1 Information We Collect

We collect information to provide, personalize, and improve NPC Social's multi-algorithm feed experience, social features, and creator tools. The types of information we collect include:

a) Information You Provide Directly

• Name, username, display name, biography, profile photo, and other profile customization details
• Email address, phone number, and login credentials (including third-party authentication tokens from Apple, Google, or other sign-in providers)
• Photos, videos, stories, comments, captions, hashtags, and any other user-generated content you upload or share
• Messages, group chat content, and communication data exchanged through NPC Social's messaging features
• Audio/video call initiation data, call duration, and participant information
• Preferences for feed customization, dynamic feed icons, and feed theme configurations
• Feedback, support requests, and survey responses submitted to us

b) Information Collected Automatically

• Device information including model, operating system, OS version, unique device identifiers (e.g., IDFA, IDFV), and hardware specifications
• IP address and approximate geographic location derived from your IP (we do not collect precise GPS location unless explicitly authorized)
• App usage analytics: which algorithmic feeds you browse, horizontal/vertical swipe patterns, session duration, content interaction data (likes, comments, reposts, saves, shares), and feature engagement metrics
• Follower/following activity, friend connections, and social graph data
• Search queries, hashtag usage, and trending content interaction data
• Crash reports, error logs, diagnostic data, and app performance metrics
• Referral sources, install attribution, and advertising identifiers (where permitted)

c) Information from Third Parties

• Information received when you sign in via third-party authentication providers (e.g., Apple Sign In, Google Sign In)
• Analytics and attribution data from integrated third-party analytics services
• Content moderation signals from third-party safety and security providers

2 How We Use Your Information

Your information is used to power NPC Social's core features and deliver a personalized, multi-algorithm social experience. Specifically, we use your information to:

• Create, authenticate, and manage your user account and profile
• Deliver and personalize multiple algorithmic content feeds tailored to your interests, mood, community engagement, and social connections
• Power the Friends Algorithm feed to surface content from people you follow and interact with most
• Enable content uploading, sharing, and discovery — including short-form videos, photos, stories, live streams, and music-related content
• Facilitate real-time one-to-one and group messaging, audio calls, and video calls
• Provide search, hashtag discovery, trending creators, and trending video recommendations
• Operate and improve our music discovery section, including artist, track, and playlist recommendations
• Enable live streaming features and creator engagement tools
• Detect, prevent, and address fraud, abuse, spam, harassment, illegal activity, and violations of our Community Guidelines and Terms of Service
• Send push notifications, in-app messages, and email communications about account activity, security alerts, feature updates, and (where opted in) promotional content
• Analyze platform trends, usage patterns, and performance to improve app functionality, UI/UX, and scalability
• Provide customer support and respond to user inquiries
• Comply with legal obligations and enforce our terms

3 User Generated Content

NPC Social is built around user-generated content. Our platform enables users to upload and share videos, photos, stories, comments, messages, captions, hashtags, and other creative content.

You are solely responsible for the content you upload and share. All content must comply with applicable laws, our Community Guidelines, and our Terms of Service. We reserve the right to remove content that violates our policies and to suspend or terminate accounts engaged in repeated or severe violations.

4 Messaging and Calls

NPC Social includes real-time messaging, audio calling, and video calling features designed to keep you connected with friends and communities.

• One-to-one and group text messaging with support for media sharing (photos, videos, links)
• Audio and video calling between NPC Social users
• Communications are processed through secure third-party infrastructure providers that meet industry-standard security requirements
• We collect call metadata (e.g., call initiation time, duration, participants) for service operation, quality monitoring, and abuse prevention — not call content

5 Sharing of Information

We do not sell your personal data. We may share limited information with the following categories of recipients only as necessary to operate and improve the platform:

6 Advertising and Analytics

NPC Social may display advertisements and sponsored content within the app. Advertising supports the free operation of our platform and creator economy features.

• Ads may be personalized based on your in-app activity, content preferences, feed browsing behavior, and engagement patterns
• We may use Apple's SKAdNetwork or similar privacy-preserving attribution frameworks for ad measurement
• We do not use private message content, audio/video call content, or precise location data for advertising targeting
• You may limit ad personalization through your device settings (e.g., iOS Settings → Privacy & Security → Tracking)
• We use analytics services (e.g., Firebase Analytics, Mixpanel) to understand user engagement, measure feature adoption, and improve platform performance
• Analytics data is collected in aggregate form where possible to minimize individual identification

7 Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services. Specific retention periods include:

• Account information: retained for the duration of your active account plus a reasonable period after deletion to allow for account recovery and comply with legal obligations
• User-generated content: retained until deleted by you or until account deletion is processed
• Messages and call metadata: retained for the duration of your account unless individually deleted
• Analytics and log data: typically retained in identifiable form for up to 24 months, then anonymized or deleted
• Legal compliance data: retained as required by applicable law, regulation, or legal process

After account deletion is processed, we will delete or anonymize your personal data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal claims).

8 Data Security

We implement reasonable and appropriate technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Secure authentication mechanisms including support for multi-factor authentication
• Regular security assessments, vulnerability testing, and code reviews
• Access controls limiting employee access to personal data on a need-to-know basis
• Incident response procedures for identifying and addressing security breaches

9 User Controls and Rights

NPC Social provides you with meaningful control over your personal information. You may exercise the following rights at any time:

• Edit or update your profile information, display name, username, bio, and profile photo
• Customize your algorithmic feed preferences, dynamic feed icons, and feed themes
• Delete individual pieces of uploaded content (videos, photos, stories, comments)
• Block, mute, restrict, or report other users
• Manage notification preferences and communication settings
• Control who can message you, view your content, or interact with your profile
• Download a copy of your personal data (data portability)
• Request complete deletion of your account and associated personal data
• Opt out of personalized advertising through your device privacy settings
• Withdraw consent for optional data processing activities at any time

To exercise any of these rights, you may use the in-app settings or contact us at Greyson.Penn@gmail.com. We will respond to valid requests within the timeframe required by applicable law.

10 Children's Privacy

NPC Social is not intended for children under the age of 13 (or the minimum age required by applicable law in your jurisdiction, such as 16 in the EEA under GDPR).

• We do not knowingly collect personal information from children below the applicable minimum age without verifiable parental or guardian consent
• If we discover that we have collected personal information from a child without appropriate consent, we will take prompt steps to delete that information
• If you believe a child under the applicable minimum age is using NPC Social, please contact us immediately so we can investigate and take appropriate action
• We employ age-gating mechanisms during account registration to help prevent underage users from creating accounts

11 Third-Party Services

NPC Social integrates with third-party services to power various platform features. These integrations may include:

• Cloud storage and content delivery networks for hosting user-generated content
• Push notification delivery services (Apple Push Notification Service, Firebase Cloud Messaging)
• Authentication providers (Apple Sign In, Google Sign In) for secure account access
• Analytics and crash reporting tools for app performance monitoring
• Content moderation and safety APIs for policy enforcement
• Media processing services for video transcoding, thumbnail generation, and image optimization
• Music licensing and streaming services integrated into the music discovery section
• Payment processing services for creator monetization features (where applicable)

These third-party services may collect and process data according to their own privacy policies, which we encourage you to review. We select third-party partners that demonstrate adequate data protection practices, but we are not responsible for their privacy practices.

12 International Data Transfers

NPC Social operates globally, and your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction.

• We implement appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission where applicable
• We ensure that our third-party service providers maintain adequate data protection measures regardless of where data is processed
• By using NPC Social, you acknowledge and consent to the transfer of your information to jurisdictions outside your country of residence

13 Account Deletion

You may request deletion of your NPC Social account and all associated personal data at any time through the following methods:

• In-App: Navigate to Settings → Account → Delete Account and follow the on-screen instructions
• Email: Send a deletion request to Greyson.Penn@gmail.com from the email address associated with your account

Upon receiving a valid deletion request:

• We will verify your identity to prevent unauthorized account deletion
• Your account will be deactivated immediately and scheduled for permanent deletion
• A grace period of up to 30 days is provided during which you may cancel the deletion and restore your account
• After the grace period, your personal data will be permanently deleted within 90 days, except where retention is required by law
• Content you shared publicly that was reposted, shared, or downloaded by other users prior to deletion may remain accessible
• Anonymized or aggregated data derived from your usage may be retained for analytics and platform improvement purposes

14 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. If this changes, we will provide a clear opt-out mechanism
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Limit Use of Sensitive Personal Information: Where applicable, you may limit how we use sensitive personal information

To exercise these rights, contact us at Greyson.Penn@gmail.com. We will verify your identity and respond within 45 days as required by law.

15 EEA / UK User Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restriction of Processing: Request that we limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including profiling for personalized content recommendations
• Rights Related to Automated Decision-Making: Request human review of decisions made solely through automated processing that significantly affect you

Our legal bases for processing your personal data include: performance of our contract with you (Terms of Service), your consent, our legitimate interests (platform improvement, security, fraud prevention), and compliance with legal obligations.

You may also lodge a complaint with your local data protection supervisory authority.

16 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make changes:

• We will update the "Effective Date" at the top of this policy
• For material changes, we will provide notice through the app (e.g., in-app notification, banner) and/or via email to the address associated with your account
• Continued use of NPC Social after the updated policy takes effect constitutes your acceptance of the revised terms
• If you do not agree with any changes, you should discontinue use of the platform and request account deletion

17 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries from EEA/UK residents, please include "GDPR Request" in your email subject line to ensure timely processing.