VIV- We never sell your personal information.
- Your phone number is used to sign you in and is never shown on your profile.
- Chats are end-to-end encrypted. We cannot read them.
- We use your city for “Near you”. Your exact GPS location never leaves your phone.
- Posts expire when you choose, and you can delete your account at any time.
1. Who we are
VIV (“VIV”, “we”, “us”) is a social app operated by !Failure Studio, Okara, Punjab, Pakistan. We are responsible for the personal information processed through the VIV mobile app, vivpak.com and related services (together, the “Services”).
2. Information we collect
Information you give us
- Account information: your phone number (verified by a one-time code), username, display name, and optionally a profile photo and bio.
- Content you create: posts (text, photos and videos), captions, comments, likes, saves, Vibes, Promotions (including titles, descriptions, images, display prices, links and target cities) and the settings you choose for them, such as lifetime, audience and whether saving or comments are allowed.
- Messages: chat messages, voice notes, photos, videos and files you send. These are end-to-end encrypted (see Security); we cannot read their content.
- Social connections: who you follow, follow requests, who follows you, blocks and mutes, and Vibe streak and commitment status.
- Reports and support: information you include when you report content or a person, contact support, or tell us why you are deleting your account.
- Payments (if introduced): if we offer paid features, a payment provider processes your payment. We receive a transaction reference and status, never your full card details.
Information collected automatically
- Device and app information: device model, operating system, app version, language and a push-notification token so we can send you notifications.
- Usage information: how you use features, such as posts viewed, profiles you visit, Promotions you mark “I’m interested”, video watch time, follows, searches, and upload or delivery success and failure. We never include message content, phone numbers, exact location or private media in these events.
- Diagnostics: crash reports and performance data that help us fix bugs.
- Website analytics: on vivpak.com we use Vercel Web Analytics and Speed Insights to count visits and measure page performance. They do not use cookies and do not identify you personally; they collect information such as the page visited, referrer, country, browser, device type and loading times.
- Log information: IP address, timestamps and request information our servers record for security and abuse prevention.
3. Device permissions
VIV only asks for a permission when a feature needs it. You can turn permissions off at any time in your phone's settings; the related feature will simply stop working.
| Permission | What we use it for |
|---|---|
| Location | To work out your city on your phone for “Near you” and local Promotions. Only the city name is sent to us; exact coordinates never leave your device. You can choose “Don't use my city” at any time. |
| Contacts | Only if you tap Find friends and allow it. We upload your contacts' phone numbers in a protected (hashed) form to find friends who use VIV, at most once every seven days. If you also choose Include names, the names you saved are stored privately for your account so chats show the names you know. Names are never shown to anyone else. |
| Camera & microphone | To take photos and videos, record Vibes and voice notes, and use camera Lenses. |
| Photos & media | To pick photos and videos to post or send, and to save media you choose to download. |
| Notifications | To tell you about new messages, Vibes, follows and activity. Message notifications never include message content in the push payload sent through our servers. |
4. How we use information
- To create and secure your account and sign you in.
- To provide the Services: show feeds, deliver messages, run Vibes and Promotions, and expire posts on time.
- To personalise what you see, such as people you may know, local Promotions and your For You feed.
- To keep VIV safe: detect spam, fraud and abuse, review reports, enforce our Terms and Community Guidelines, and protect children.
- To communicate with you about your account, security and updates.
- To understand and improve performance and fix problems.
- To comply with law and respond to valid legal requests.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a safe and useful service, your consent (for example, contacts and location, which you can withdraw), and our legal obligations.
5. What other people can see
- Your username, display name, profile photo and bio are visible to others. Your phone number is not.
- On a public account, posts with a Public audience can be seen by anyone on VIV until they expire. On a private account, followers-only content is visible only to followers you approve.
- If you turn on Allow saving for a post (off by default), approved followers can keep a private copy in their Saved. That copy can remain after your post expires, until you delete the post, they unfollow, or either of you blocks the other.
- Profile views: when you visit someone’s profile, they can see that you viewed it, unless you turn on Browse profiles anonymously in Settings → Privacy. With it on, your visits are not recorded or shown, you can’t see who viewed your profile, and previously stored visits to your profile are deleted.
- Nearby: if your account is public and you have a saved city, you may be shown to people in the same city in Discover. This is on by default for new public accounts; turn off Show me in Nearby in Settings → Privacy at any time. Private accounts are not shown in Nearby unless you choose to be.
- Promotions: the number of people who tapped “I’m interested” on a Promotion is shown on it.
- People who have your number saved in their phone may see you suggested as a contact, and may see their own saved name for you.
- Promotions are public and shown to people in the cities you target.
- Anyone who can see your content can take a screenshot or recording of it. We block screenshots of view-once media on Android where the system allows it; iPhone does not allow apps to block screenshots.
6. How we share information
We do not sell your personal information. We share it only as described here:
- Service providers who process data for us under contract, including Google Firebase (phone sign-in and push notifications), Supabase (database and file storage), Snap Inc. Camera Kit (camera Lenses), Shorebird (app updates), and hosting, content-delivery and crash-reporting providers. They may only use the data to provide services to us.
- Payment providers, if paid features are introduced, to process transactions.
- Legal and safety: when we believe in good faith it is required by law or necessary to protect someone's safety, prevent fraud or abuse, or protect VIV and its users. This includes reporting child sexual abuse material to the relevant authorities and organisations.
- Business transfers: if VIV is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal, subject to this policy.
- With your consent or at your direction, such as when you share a post outside VIV.
7. Promotions and ads
Promotions created by users and any ads we show are always labelled “Promoted” or “Sponsored”. Promotions are matched to people by the city they target. If we show ads, they may be chosen based on your city and activity inside VIV. We never use the content of your chats to target ads, and we will update this policy before introducing any third-party advertising partner that receives your data.
8. How long we keep data
| Data | Retention |
|---|---|
| Expired posts | Hidden from everyone when they expire; media is then removed by scheduled clean-up. Saved copies follow the rules in section 5. |
| Deleted posts & Promotions | Removed from feeds immediately; media deleted shortly after. |
| Chat messages | Our servers keep the encrypted message only until it is delivered to the recipient's device (or until delivery expires). Your chat history is stored encrypted on your own phone. |
| View-once media | Deleted from our servers after it is opened, or after a short expiry if never opened. |
| Encrypted chat backups (if you turn them on) | Kept until you replace or delete the backup or delete your account. If your backup exceeds your storage allowance, we notify you and may remove the excess after a three-month grace period. |
| Account information | For as long as your account is active. Deleted within 30 days after you delete your account. |
| Profile views | Kept to show “who viewed your profile”. Deleted when the visited person turns on anonymous browsing or deletes their account. |
| Reports and safety records | Up to 1 year, or longer where needed for an ongoing investigation or required by law. |
| Security logs & backups | Up to 90 days. |
9. Security
Chats use end-to-end encryption based on the audited Olm protocol (vodozemac). Encryption keys are kept in your phone's secure storage (Android Keystore / iOS Keychain) and your chat history is stored in an encrypted database on your device. Our servers only route encrypted messages and cannot read them.
Other data is protected with encryption in transit (HTTPS/TLS), access controls that limit each account to its own data, and restricted staff access. No system is perfectly secure, so please use a strong device passcode and keep your recovery key safe.
10. Your choices and rights
- Access and correct: view and edit your profile in the app at any time.
- Control visibility: switch between public and private, choose each post's audience and lifetime, control comments, saving and who can contact you.
- Location and contacts: turn them off in the app or your phone settings at any time.
- Delete: delete individual posts, or delete your whole account.
- Other rights: depending on where you live, you may have the right to request a copy of your data, object to or restrict processing, or complain to a data-protection authority. Email privacy@vivpak.com and we will respond within 30 days.
11. Children
VIV is not for children. You must be at least 13 years old to use VIV. We do not knowingly collect information from anyone under 13. If we learn that an account belongs to someone under 13, we delete it. If you believe a child is using VIV, contact safety@vivpak.com. Read our Child Safety Standards.
12. International transfers
VIV is operated from Pakistan, and our service providers may store or process data in other countries. When we transfer data, we use providers that apply appropriate safeguards.
13. Changes to this policy
We may update this policy as VIV grows. We will change the “Last updated” date above and, for significant changes, notify you in the app before they take effect.
14. Contact us
Questions or requests about privacy: