Privacy

When you sign up we ask for four things and derive one more.

• Your name, which is private. Nobody in a room sees it.
• Your email address, used to sign in and to reset a password.
• Your date of birth, used to decide whether your account is restricted.
• Your country, and your state if you add it.

Your username is suggested when you join, is yours to choose, and is shown publicly. Your nickname, picture, cover photo, bio and bubble colour are yours to set and are shown publicly too.

If you add a WhatsApp or Telegram link, we store it. Contact links are only ever shown to somebody else when you have consented and, if you are under 18, never at all.

You verify by looking into your camera. Amazon Web Services checks that a real person is there, estimates your age, and keeps a face code so it can tell when two accounts belong to the same person. We never keep a photo.

• Several accounts with the same face are allowed. They are linked, and a new account linked to a banned one is banned until you appeal.
• If your face looks under 18, 18+ features stay locked until you appeal, whatever date of birth you gave.

By starting the check you agree to this.

Messages you send, with the pictures and voice notes in them, rooms you have been in, coins you have bought and spent, gifts sent and received, reports you file, and moderation decisions about your account.

Photos you upload: your profile photo, your cover photo, up to six more on your profile and, if you subscribe, a wallpaper for your direct messages. Each is checked before anybody else can see it.

Who looked at your profile in the last 30 days, and whose profiles you looked at. Whose profiles you liked, and who liked yours.

What you ask HoneyBee in the help chat, and its answers, kept for 30 days. Each time you open that chat it starts afresh.

If you allow notifications, a token that lets us send them to your phone or browser. A record of the device you are signed in on, because an account is signed in on one device at a time.

The app also keeps your recent chats on your own phone so they open without a connection, and your last five searches. Signing out removes the chats.

If your account is blocked from registering again for declaring an age under 13, we keep a record of the device so the block holds.

• Messages are deleted after 30 days. That is a product decision, not a maximum.
• A message that has been reported is kept for 90 days from the report, so the report can be looked at and appealed.
• Moderation records are kept for as long as the account exists, because an appeal needs them.
• Payment records are kept as long as the law requires.
• If an account was banned, we keep its face code for 12 months after it is deleted, so the ban holds.
• When you delete your account it is hidden at once and removed after 30 days, with the photos and files you uploaded. Signing in during those 30 days cancels it.

These services run parts of FugaSpot, and each one sees only its own part.

• Vercel, which hosts the website and the server the app talks to.
• Supabase, which stores the database and handles sign-in.
• Cloudflare, which stores uploaded pictures and voice notes, runs the check that tells a person from a bot when you sign up, reset a password or ask for another confirmation email, and turns voice notes into text so they can be checked for abuse.
• Centrifugo on Fly, which delivers messages to rooms in real time and runs the Brain Teasers game clock. Its servers are in Frankfurt.
• OpenAI, which reads the text of messages to check them for abuse, and writes HoneyBee’s replies in Brain Teasers rooms. It is sent the message, not your name or email address.
• Google Safe Browsing, which checks links posted in chats against known harmful sites.
• Klipy, which supplies stickers and GIFs. Your phone asks Klipy for them directly when you open the picker.
• Nomba, which gives you an account number to pay into when you buy coins by bank transfer.
• Amazon Web Services, which checks your face when you verify. It keeps a face code, not the photo.
• Google Firebase, which delivers notifications to the Android app. It is sent the notification and a token for your phone.
• Resend, which sends our emails: the one that confirms your address and the one that resets a password.

If you pay by transfer to our own bank account instead, we read the bank’s credit alert in our email to confirm the payment.

If you sign in with Google, Google tells us your name and email address. We do not sell anything about you to anybody, and there is no advertising from anyone else on FugaSpot. We may tell you about products from Premeval, the business that runs FugaSpot.

Some of these run outside Nigeria and outside the country you may be in, so your data leaves it to reach them.

Under the Nigeria Data Protection Act 2023 you can ask what we hold about you, ask for it to be corrected, ask for a copy, and ask for it to be deleted. You can delete your account yourself at any time, from your profile in the app: how deleting your account works.

You can ask for the same wherever you live. Anything else, write to team@premeval.com and we will answer.

We disclose account information to law enforcement when we are legally required to, and when we believe somebody is in immediate danger. Content involving the sexual abuse of a child is reported without waiting to be asked.