Goomooz Privacy Policy

Effective date: [31.08.2026] Operator: Digitseven LLC ("Goomooz," "we," "us") Contact: contact@goomooz.com

This policy explains what data we collect through the Goomooz app and goomooz.com, why we collect it, and what rights you have. Placeholders are marked [LIKE THIS] — fill before publishing.

1. What we collect

Account data. Email address, username, password (stored hashed), profile name, profile photo if you add one, and account type (standard, creator, business).

Content you submit. Text posts, replies, reels, guides, images, comments, likes, bookmarks, and anything else you upload or post. Public content is visible to other users and may be visible on public web pages (goomooz.com guide URLs).

Human verification (biometrics). At signup we ask your device to confirm you are a real person using its built-in biometric check (Face ID, Android BiometricPrompt). For creator and business badge verification we run an on-device liveness challenge. All biometric processing happens on your device. We never receive, store, or transmit your face data, fingerprint, or any biometric template. We store only a pass/fail flag.

Payment data. Premium subscriptions are billed through the Apple App Store or Google Play. We never see or store your card details; we receive only subscription status from the store.

Usage data. Device type, operating system, app version, language, approximate region (from IP), crash logs, and interaction events (views, watch time, swipes through guide steps, taps on links). We use this to run the service, fix problems, and understand which content works.

Creator submissions (goomooz.com/creators). If you submit the creator form we store your email, your channel URL, your consent to publish clipped excerpts with attribution, and a timestamped record of that consent.

Communications. Emails you send us and our replies.

What we do not collect. No precise GPS location. No contact list. No biometric data. No data sold to anyone, ever.

2. Why we process it (legal bases)

To provide the service — accounts, content hosting, feeds, guides, subscriptions (contract).
To keep the platform real and safe — human verification, abuse and spam prevention, enforcement of our Terms (legitimate interest / legal obligation).
To improve the product — aggregated usage analytics (legitimate interest).
To communicate with you — service messages, creator correspondence (contract / legitimate interest).
To comply with law — copyright notices (DMCA / EU DSA), tax, and record-keeping obligations (legal obligation).
With your consent — creator publishing consent, optional marketing emails. You can withdraw consent at any time.

3. Sharing

We share data only with:

Service providers that host and run Goomooz for us (hosting, video delivery/CDN, email delivery, crash reporting, analytics) — under contracts limiting use to our instructions. Current providers: [LIST — e.g. Hostinger, Hetzner, CDN, email provider].
App stores — subscription and purchase processing.
Other users / the public — anything you post publicly, including attribution on creator content.
Authorities — where legally required, or to respond to valid legal process, or to enforce our rights.
A buyer or successor — if Digitseven LLC is involved in a merger, acquisition, or asset sale; this policy will continue to apply.

We do not sell personal data and we do not share it with advertisers.

4. International transfers

Our providers may process data in the EU and the United States. Where data leaves the EEA we rely on Standard Contractual Clauses or an adequacy decision.

5. Retention

Account data: while your account exists, then deleted within [30] days of account deletion, except where law requires longer.
Content: until you delete it or your account; copies may persist briefly in backups.
Creator consent records: as long as your content remains on the platform, plus [3] years.
Copyright notices and counter-notices: [5] years (legal record).
Analytics: aggregated or deleted within [24] months.

6. Your rights

Depending on where you live (including under the GDPR), you can:

Access a copy of your data
Correct inaccurate data
Delete your data ("right to be forgotten")
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time
Complain to your local data protection authority

Exercise any right by emailing contact@goomooz.com. We respond within one month. You can delete your account directly in the app under Settings → Account → Delete account.

7. Children

Goomooz is not directed at children under 13, or the higher minimum age required in your country (up to 16 in some EU states). We do not knowingly collect data from anyone below the applicable age. If you believe a child has created an account, contact us and we will delete it.

8. Security

Passwords are hashed, connections are encrypted (TLS), access to production data is restricted, and biometric checks never leave your device. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority as required by law.

9. Cookies (website)

goomooz.com uses only essential cookies needed for the site to function[, plus analytics cookies if you accept them via the cookie banner]. No advertising cookies.

10. Automated decisions

Feed ranking and content recommendations are automated but have no legal or similarly significant effect on you. Human verification is a pass/fail device check; a failed check can be retried and reviewed by contacting us.

11. Changes

We may update this policy. Material changes will be announced in the app or by email before they take effect. The current version always lives at goomooz.com/privacy.

12. Contact

contact@goomooz.com