01Collection & purpose
We collect only what the service needs. Each category below states what it is and why it is necessary.
- Account data
- An account identifier, your date of birth and your display name — to create your account, enforce the 18+ age gate and keep you signed in. The identifier is a number generated at random on your device the first time you sign in; it is not derived from your device hardware, so it cannot be used to recognise you in another app or to rebuild your identity after you delete the account.
- Profile data
- Avatar, display name, bio, languages, region and the interests you pick from our list — to build your profile and to match you in Discover. We do not publish your date of birth and we do not ask for your address.
- Chat & interaction data
- Room messages, the images in them, and the rooms you host or join — to deliver, moderate and investigate safety incidents. Rooms carry live audio and video. In a community room your microphone is captured only while you hold a seat, and it stops the moment you leave it or mute yourself; in a creator room the host's video and audio are received only — this app cannot broadcast either. Both streams are carried live by our real-time provider (Agora) and are not screened before they reach you. One-to-one direct messages are different: they are carried and stored by our messaging provider (NetEase Yunxin). The connection is encrypted, but we can retrieve the content to review a report. The text of a direct message goes through the same keyword filter as room chat before it is sent; what is different is that no person has read it in advance. Images and voice notes are not screened before publication.
- Device data
- Device model, OS version, sign-in region and app version — for risk control, unusual sign-in detection and fixing faults.
- Transaction data
- App-store order references, coin amounts, gift records and your balance — for reconciliation, refund assistance and spend-cap enforcement. We never receive or store your card details.
- Safety data
- Reports you file, reports about you, moderation decisions, appeals, blocks and the evidence attached to a case.
02Retention & deletion
- Retention
- Each category is kept only as long as the purposes above require. Report evidence is kept no longer than 180 days.
- Moderation retention
- Material may be retained where a report or investigation needs it, for as long as the case needs it. Reviewers see only what the decision requires. Rooms are not sampled and there is no real-time patrol.
- Deletion
- You can delete your account yourself under
Account & security → Delete account. The screen
lists what happens before you confirm. Deletion runs
immediately — there is no cancellation window, and the
screen asks you to type a confirmation word first. Every record on the
device is wiped one by one, you are signed out of the messaging
service, and the device is unbound. What this does not do is
erase the account on our server. We have no account-closure
endpoint today, and because sign-in is by email address, our server
still finds the account by that address — signing in again with the
same address and password does reach the account. If you want the server-side
records gone as well, email us and we will remove them by hand.
Two things we cannot remove, stated plainly rather than left for you to assume. Messages other people sent you belong to them and cannot be deleted on their behalf. And the profile and balance rows held for the account on our server stay there — and, as above, they do still correspond to an account that can be signed into with the same email address and password. We are asking for a real deletion endpoint and will switch to it as soon as one exists; until then, email us and we remove those rows by hand. - Legal retention
- Payment records, risk-control records and security incident logs are retained as required by law, and are not shared during that period.
- Anonymisation
- Data used for statistics and safety-model improvement is de-identified so it cannot be linked directly to you.
04Your rights
- Access & correction
- View and correct your profile in Edit profile. For full access, open a privacy ticket under Help & feedback.
- Export
- Before deletion you can request a copy of your data from the deletion screen. The link there opens an email to us, and the export is produced by hand and sent back to you by email — there is nothing automated that generates a file. Ask before you delete; afterwards there is nothing left to export.
- Deletion
- You can request deletion to the extent applicable law allows — see section 2.
- Withdraw consent
- System permissions — camera, microphone and photo library — are reviewable and changeable at any time under Permissions. Some features stop working once the relevant permission is withdrawn. There are no notification settings there: this version sends no notifications.
- Complaints
- For privacy matters write to sorenperalta262@icloud.com, or file a complaint with your local data-protection authority. Depending on where you live you may also have the right to object to certain processing or to have it restricted.
05Versions
- Version log
- This policy's version, effective date and change summary are kept in the app, together with the record of your acceptance.
- Change notice
- A version change is what carries the notice: the app compares the version you accepted against the current one and asks you to accept again before your next interaction. That is the mechanism — we do not have a channel that pushes an announcement to you ahead of it.
06Contact
| Privacy requests, safety reports, account help | sorenperalta262@icloud.com |
|---|
Wesala is not an emergency service. If you are in immediate danger, contact your local emergency number first.