Privacy Policy

1. Introduction

SOVI is a Creator-economy social platform built for Southeast Asian markets, enabling users to post content, livestream, message, call, and send virtual gifts to Creators using an internal Coin system. This Privacy Policy applies to all SOVI users on iOS, Android, and our related website, regardless of country of residence.

2. Summary of Key Points

• We collect data you provide directly (display name, email, username, avatar, birthday, bio, post content).
• For users who register as a Creator or Agency, we collect identity verification data (eKYC), including photos of government ID and a selfie photo.
• We record Coin transactions (top-ups, gifting, call/chat fees, withdrawals) to operate our internal virtual economy.
• We collect device and usage data to keep the platform safe, prevent fraud, and improve our service.
• You can request to access, correct, or delete your personal data by contacting sovi.social@gmail.com.

3. Information We Collect

3.1. Information you provide

• Account information: email address, display name, username, sign-in method (Google or Apple ID).
• Profile information: avatar photo, gender, date of birth, country, preferred language, bio.
• User content: photos, videos, captions, comments, direct messages, and stickers you create or upload in the App.
• Verification data (Creator/Agency): photos of a government-issued ID (national ID or passport) and a selfie photo used for eKYC identity verification.
• Payment & payout information: bank account or e-wallet details (encrypted) provided by Creators when requesting a payout.
• Support communications: content of emails or messages you send to our support team, or reports of content/user violations.

3.2. Device & usage data

• Device identifiers, operating system, app version, and package name.
• IP address, activity logs, crash reports, and diagnostic data.
• Usage data such as features used, interaction history (likes, comments, follows), and app open frequency.
• Push notification tokens (FCM/APNs) used to deliver notifications to your device.

3.3. Location data

We collect the country code you provide at sign-up to localize content, comply with regional regulations, and recommend relevant Creators and content. We do not collect precise GPS location unless a future feature requires it and you give explicit consent.

3.4. Cookies and similar technologies

Our website and App may use cookies, local storage, and similar technologies to maintain your login session, remember your language preference, and analyze usage performance. You can manage cookies through your browser or device settings.

4. How We Use Information

• Provide, operate, and maintain core features: posting, livestreaming, messaging, calling, and gifting.
• Create and manage accounts, verify Creator/Agency identity, and prevent fake or fraudulent accounts.
• Process Coin transactions: top-ups, debiting/crediting Coin for gifts, paid calls or messages, exclusive content purchases, and payouts.
• Display public profiles, recommend Creators, and personalize search results and content.
• Send transactional notifications, service updates, safety alerts, and (where permitted) promotional communications.
• Analyze usage data to improve the product and diagnose and fix technical issues.
• Moderate content (including automated AI-based NSFW scanning) and handle violation reports.
• Comply with legal obligations, enforce our Terms of Service, and protect the rights and safety of our users.

5. Sharing & Disclosure of Data

We do not sell your personal data. We only share information in the following limited circumstances:

• Service providers: infrastructure partners such as cloud hosting, livestreaming/CDN (Cloudflare), payment processing, and push notification delivery (Firebase). These providers only access data necessary to perform their function and are contractually obligated to protect it.
• Other Creators/users: public profile information (name, avatar, bio, public posts) is shown to other users according to the visibility settings you choose.
• Agencies: if you register as a Creator under an Agency's management, certain payout-related transaction data may be recorded in our internal commission reconciliation system.
• Legal & safety: when required by law, legal process, or government request, or to prevent fraud or serious harm.
• Business transfers: in the event of a merger, acquisition, or restructuring, user data may be transferred as a business asset (we will notify you where required by law).

6. eKYC Verification & Facial Data

Applies only to Creators & Agencies

6.1 What we collect

When you apply to become a Creator or Agency, we collect a photo of your government-issued ID and a selfie photo (face) that you voluntarily upload for identity verification (eKYC). We do not collect 3D biometric maps, facial scan videos, or any other form of advanced biometric data.

6.2 Purpose of use

Verification data is used solely to confirm your identity, prevent fake or fraudulent accounts, and meet legal compliance requirements related to payouts. This data is never used for advertising or unrelated analytics purposes.

6.3 Sharing with third parties

We do not share eKYC/facial data with third parties, except where required by law to disclose it to government authorities.

6.4 Storage & security

eKYC data is processed on secure servers and encrypted both in transit and at rest. Only authorized personnel may access it.

6.5 Retention period

eKYC data is retained for as long as your Creator/Agency account remains active, and at minimum for the retention period required for financial transaction records under applicable law. You may request deletion by contacting sovi.social@gmail.com; we will honor such requests unless we are legally required to retain the data (for example, financial transaction records or anti-money-laundering obligations).

7. Coin, Gift & Transaction Data

SOVI operates an internal virtual-economy system based on Coin. We record a Coin transaction history (append-only) that includes: Coin top-ups, gifts sent/received, per-minute call fees, messaging fees, exclusive content purchases, subscription package purchases, and payout requests.

Financial transaction data is stored on an append-only basis to preserve data integrity and support auditing. It cannot be unilaterally edited or deleted by users, except where required by applicable law.

8. Data Retention

We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

If you delete your account, we will delete your profile and account data within a reasonable period, except for information we are required to retain to comply with legal obligations (e.g., financial transaction records, eKYC records under anti-money-laundering regulations), prevent fraud, or enforce our Terms of Service.

9. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data (subject to legal limitations).
• Objection/Restriction: object to or request restriction of certain processing activities.
• Data portability: request that your data be transferred to another service in a commonly used format (where applicable).
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact sovi.social@gmail.com. We may need to verify your identity before processing your request.

10. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data, including HTTPS/TLS encryption in transit and encryption of sensitive data at rest (e.g., bank account details, eKYC data). However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Child Safety & Prohibited Content

SOVI is committed to protecting children and maintaining the highest safety standards for our users. The following rules are strictly enforced:

• SOVI is intended solely for users aged 18 and older. We do not knowingly collect, request, or store information from minors.
• Any content, behavior, or communication that facilitates or promotes child sexual abuse or exploitation (CSAE) is strictly and absolutely prohibited on our platform.
• We actively monitor reported content and behavior. When a violation is identified, we will:
  • Remove the content immediately
  • Suspend or terminate the violating account
  • Report the incident to law enforcement and relevant child-protection organizations
• SOVI complies with all applicable laws relating to child protection and is committed to cooperating with law enforcement agencies in investigating and addressing CSAE-related violations.

12. International Data Transfers

SOVI currently serves users in Vietnam, Indonesia, and the Philippines. Your data may be processed or stored in a country different from your country of residence, through our global cloud infrastructure and CDN. Where necessary, we apply appropriate safeguards for cross-border data transfers in accordance with applicable law.

13. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email and update the "Effective date" at the top of this page. We encourage you to review this page periodically.

15. Contact Us