Privacy Policy

Last updated: July 30, 2026

Wandvo ("we", "our", or "us") is operated from Puerto Rico, United States. This Privacy Policy explains how we collect, use, and protect your information when you use the Wandvo mobile application and website at wandvo.app.

By using Wandvo you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account Information

Username, email address, and password (stored as a bcrypt hash — we never store plain-text passwords)
Country, age, bio, and interests you add to your profile
Profile photo (stored as an image on our servers)
Google account ID and public profile photo if you sign in with Google

Content You Create

Posts, photos, and comments you publish
Direct messages sent to mutual friends
Live stream sessions (title, category, duration)
Virtual gifts sent and received

Technical Information

IP address (used for rate limiting and abuse prevention — not stored permanently)
Device type and operating system (sent by your browser/app)
Session tokens (JWT) stored locally on your device

Video & Audio

Video and audio during random video chats are transmitted peer-to-peer (WebRTC) directly between users. We do not record, store, or have access to your video or audio content.

Live stream clips: viewers of a live broadcast may record short clips (up to ~20 seconds) directly on their own device/browser. Wandvo does not store, host, or have access to these clips — the recording and any subsequent sharing to other apps happens entirely on the viewer's device, outside our servers.

2. How We Use Your Information

To create and manage your account
To match you with other users for video chat
To display your profile to other users
To send 2-factor authentication codes via email
To process virtual coin transactions and creator earnings
To moderate content and enforce Community Guidelines
To respond to reports and handle account issues
To improve the app and fix technical issues

3. Third-Party Services

Supabase — database hosting (PostgreSQL). Your data is stored on Supabase servers. Supabase Privacy Policy
Google OAuth 2.0 — optional sign-in with Google. Google Privacy Policy
Sightengine — automated image moderation to detect inappropriate content in uploaded photos. Images are sent to Sightengine for analysis and are not stored by them. Sightengine Privacy Policy
Stripe — payment processor for coin and subscription purchases (Stripe Checkout), identity and age verification for creators who monetize (Stripe Identity), and creator payouts (Stripe Connect). Your card number, ID document, verification selfie, and the bank/tax information required to receive payouts are sent directly to Stripe and processed under its own privacy policy — Wandvo does not receive or store your ID document, your selfie, your full card number, or your bank account details. Stripe Privacy Policy
STUN/TURN servers — used to establish peer-to-peer video connections. No content is stored.

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only:

With service providers listed above (only as needed to operate the app)
When required by law or valid legal process
To protect the safety of our users or the public
With the National Center for Missing & Exploited Children (NCMEC) and law enforcement: pursuant to U.S. federal law (18 U.S.C. § 2258A), we report all suspected child sexual exploitation material detected on the platform, including incident and account data

5. Data Retention

Your account data is retained as long as your account is active
Deleted posts and messages are removed from our database immediately
When you delete your account, your personal data is permanently deleted within 30 days

6. Children's Privacy (COPPA) and Child Safety

Wandvo is intended exclusively for users 18 years of age or older. We do not knowingly permit registration by users under 18 years of age. If we discover that a user is under 18, we will delete their account immediately. If you believe a minor has created an account, please contact us at support@wandvo.app.

We use automated image moderation on all uploaded content. Any suspected child sexual abuse material (CSAM) is immediately blocked and reported to NCMEC's CyberTipline pursuant to U.S. federal law (18 U.S.C. § 2258A), along with associated account and incident data. These incidents are retained as required by law and we cooperate fully with law enforcement.

7. Security

We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, JWT authentication tokens, and rate limiting. However, no system is 100% secure and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

Access — request a copy of your personal data
Correction — update incorrect information via your profile settings
Deletion — request deletion of your account and data
Portability — request your data in a portable format

To exercise these rights, contact us at support@wandvo.app.

9. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Puerto Rico and the United States of America. Any disputes shall be resolved in the courts of Puerto Rico.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via the app or email. Continued use of Wandvo after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:
📧 support@wandvo.app
🌐 wandvo.app