Privacy Policy

NotiSky Privacy Policy

Last updated: [DATE]

This Privacy Policy explains what information NotiSky ("we", "us", the "Service", operated by [Your Company / Legal Entity Name]) collects, how we use it, and the choices you have. By using NotiSky, you agree to the collection and use of information as described here.

1. Information We Collect

Account information: name, username, email address or phone number, password (stored hashed, never in plain text), and profile details you add (bio, links, photo).

Social login: if you sign in with Google, Apple, Facebook, or TikTok, we receive the basic profile identifier and email those providers share with us — we don't receive your password on those platforms.

Content you create: posts, photos, videos, stories, comments, reactions, marketplace listings, group messages, and direct messages.

Verification documents: if you request account verification, you submit a photo of a government-issued passport or ID card. This is used solely to confirm your identity for the verification badge, is stored securely, is visible only to you and to administrators reviewing the request, and is never shown to other users or included in any public profile data.

Wallet & payment-related information: coin balances, transaction history, ad-reward records, and — if you request a withdrawal — the payout details you provide (e.g. bank or mobile-money account information) so we can send your payout. We do not store full payment card numbers.

Usage & device information: app version, device type, IP address, and general engagement data (e.g. which features you use), used for security, abuse prevention, and improving the Service.

Push notification tokens: a device identifier used only to deliver notifications about activity on your account (reactions, comments, messages, order updates), managed via Firebase Cloud Messaging. You can stop receiving notifications by disabling them in your device settings or by signing out.

2. How We Use Information

To operate the Service: show your feed, deliver notifications, process marketplace orders, run voice/video calls, and process coin transactions and withdrawal requests.

To keep the Service safe: detect and prevent fraud, spam, and abuse; enforce our Terms of Service; respond to reports.

To communicate with you: respond to support requests, send account-related notices (e.g. password reset codes, order updates).

We do not sell your personal data to third parties.

3. Third-Party Services

NotiSky uses the following third-party services, each with its own privacy practices:

- Google AdMob — serves ads and rewarded-ad content; may process device/advertising identifiers per Google's own privacy policy.
- Firebase Cloud Messaging — delivers push notifications.
- Agora — powers voice and video calls; call audio/video is relayed through Agora's infrastructure but is not recorded or stored by NotiSky unless a call-recording feature is explicitly enabled and disclosed separately.
- Cloud storage providers (e.g. AWS S3, DigitalOcean Spaces, Backblaze B2, Google Cloud Storage, or Bunny.net, depending on which is configured) — store uploaded media (photos, videos, marketplace images, book/audiobook files).
- Social login providers (Google, Apple, Facebook, TikTok) — used only if you choose to sign in with them.

4. Your Choices & Rights

You can edit or delete most profile information directly in the app. You can request account deletion, which removes your profile and posts from public view (see the app's Account settings). Depending on your location, you may have additional rights under laws such as the GDPR (EU/UK) or CCPA (California) — including the right to access, correct, or request deletion of your data. To exercise these rights, contact us at [email protected].

5. Children's Privacy

NotiSky is not directed at children under 13 (or the minimum age required by your local law, if higher), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us at [email protected] and we will take steps to delete it.

6. Data Retention

We retain account and content data for as long as your account is active, and for a reasonable period after deletion to comply with legal obligations, resolve disputes, and enforce our agreements. Verification documents are retained only as long as needed to process and audit the verification decision.

7. Security

We use industry-standard measures (password hashing, encrypted secrets, access-controlled admin tools) to protect your information, but no system is 100% secure. If you believe your account has been compromised, contact us immediately.

8. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be reflected by an updated "Last updated" date above.

9. Contact Us

Questions about this policy or your data: [email protected]