update this policy as needed. Updates will be published in the App and on our website with the effective date clearly indicated.