Privacy Policy - Social360

1. INTRODUCTION

Welcome to Social360 (hereinafter, "the Application", "we", "our" or "us"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our mobile application available for iOS and Android devices.

By using Social360, you accept the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use the Application.

---

2. INFORMATION WE COLLECT

2.1 Information you provide directly

When you create an account in Social360, we collect:

• Email: For account identification and authentication
• Name: To personalize your experience
• Mobile phone number: For content sharing features
• Password: Stored in encrypted form (secure hash)
• Country: For statistics and localized experience

2.2 Information generated by using the Application

• Recorded or selected videos: Videos you process are temporarily stored on your device and optionally in our cloud
• Video metadata: File name, size, creation date, associated event
• Usage history: Selected events, applied effects, processed videos
• Virtual coins (Coins): Current balance, wheel spin history, transactions
• Membership type (Tier): free_with_ads, free_no_ads, or premium

2.3 Device information

• Unique device identifier: For authentication and security
• Operating system: iOS or Android (version)
• Device model: For processing optimization
• Time zone and language: For notifications and localization

2.4 Technical information

• Usage logs: Application errors, performance, processing times
• Last login date and time
• IP address: Only for security and fraud prevention (not permanently stored)

---

3. HOW WE USE YOUR INFORMATION

We use the collected information to:

3.1 Application Functionality

• Create and manage your account
• Authenticate your access using secure JWT tokens
• Process videos with the effects and settings you select
• Store your processed videos in the cloud (S3 Storage)
• Generate unique QR codes to share your videos
• Manage your virtual coin balance (Coins)
• Determine your eligibility for the daily wheel spin

3.2 Communications

• Send local notifications about:
  • Daily wheel availability (10:00 AM local time)
  • Promotions and special offers (only if you accept)
• Respond to your technical support inquiries

3.3 Service Improvement

• Analyze usage patterns to improve the experience
• Optimize video processing performance
• Identify and fix technical errors
• Develop new features

3.4 Security

• Prevent fraud and unauthorized use
• Protect against cyber attacks
• Verify the integrity of coin transactions

---

4. HOW WE STORE YOUR INFORMATION

4.1 Local storage (on your device)

We use MMKV (encrypted local storage) to save:

• Session token (encrypted with AES-256-CBC)
• Authentication information
• User preferences (language, settings)
• List of locally processed videos
• Coin balance

4.2 Server storage

Location: Our servers are located in Peru (GMT-5)

MySQL database contains:

• Your account information (email, name, phone, hashed password)
• Video metadata (not the complete videos)
• Coin and transaction history
• Event configuration

Security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (database)
• Access restricted to authorized personnel only
• Automatic daily backups

4.3 Video storage (Cloud service)

• Processed videos are stored in third-party cloud storage services compatible with the S3 standard
• Location: Data centers in the United States
• Access via signed URLs with temporary expiration
• Encryption in transit and at rest
• Videos are NOT public by default (only accessible via unique link)

4.4 Static files (Content delivery network)

• Frames, music, intros and predefined outros are served from content delivery networks (CDN)
• Only public template files (no personal information)
• Global caching to optimize download speed

---

5. SHARING INFORMATION WITH THIRD PARTIES

We share limited information only in these cases:

5.1 Service providers

• Cloud storage providers: To securely store your processed videos
• Content delivery network (CDN) providers: To deliver static files (frames, music, intros)
• Google AdMob: To display advertising (only free_with_ads users). See complete section below.
• RevenueCat: To process subscriptions and in-app purchases. See complete section below.
• Google Play Billing / Apple In-App Purchase: To process payments (through RevenueCat)

They only have access to the information necessary to provide the service and are contractually obligated to protect your information.

5.2 Legal requirements

We may disclose your information if required by:

• Court order or legal process
• Compliance with applicable laws
• Protection of our legal rights
• Prevention of illegal activities

5.3 Business transfer

In case of merger, acquisition or asset sale, your information may be transferred. We will notify you before any change of ownership.

---

6. APPLICATION PERMISSIONS

Social360 requests the following permissions on your device:

6.1 Camera (required for recording)

• Why: To record videos directly from the app
• When used: Only when you select "Use camera"
• Access: Only while using the recording function

6.2 Storage/Gallery (required)

• Why: To:
  • Save processed videos
  • Select existing videos from your gallery
  • Save thumbnails
• When used: When processing, saving or selecting videos
• Access: Only to media files (not personal documents)

6.3 Notifications (optional)

• Why: To remind you when the daily wheel is available
• When used: Only if you accept to receive notifications
• Frequency: Maximum 1 daily notification (10:00 AM local time)
• You can deactivate them: At any time from system settings

---

7. LOCAL VIDEO PROCESSING

7.1 FFmpeg (processing on the device)

• What it is: We use the FFmpeg library to process videos locally on your device
• We do not send unprocessed videos: Your original video is NEVER sent to our servers
• Process:
  1. Video is processed completely on your phone
  2. Only the EDITED video is uploaded to the cloud (if you choose to save it)
  3. You can process videos in offline mode (without connection)

7.2 Processing security

• All processing occurs on your device (not on external servers)
• Temporary files are automatically deleted after processing
• We do not have access to your videos until you decide to upload them

---

8. ENCRYPTION AND SECURITY

8.1 Communication encryption

• AES-256-CBC: All communications between the app and server are encrypted
• HTTPS/TLS: Secure connections for all requests
• JWT with RSA: Cryptographically signed session tokens

8.2 Cryptography use statement

Social360 uses standard cryptography (AES-256, RSA) to protect your data. We do not use proprietary or customized algorithms. We comply with applicable export regulations.

8.3 Password protection

• Passwords are NEVER stored in plain text
• We use secure hashing with bcrypt
• We cannot recover your password (only reset it)

---

9. COIN SYSTEM AND WHEEL

9.1 Virtual coins

• Coins are virtual currencies with no real monetary value
• They cannot be exchanged for money
• They are obtained by spinning the daily wheel or through promotions
• They are used to unlock benefits within the app

9.2 Daily wheel

• You can spin once per day (resets at midnight server time)
• Prizes are random based on configured probabilities
• We record:
  • Date and time of each spin
  • Coins won
  • Prize history

9.3 Not gambling

• No payment required to participate
• Does not offer real money prizes
• It is a free reward system

---

10. ADVERTISING (Google AdMob)

10.1 Affected users

Advertising is displayed ONLY to users with free_with_ads membership.

If you have free_no_ads or premium membership, you will NOT see advertising and this section does not apply.

10.2 Types of advertising

We use Google AdMob to display three types of ads:

• Banner ads: Small ads that appear at the bottom of some screens
• Interstitial ads: Full-screen ads displayed between actions (e.g., when exiting the web browser)
• Rewarded ads: Optional ads you can voluntarily watch to earn extra coins

10.3 Information Google AdMob collects

Google AdMob may collect:

• Advertising identifier:
  • Android: Google Advertising ID (GAID)
  • iOS: Identifier for Advertisers (IDFA)
  • This ID is unique per device and is used to personalize ads
  • You can deactivate it from your device settings
• Device information: Model, operating system, version, language, time zone
• Network information: Internet provider, connection type (WiFi/cellular)
• Ad interactions: Ads viewed, clicks, viewing time
• IP address: For approximate geolocation (city/region, not exact location)

10.4 How Google AdMob uses this information

• Display relevant ads based on your interests
• Limit the frequency of repeated ads
• Measure effectiveness of advertising campaigns
• Prevent advertising fraud
• Comply with advertising regulations

10.5 Control over advertising

You can control advertising in the following ways:

Option 1: Disable personalized ads

• Android: Settings → Google → Ads → Disable ad personalization
• iOS: Settings → Privacy → Apple Advertising → Disable personalized ads

Note: You will still see ads, but they will not be personalized.

Option 2: Reset advertising identifier

• Android: Settings → Google → Ads → Reset advertising ID
• iOS: Settings → Privacy → Apple Advertising → Reset advertising identifier

Option 3: Upgrade to ad-free membership

• Redeem 600 coins for 7 days without ads (free_no_ads)
• Or subscribe to premium to permanently remove ads

10.6 Google AdMob privacy policy

Google AdMob has its own independent privacy policy:

• Google Policy: https://policies.google.com/privacy
• How Google uses app data: https://policies.google.com/technologies/partner-sites

---

11. PURCHASES AND SUBSCRIPTIONS

11.1 Payment processing

Social360 offers in-app purchases for:

• Premium subscriptions: Monthly or annual membership without ads
• Coin packages: Purchase of virtual coins with real money

Payments are processed through:

• RevenueCat: Intermediate subscription management platform
• Google Play Billing: For payments on Android
• Apple In-App Purchase: For payments on iOS

11.2 Information we do NOT collect

We do NOT collect or store:

• ❌ Credit/debit card numbers
• ❌ Bank information
• ❌ CVV or security codes
• ❌ PayPal, Google Pay, Apple Pay credentials, etc.

All payment information is processed directly by:

• Google Play: If you use Android
• Apple App Store: If you use iOS

11.3 Information we DO collect about purchases

Through RevenueCat and payment platforms, we receive:

• Transaction ID: Unique purchase identifier
• Subscription status: Active, expired, canceled, refunded
• Start and renewal date: When your subscription begins and renews
• Purchased product: What type of subscription or coin package
• Purchase platform: Whether you purchased on Google Play or App Store
• Country of purchase: To determine localized prices

We use this information to:

• Activate your premium membership or add coins to your account
• Verify your subscription status
• Manage automatic renewals
• Process refunds if applicable
• Prevent fraud
• Generate usage statistics (aggregated and anonymized data)

11.4 Subscriptions and renewals

If you subscribe to premium:

• The subscription automatically renews according to the chosen period (monthly/annual)
• The charge is made through your Google Play or App Store account
• You can cancel at any time from:
  • Android: Google Play Store → Subscriptions
  • iOS: Settings → [Your name] → Subscriptions
• Cancellation prevents future charges, but does NOT refund the current period
• You will maintain premium access until the paid period ends

11.5 Refunds

Refund requests are managed directly with:

• Google Play: Request refund
• Apple App Store: Request refund

Social360 does not process refunds directly. All refund policies follow Google Play and App Store terms.

11.6 Restore purchases

If you change devices or reinstall the app:

• You can restore your premium subscription at no additional cost
• Go to "My Account" → "Restore purchases"
• You must use the same Google/Apple account with which you purchased
• Purchased coins are NOT restored (only premium subscriptions)

11.7 Third-party privacy policies

• RevenueCat: https://www.revenuecat.com/privacy
• Google Play: https://policies.google.com/privacy
• Apple: https://www.apple.com/legal/privacy/

---

12. DATA RETENTION

12.1 Active account

While your account is active, we retain:

• Profile information: Indefinitely
• Videos: Until you manually delete them
• Coin history: Last 12 months

12.2 Inactive account

If you do not log in for 2 consecutive years:

• We send notice by email (if possible)
• After 30 days, we delete stored videos
• The account may be deactivated after 3 years of inactivity

12.3 Account deletion

If you request to delete your account:

• We delete personal information within 30 days
• Videos are permanently deleted
• Some data may be retained for legal requirements (transaction records)

---

13. YOUR RIGHTS

Depending on your location, you have the right to:

13.1 Access

Request a copy of your personal information

13.2 Correction

Update incorrect or incomplete information

13.3 Deletion

Request deletion of your account and data

13.4 Portability

Receive your data in machine-readable format

13.5 Objection

Object to certain uses of your information

13.6 Revocation of consent

Withdraw consent for notifications or data processing

---

14. MINORS' PRIVACY

Social360 is designed for users over 13 years of age.

• We do not knowingly collect information from children under 13
• If we discover that a child under 13 has registered, we will delete their account immediately
• If you are a parent/guardian and discover your child under 13 is using the app, contact us

---

15. COOKIES AND SIMILAR TECHNOLOGIES

15.1 Native local storage (MMKV)

The application uses MMKV (native local storage) to save:

• Session token (encrypted)
• User preferences
• Data cache
• App settings

This storage is local on your device and is deleted when you uninstall the app.

15.2 Integrated web browser (WebView)

The application includes an integrated web browser used exclusively for:

• Accessing the administration panel (panel.social360.app)
• Managing your account from the backend
• Viewing statistics and advanced settings

15.3 Device identifiers

• We use the unique device ID for authentication
• This ID does not contain personally identifiable information
• We do not track your activity outside the app

---

16. OFFLINE MODE

16.1 Local server configuration

If you configure Social360 in offline mode:

• You can connect to a local server (e.g., Apache on your PC)
• Videos are uploaded to your local network instead of the internet

16.2 Synchronization

• Data from your local server may synchronize with our server when you go back online
• You can disable automatic synchronization

---

17. CHANGES TO THIS POLICY

We may update this Privacy Policy occasionally. We will notify you about significant changes through:

• In-app notification
• Email (if you provided one)
• Notice on our website

Last modification: The date at the beginning of this document

Your continued use of the app after changes constitutes your acceptance of the updated policy.

---

18. INTERNATIONAL TRANSFERS

Your data may be transferred and processed in:

• Peru (main database servers)
• United States (cloud video storage)
• Multiple global locations (content delivery network - CDN)

We ensure that all transfers comply with applicable data protection laws through:

• Standard contractual clauses
• Appropriate security measures
• GDPR compliance (if applicable)

---

19. REGULATORY COMPLIANCE

19.1 GDPR (European Union)

If you are an EU resident:

• Legal basis for processing: Contract execution and consent
• You have the right to file a complaint with a data protection authority
• You can request a copy of your data in portable format

19.2 CCPA (California, USA)

If you are a California resident:

• You have the right to know what information we collect
• You can request deletion of your information
• We do not sell personal information
• We do not discriminate for exercising your rights

19.3 Other jurisdictions

We comply with data protection laws of all jurisdictions where we operate.

---

20. DATA SECURITY

We implement appropriate technical and organizational measures:

20.1 Technical measures

• AES-256 encryption for data in transit
• Database encryption
• Two-factor authentication (coming soon)
• 24/7 security monitoring
• Regular security updates

20.2 Organizational measures

• Limited access to personal data (authorized personnel only)
• Security and privacy training
• Internal data protection policies
• Regular security audits

---

21. CONTACT

For questions, comments or requests related to this Privacy Policy:

---

22. ACCEPTANCE OF THIS POLICY

By using Social360, you confirm that:

• You have read and understood this Privacy Policy
• You accept our practices of collecting, using and disclosing information
• You are at least 13 years old
• You have the authority to accept these terms

If you do not accept this policy, please uninstall the application and do not use it.

---