Privacy Policy

When you create a PointVerse account or use the app, we collect the following types of information:

• Account data — your username, email address, password (stored encrypted), profile picture, bio, and country
• Content — posts, flips (videos), comments, and messages you create or send
• Activity data — likes, follows, views, and interactions on the platform
• Device & connection info — IP address, browser type, device type, and operating system (used for security and login alerts)
• Communications — support tickets and messages sent to PointVerse

We use the information we collect to:

• Provide, maintain, and improve the PointVerse platform
• Process your account registration and authenticate logins
• Deliver your content to your followers and the feed
• Calculate and distribute Points rewards based on your activity
• Send security notifications such as login alerts (if enabled)
• Respond to your support requests and complaints
• Detect and prevent abuse, spam, and policy violations
• Analyse usage patterns to improve app performance

We do not sell your personal data to third parties or use it for advertising purposes.

We do not share your personal information with third parties except in the following limited cases:

• With your consent — when you choose to make your profile or content public
• Service providers — third-party tools that help us operate the app (e.g. email delivery via Gmail SMTP). These providers are bound by confidentiality obligations
• Legal requirements — if required by law, court order, or government authority
• Safety — to protect the safety of our users or the public

You have full control over your privacy on PointVerse through Settings → Privacy & Security, including:

• Making your account private so only approved followers can see your content
• Hiding your activity status (online / offline) from others
• Disabling direct messages from non-followers
• Controlling whether your follower/following counts are visible
• Enabling or disabling Two-Factor Authentication
• Blocking specific users from interacting with you

We retain your personal data for as long as your account is active. When you delete your account, we permanently remove your profile, posts, flips, messages, and associated data from our servers.

Some data may be retained for a short period for legal compliance or fraud prevention purposes before being fully deleted.

We take the security of your data seriously. PointVerse uses the following measures to protect your information:

• Passwords are stored using strong one-way hashing (bcrypt)
• Sessions are managed securely server-side
• Optional Two-Factor Authentication (OTP via email)
• Remember Me tokens are stored as secure HTTP-only cookies
• Login security notifications via Firebase Cloud Messaging (if enabled)

No system is 100% secure. If you believe your account has been compromised, please change your password immediately and contact support.

PointVerse is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of PointVerse after changes are made constitutes your acceptance of the updated policy.

For significant changes, we will notify you via an in-app notification or email.