Vyral Privacy Policy

Effective date: July 14, 2026

Vyral ("Vyral," "we," "us," or "our") is a creator–brand matchmaking platform operated by Judah Adler, a sole proprietor based in the United States. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Vyral mobile application and any related websites or services (together, the "Service").

By creating an account or using the Service, you agree to this Privacy Policy.

1. Who the Service Is For

Vyral is a business tool for adults. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will delete their account and associated data. The Service is currently offered to users in the United States.

2. Information We Collect

Information you provide directly

• Account information: email address, password (handled by Firebase Authentication; we never see or store your plaintext password), name, and account type (Creator or Brand).
• Profile information: bio, profile photos, content niche or industry, location, pricing information (Creators), promotion details and target audience preferences (Brands), and other details you choose to add to your profile.
• Messages: messages you send to other users through Vyral's chat after a match.
• Reports: if you report another user, we collect the contents of your report.

Information from connected social media accounts

If you choose to connect a social platform, we collect data from that platform through its authorized API, only after you grant permission through the platform's own consent screen:

• Instagram (via the Instagram API with Instagram Login, provided by Meta): username, profile picture, follower count, your posts and their engagement metrics, and audience demographics.
• YouTube (via YouTube API Services, provided by Google): channel name, subscriber count, your videos and their statistics, and audience demographics and analytics.
• TikTok (via Phyllo, a third-party data connector): username, follower count, your videos and their engagement metrics, and audience demographics.

You can disconnect any platform at any time in the app's settings, which stops further syncing and removes the synced data from your profile.

Information collected automatically

• Usage data: actions you take in the app, such as swipes, matches, profile views, and content selections.
• Device data: device type, operating system, app version, and a push-notification token if you enable notifications.

3. How We Use Your Information

• Matchmaking: to compute compatibility between Creators and Brands (based on factors like niche, location, budget, and audience) and to show your profile to potential matches.
• Profile display: to display your profile — including your connected social media statistics and the content you select — to other users of the Service.
• Communication: to deliver messages between matched users and to send you push notifications you have enabled (e.g., new matches or messages).
• Safety and moderation: to review reports, enforce our Terms of Service, and protect users (e.g., blocking and rate limiting).
• Service operation and improvement: to operate, debug, secure, and improve the Service.

We do not sell your personal information, and we do not use it for third-party advertising.

4. How Your Information Is Shared

• With other users: your profile — including name, bio, photos, niche, location, pricing (Creators), promotions (Brands), connected social statistics, and selected content — is visible to other users of the Service as part of matchmaking and discovery. Your email address is never shown to other users.
• Service providers (sub-processors):
  • Google Firebase (authentication, database, file storage, cloud functions) — Google LLC
  • Phyllo (TikTok data connectivity) — Knit Technologies Inc.
  • Expo (push notification delivery) — 650 Industries, Inc.
• Legal: we may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Vyral or its users.
• Business transfer: if Vyral is acquired or merged, user information may transfer to the successor, which must honor this policy or notify you of changes.

5. YouTube API Services

Vyral uses YouTube API Services to access YouTube data you authorize. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

In addition to disconnecting YouTube inside the Vyral app, you can revoke Vyral's access to your YouTube data at any time via Google's security settings page. When you disconnect or revoke access, we delete the YouTube data synced to your profile.

6. Instagram (Meta) Data

Instagram data is accessed through Meta's Instagram API after you log in and consent on instagram.com. You can disconnect Instagram in the Vyral app at any time, which removes your synced Instagram data from the Service. You may also request deletion of your Instagram data through Meta's data deletion process; Vyral honors data deletion requests sent by Meta.

7. Data Retention and Deletion

• We retain your information for as long as your account is active.
• Account deletion: you can permanently delete your account in the app at Profile → Settings → Delete Account. This permanently deletes your profile, connected social data, swipes, promotions, and files, and removes your authentication record. Your past conversations are "tombstoned" for the other participant — they see that the account was deleted, and their own message history is preserved on their side.
• Platform disconnection: disconnecting a social platform removes that platform's synced data from your profile without deleting your account.
• Residual copies may persist in encrypted backups for a limited period before being purged.

8. Your Rights and Choices

You may access and update your profile information at any time in the app. You may also contact us (below) to request a copy of your data or its deletion.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, use, and disclose; the right to request deletion; the right to correct inaccurate information; and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA. To exercise these rights, contact us at the email below; we will verify your request via your account email.

9. Security

We use industry-standard safeguards, including encryption in transit, Firebase security rules restricting data access, and server-side storage of all API credentials and tokens. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the effective date. For material changes, we will notify you in the app or by email.

11. Contact

Questions or requests regarding this Privacy Policy or your data:

Email: adlerjudah@gmail.com