1. Introduction
Viraloom (“we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use the Viraloom mobile application (“App”).
This policy complies with applicable data protection regulations, including the General Data Protection Regulation (GDPR) for users in the European Union (EU) and the California Consumer Privacy Act (CCPA) for users in the United States.
3. How We Use Your Information
We use your data to:
• Operate and maintain the App
• Customize content and user experience
• Deliver AI-generated suggestions based on user interests
• Communicate updates or support messages
• Improve product features and prevent abuse
• Analyze usage patterns and technical performance via third-party analytics tools (e.g., PostHog)
4. AI Processing Transparency
Conversations with the AI assistant may be processed by third-party AI providers (e.g., Google Gemini) solely to generate responses. We do not allow these providers to use the data for training or any other purpose beyond response generation.
5. Legal Basis for Processing (GDPR Article 6)
We process personal data on one or more of the following legal bases:
• Consent – for features like voice recording or analytics
• Performance of a contract – providing app functionality
• Legitimate interests – improving our services and securing the App
• Legal obligations – compliance with legal and regulatory requirements
6. Data Sharing and Disclosure
We do not sell your personal data. We may share limited data with:
• Service Providers such as PostHog (analytics) or AI processing providers (e.g., Google Gemini), who act as data processors under strict agreements
• Authorities, if legally required
• Business transfers, in case of a merger or acquisition
7. Data Storage and Security
• All data is stored on secure servers, primarily hosted via DigitalOcean in the United States
• We implement encryption, access control, and secure development practices
• Although we follow industry standards, no method of data transmission is 100% secure
8. Data Breach Notification
In the event of a data breach, we will notify affected users and regulators as required by applicable law.
9. International Data Transfers
Your personal data may be transferred outside the European Economic Area (EEA), including to the United States. We host our services with DigitalOcean, a U.S.-based provider. To ensure GDPR-compliant data protection, we rely on Standard Contractual Clauses (SCCs) incorporated into DigitalOcean’s Data Processing Agreement (DPA). For users in the United Kingdom, data processing is carried out in accordance with the UK GDPR.
10. Third-Party Links and Integrations
The App may contain links or integrations with third-party services (e.g., TikTok, YouTube). We are not responsible for the privacy practices or content of these third-party services. Please review their privacy policies before using them.
11. Lawful Requests
We may disclose your data if required to comply with subpoenas, court orders, or lawful government requests.
12. Lawful Requests
If Viraloom undergoes a merger, acquisition, or asset sale, your data will remain protected under this Privacy Policy or a policy offering equivalent protection.
13. Your Rights Under GDPR (EU/EEA Users)
If you are located in the EU or EEA, you have the following rights:
• Access – Request a copy of your personal data
• Rectification – Correct inaccurate or incomplete data
• Erasure – Request deletion of your data (“right to be forgotten”)
• Restriction – Request limits on how we use your data
• Portability – Request a copy of your data in a portable format
• Objection – Object to data processing in certain circumstances
• Withdraw consent – Where applicable, you can withdraw consent at any time
To exercise these rights, contact us at: contact@viraloom.app
14. Rights for U.S. and UAE Residents
a. U.S. Residents (CCPA/CPRA). You have the right to:
• Know what data we collect and why
• Request deletion of personal data
• Opt out of sale or sharing (we do not sell data)
• Non-discrimination for exercising your rights
b. UAE Residents. You have the right to:
• Access and correct your personal data
• Withdraw consent at any time
• Request deletion, or object to certain processing
Contact: contact@viraloom.app
15. Children’s Privacy
Viraloom is not intended for individuals under the age of 17.We also comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect personal data from children under 13.If we discover such data, we will delete it immediately.If you believe a child has provided information, please contact contact@viraloom.app.
16. Automated Decision-Making and Profiling
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.
17. Data Deletion Instructions
Send an email to contact@viraloom.app with the subject line: Data Deletion Request. Please include:
• Your full name
• The email address associated with your Viraloom account
• A statement confirming you wish to delete all associated data
b. What Happens Next? We will:
• Confirm receipt of your request within 7 days
• Verify your identity
• Delete your personal data within 30 days (unless legally required to retain it)
Note: Deleting your data will remove your access to the app and personalized features.
18. Updates to This Policy
We may update this policy as needed. Updates will be published in the App and on our website with the effective date clearly indicated.
