Effective date: 12, 12, 2025

UFOC (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains what we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have.

If you do not agree with this Policy, please do not use the platform.

1) Who we are & scope:

This Policy applies to the UFOC mobile apps and website, including related services, features, and support channels (the “Service”).

Contact: [email protected]

Address: 1762 Oakland St, Petersburg, VA 23805, USA

2) What we collect:

A. You provide

Account & profile: username, display name, email, phone (optional), profile photo, bio, date of birth, country/state.

Content: videos, comments, likes, votes, category choices, reports/flags.

Support: messages you send us (including through GoHighLevel forms/CRM).

Age-gating: confirmations for 18+ categories (must be 18+).

B. Collected automatically:

Device & usage: app version, device/OS, IP address, timestamps, in-app events needed to operate the Service and protect against abuse (via Firebase/App Check).

Transaction metadata: purchase receipts/identifiers from Apple App Store or Google Play; payment intent/receipt IDs from Stripe for web purchases. (We do not store full card numbers.)

C. From others:

Payment processors and app stores: Apple, Google, Stripe send us payment confirmations and fraud/risk signals.

Users: when other users interact with your profile/content or report content.

3) Why we use your data (purposes):

Operate the Service: authenticate users (Firebase Auth), host data (Firestore/Storage), secure access (App Check), run server logic (Cloud Functions).

Run competitions & social features: display profiles and videos, enable likes/votes/comments, show categories/leaderboards where applicable.

Payments & credits/tokens: process purchases (Apple/Google/Stripe), maintain balances, detect/handle fraud/chargebacks.

Moderation & safety: enforce community rules, respond to reports, remove illegal or harmful content, and act on repeat violations.

Communications & support: send necessary service messages (e.g., receipts, policy changes, safety alerts) and reply to support requests in GoHighLevel.

Legal & compliance: age-gating for 18+ sections, state-law restrictions, audit logs, preventing misuse.

No targeted advertising today: We do not sell or “share” personal data for cross-context behavioral advertising. If this changes, we will update this Policy and provide any required opt-outs.

4) Legal bases (GDPR/UK GDPR):

Were applicable, rely on:

Contract: to provide the Service you request.

Legitimate interests: keep the platform safe, prevent abuse, and improve core reliability.

Consent: where required (e.g., age confirmations, certain optional features).

Legal obligation: tax, accounting, law enforcement requests, and geography-based restrictions.

5) How we share information:

We share only as needed to run the Service:

Infrastructure: Google Firebase (Auth, Firestore, Storage, App Check, Cloud Functions).

Payments: Apple App Store, Google Play Billing, Stripe (web). They process payments and provide us receipt/transaction metadata.

CRM/Support: GoHighLevel (contact forms, ticketing, basic communications).

Moderation & safety: service providers that help detect spam/abuse if integrated in the future; and competent authorities when legally required.

Corporate/transactional: if we undergo a merger, acquisition, or asset sale, data may transfer under this same Policy.

We do not sell personal data.

6) Data security:

Firebase encrypts data in transit and at rest by default.

We use App Check, auth protections, role-based access (security rules), and least-privilege principles.

No method is 100% secure; report concerns to [email protected].

7) Data retention:

Account & profile: kept while your account is active.

Content (videos, comments, votes): kept until you delete it or delete your account, subject to backup/archival retention for a limited period.

Transactions & fraud logs: retained as required by law (e.g., tax/accounting and platform dispute windows).

Reports/moderation records: kept as long as necessary to enforce platform safety.

When you delete your account, we permanently remove your personal data from active systems, except where we must retain some information to meet legal, compliance, or fraud-prevention obligations.

Some caches/backups may persist briefly before automatic purge.

8) Your rights:

Depending on your location, you may have the right to:

Access and port your data.

Correct inaccurate data.

Delete your data (or your entire account). Account deletion is permanent and cannot be recovered.

Object or restrict certain processing.

Opt out of sale/sharing (we don’t sell/share) and certain profiling where applicable.

To exercise rights, use in-app controls (profile/settings) or contact [email protected]. We’ll verify your request. Agents may submit requests with proper authorization.

Parents/Guardians: For users under 18, a parent/guardian can request deletion of the child’s account and data.

9) Children & age-gating:

UFOC is for users 13+. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the Service, contact us to delete the account.

18+ categories require that the user is 18+, verified through in-app flows. No minors may access or upload to 18+ sections.

We comply with COPPA where applicable and avoid knowingly collecting children’s data without required consent.

10) International transfers:

We process data primarily in the United States. If you are in the EEA/UK or other regions, your data may be transferred to countries that may not provide the same level of protection. We rely on appropriate safeguards with our processors (e.g., Standard Contractual Clauses) when required.

11) Cookies & tracking:

Mobile app: uses device identifiers and local storage necessary for authentication and basic operations. No targeted advertising SDKs.

Website: may use strictly necessary cookies (e.g., Stripe checkout) to complete payments. We do not use third-party advertising cookies.

12) Moderation & automated decisions:

We use a combination of:

User reporting tools,

Manual review, and

Automated signals (e.g., abuse/fraud indicators)

to detect policy violations. Repeated or severe violations can lead to content removal, account warnings, suspensions, or bans. You may appeal by contacting support.

13) State law notices (US):

For California and similar US state laws:

We do not sell or share personal data for cross-context behavioral advertising.

We honor deletion, access, and correction rights described above.

Sensitive data (e.g., age confirmations for 18+) is processed only for allowed purposes

(security/age-gating/compliance).

14) Changes to this Policy:

We may update this Policy. We’ll post the new version with a new “Effective date” and, where required, notify you in-app or by email. Your continued use means you accept the updates.

15) How to contact us:

Email: [email protected]

Address: 1762 Oakland St, Petersburg, VA 23805, USA